Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/gEEujvRXufmsjgTmstu1Zbbnfs0.roa
File: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (raw, json)
Hash identifier: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=
Subject key identifier: 80:41:2E:8E:F4:57:B9:F9:AC:8E:04:E6:B2:DB:B5:65:B6:E7:7E:CD
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F8A0AD97A6579B47E2B4D5D93F784
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/gEEujvRXufmsjgTmstu1Zbbnfs0.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2088
IP address blocks: 193.51.58.0/24 maxlen: 24
193.54.33.0/24 maxlen: 24
193.55.5.0/24 maxlen: 24
194.254.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8a:0a:d9:7a:65:79:b4:7e:2b:4d:5d:93:f7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80412e8ef457b9f9ac8e04e6b2dbb565b6e77ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:ca:cf:b3:45:65:1c:c6:a5:8b:bf:8d:9f:
e9:a2:46:fd:9d:c3:f8:16:b1:c7:f3:15:3d:66:99:
99:3f:73:d3:eb:ce:28:e7:e3:66:a9:6d:1e:06:a9:
4b:af:80:76:8c:95:93:5e:70:9f:40:76:bd:fa:d2:
b5:72:f4:be:21:96:c9:8b:59:12:39:80:7d:70:33:
6a:79:e3:22:68:38:2e:37:27:09:63:76:ed:bc:57:
6b:84:bf:ae:d9:0b:4d:74:9f:6e:fe:c7:e3:9d:03:
5a:43:32:c1:80:95:c3:c5:18:9b:c0:04:3f:d6:a6:
c4:62:e7:17:4a:98:9e:ca:73:2d:da:5d:38:22:54:
38:08:d9:87:c8:c7:89:9e:de:a4:c4:0f:9b:3c:d1:
51:24:97:0d:e0:ac:4a:8e:e9:df:d1:94:58:9b:d5:
f3:fc:c4:ba:52:bb:2e:14:e3:e3:56:c6:cb:ac:ac:
73:78:76:e1:49:54:c9:2d:d4:19:f2:4f:45:f9:72:
49:c3:d0:59:4f:30:08:12:e7:c4:16:82:ce:d2:f7:
0a:96:7e:43:ae:8f:ca:ae:d0:15:17:3a:e6:04:1b:
a4:cf:a6:7f:33:40:a1:a6:e2:60:22:17:11:6e:2e:
06:75:ac:85:12:3e:f3:cb:61:bb:78:74:a7:d6:67:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:2E:8E:F4:57:B9:F9:AC:8E:04:E6:B2:DB:B5:65:B6:E7:7E:CD
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/gEEujvRXufmsjgTmstu1Zbbnfs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.51.58.0/24
193.54.33.0/24
193.55.5.0/24
194.254.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:72:bc:52:a6:12:4d:63:4e:eb:f2:01:b7:25:64:ab:54:4f:
67:d7:01:f8:ce:98:c2:1c:32:c8:62:57:0b:3a:10:bb:5a:25:
49:cd:11:1b:0e:2d:7f:be:6a:e0:e1:72:6b:aa:41:69:d7:33:
e7:c5:66:5f:42:1d:75:ab:41:69:ee:03:d9:4e:8f:cf:88:7c:
6b:12:79:cf:38:dd:06:3f:b8:4e:d0:95:08:f4:d2:1d:9c:85:
fd:9d:b0:9d:f5:2c:00:4c:60:f7:98:40:7c:5f:2a:0f:62:1e:
16:b0:4d:fd:cd:ba:fb:03:dd:f9:8d:78:2a:87:c9:60:bd:b5:
88:82:73:29:fe:64:27:1a:ac:ef:ec:ad:99:d1:33:05:35:ec:
ee:6f:57:59:b0:f5:7e:f0:68:17:d1:fb:75:ac:03:5b:e9:0c:
56:af:e3:06:94:d9:20:2a:db:55:b4:a4:c1:b9:01:c4:c8:d7:
d6:34:5a:30:e2:14:8e:5f:a9:43:c9:0e:de:9f:80:ec:44:c0:
8b:71:c6:b4:1d:b1:d1:95:2f:3d:c7:bb:40:dd:d4:fc:37:de:
29:3c:dc:41:22:e1:00:73:0b:ce:8d:ea:41:ab:6c:0a:03:4d:
9b:4e:62:94:35:cd:0a:62:25:f7:4c:d7:79:d3:63:39:24:86:
df:66:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:17 2025 by rpki-client