Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/hEjknnJNpRTS-Fn_xua20G61iFo.roa
File: hEjknnJNpRTS-Fn_xua20G61iFo.roa (raw, json)
Hash identifier: KjipElk/Xw3oiobuJ6dReVGkdCa06cXee6pklMf/SxE=
Subject key identifier: 84:48:E4:9E:72:4D:A5:14:D2:F8:59:FF:C6:E6:B6:D0:6E:B5:88:5A
Certificate issuer: /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial: 019421B1FB42BF7F409D2EA0EEA6F1050CCD
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/hEjknnJNpRTS-Fn_xua20G61iFo.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42598
IP address blocks: 194.55.4.0/24 maxlen: 24
194.55.5.0/24 maxlen: 24
194.55.6.0/24 maxlen: 24
2a0c:ca40::/29 maxlen: 29
2a0c:ca40:5::/48 maxlen: 48
2a0c:ca40:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fb:42:bf:7f:40:9d:2e:a0:ee:a6:f1:05:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8448e49e724da514d2f859ffc6e6b6d06eb5885a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:e9:08:77:0c:80:f5:ca:5d:cf:a4:fe:4d:
0d:a6:62:b5:8e:6f:46:9c:cc:1a:e0:b2:73:eb:78:
2a:ce:c0:8d:3a:4a:c0:2d:54:f9:84:41:dd:03:0f:
58:d5:2d:c2:37:84:59:91:dc:c1:52:d1:48:61:b6:
19:d2:58:bf:4a:a5:24:13:25:1b:3e:e7:68:89:49:
d0:7a:a8:de:0c:55:a6:dd:7b:85:1f:a0:fa:8d:c8:
91:17:ed:12:da:54:43:32:1f:70:05:ca:0c:a2:09:
5f:0d:0a:4e:5b:35:51:72:dc:01:5c:ed:b4:e8:66:
a7:c2:ad:cd:76:b2:7b:59:80:40:b1:ae:e3:c5:b6:
53:9b:da:4e:d4:9e:5c:3f:17:64:ff:2c:e8:10:45:
5f:fb:43:ec:06:18:90:c5:4a:60:61:6b:f9:e3:2f:
8e:b1:2c:a0:8f:b4:cc:01:0e:c2:d2:bf:87:94:3b:
6c:8c:fa:e3:3d:30:e7:c1:f3:ac:4e:f5:33:8e:fc:
40:46:0d:0d:e0:bb:c2:55:2a:1b:68:e2:3f:6e:f5:
e0:bc:83:b9:30:9c:61:cb:3f:a5:62:b8:14:d4:f7:
64:a5:94:66:fb:fb:06:ef:4a:1b:2b:f7:4a:f5:16:
08:94:46:5b:05:64:4b:14:b0:1f:8e:1a:3f:3a:d7:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:48:E4:9E:72:4D:A5:14:D2:F8:59:FF:C6:E6:B6:D0:6E:B5:88:5A
X509v3 Authority Key Identifier:
keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/hEjknnJNpRTS-Fn_xua20G61iFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.4.0-194.55.6.255
IPv6:
2a0c:ca40::/29
Signature Algorithm: sha256WithRSAEncryption
20:68:3d:eb:5a:0e:82:cf:b6:27:ce:3a:b0:9f:2f:eb:8c:e4:
db:c0:43:23:02:8a:76:6e:39:11:cf:ca:7b:e7:0d:b1:8b:12:
d7:29:50:85:58:76:7e:83:e7:f5:78:76:25:3b:c1:a9:18:98:
3c:c7:97:af:39:c4:b9:ff:ff:40:18:58:1b:e8:6b:5f:21:20:
18:9a:dc:8e:db:b1:fc:d7:e6:b5:49:24:25:03:c6:be:06:ea:
3f:a4:30:8e:38:3e:a4:ef:57:ea:f9:2e:3f:bc:25:d0:f8:a6:
eb:95:d1:0d:7f:93:be:17:90:3d:b2:bb:78:f7:5b:18:82:31:
7d:7d:01:52:43:1d:af:1d:f6:a2:97:8a:4a:36:b3:c8:ce:52:
ad:ee:97:fa:2c:67:f1:04:cf:83:14:74:88:de:c6:46:a9:58:
da:99:6f:ad:df:12:dc:3b:84:6b:a5:01:eb:34:8a:1e:02:4e:
28:6b:b8:6a:5c:86:de:a2:c3:d1:0a:23:1c:63:d7:73:b6:15:
1b:56:c2:f3:19:b9:62:4f:0d:f6:04:0d:db:b1:5c:76:03:fb:
d7:4a:33:1e:3f:73:14:78:8a:e6:ac:0d:0d:c1:bd:f0:75:bb:
c4:46:b8:dd:b1:d4:77:9a:a8:d7:16:a6:8c:f8:3e:c5:08:c6:
a4:c9:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:24 2025 by rpki-client