Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/67RitCBEehLxJhsm7693l29x0Rs.roa
File: 67RitCBEehLxJhsm7693l29x0Rs.roa (raw, json)
Hash identifier: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=
Subject key identifier: EB:B4:62:B4:20:44:7A:12:F1:26:1B:26:EF:AF:77:97:6F:71:D1:1B
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 0194258F4C4381EB8753548ACBD3CC7DCFE0
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/67RitCBEehLxJhsm7693l29x0Rs.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62040
IP address blocks: 185.49.240.0/24 maxlen: 24
185.49.241.0/24 maxlen: 24
185.49.242.0/24 maxlen: 24
185.49.243.0/24 maxlen: 24
193.176.80.0/24 maxlen: 24
193.176.83.0/24 maxlen: 24
2a04:bb80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4c:43:81:eb:87:53:54:8a:cb:d3:cc:7d:cf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb462b420447a12f1261b26efaf77976f71d11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:27:10:ba:42:74:41:1d:6d:3c:18:31:53:5a:
58:6a:dc:ea:02:14:20:07:9d:06:2e:78:45:4a:d7:
25:a3:f4:66:de:03:69:c1:40:30:a6:7f:20:a8:fc:
7b:e7:d6:6e:a5:7d:7d:91:c4:45:f9:e1:30:a9:5c:
b8:3b:5e:70:94:eb:18:79:df:74:da:08:13:12:5c:
4e:1e:01:aa:5f:3d:a8:ca:07:68:bf:c0:ff:88:ae:
c0:3e:09:1f:70:8a:1c:c1:1b:59:17:b1:5c:c2:37:
64:83:76:74:82:09:b0:2a:03:16:5d:90:07:34:2c:
7e:b9:53:52:63:9b:3f:fc:9d:6c:87:5f:0f:22:c4:
3e:14:82:3c:95:2f:6a:f7:2e:fd:cf:72:61:27:f6:
04:a3:3c:fc:cb:b5:21:c3:23:ff:59:a3:82:fe:b8:
59:b5:f3:ea:a6:6c:a1:38:e7:30:bf:fd:62:9a:e7:
35:33:e2:fc:a1:1d:56:b8:59:ed:64:e8:a7:7b:50:
59:da:00:43:1e:24:39:c9:f9:33:4f:15:e4:77:cd:
2d:7c:94:6a:0d:08:b4:b9:67:83:58:01:67:d3:5f:
54:1f:9a:85:cf:77:3f:ef:9e:7b:d9:bd:05:20:b3:
af:7c:c2:61:40:54:28:b7:bb:14:89:f0:76:ed:e4:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:62:B4:20:44:7A:12:F1:26:1B:26:EF:AF:77:97:6F:71:D1:1B
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/67RitCBEehLxJhsm7693l29x0Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.240.0/22
193.176.80.0/24
193.176.83.0/24
IPv6:
2a04:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
5b:bd:02:86:b2:95:dc:8d:2b:34:81:3a:5c:8e:5f:d4:99:96:
f7:cd:ec:b8:b0:52:f0:c2:b9:ba:59:ff:e0:69:8f:84:53:d1:
49:e6:d7:8f:98:d4:a1:f2:13:d4:70:e5:22:16:6e:07:cc:f2:
65:53:6f:3e:30:ce:30:2b:1e:48:97:3c:a7:20:85:0e:15:71:
b6:d4:44:e9:84:a8:78:ab:2f:a8:33:61:d7:1e:b3:34:75:b4:
3c:13:cd:33:60:7a:ed:e9:92:ee:77:10:a7:ac:9a:68:dd:7e:
6b:54:3e:2d:6e:f1:f6:c7:35:4a:fc:0f:ef:1d:b1:a5:c3:39:
c1:4c:51:c6:3a:40:21:d4:93:2c:4f:30:d1:99:49:8b:1a:f6:
ad:47:f9:38:ff:9f:45:0d:12:ff:62:7c:67:4a:51:d0:f1:76:
ae:b1:73:75:e5:58:2a:33:7d:28:b6:1b:52:f6:c1:d2:63:2b:
a5:80:5b:d3:9f:ac:75:c4:27:a4:06:6a:ac:d9:ec:db:6f:d7:
75:74:94:1b:6b:d2:07:f4:3c:41:01:31:a1:d7:ab:a4:bb:ca:
6f:fc:cc:39:c3:03:85:0b:cc:6a:f6:fe:8f:45:a6:96:ae:97:
d2:c2:3e:17:9a:a5:99:18:7f:53:0f:93:73:01:b3:ef:60:7b:
9e:37:00:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:21 2025 by rpki-client