Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Ee608vVs1feumNxWqRStx6hfmnE.roa
File: Ee608vVs1feumNxWqRStx6hfmnE.roa (raw, json)
Hash identifier: Oli1s8+QpONidp5hxZ+yk2gK4ODEw7YJNDZMqtPgFoo=
Subject key identifier: 11:EE:B4:F2:F5:6C:D5:F7:AE:98:DC:56:A9:14:AD:C7:A8:5F:9A:71
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 0194B3227189901BD0CC413FAE49831A2C70
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Ee608vVs1feumNxWqRStx6hfmnE.roa
Signing time: Wed 29 Jan 2025 17:36:06 +0000
ROA not before: Wed 29 Jan 2025 17:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.104.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b3:22:71:89:90:1b:d0:cc:41:3f:ae:49:83:1a:2c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Jan 29 17:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11eeb4f2f56cd5f7ae98dc56a914adc7a85f9a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:2a:72:74:e1:3c:4d:e9:e3:b1:52:87:73:
11:c8:13:fd:c9:50:7f:d2:b1:8f:63:5e:ed:c3:9c:
68:52:26:76:27:b3:2f:64:51:fc:1b:d7:79:f2:5b:
65:95:2d:13:ab:44:3b:f8:67:6e:02:87:78:6b:5c:
6a:25:8e:aa:c9:24:8d:1a:d2:c9:ab:12:36:98:8f:
0c:f6:6b:2e:74:d0:03:14:1e:ab:78:67:c0:7f:61:
4b:3e:c8:4f:2f:16:26:08:d2:06:45:59:c3:57:b1:
f4:cf:76:ec:da:07:0d:fa:5d:8b:85:c1:d9:35:d7:
cd:48:7b:34:0b:ff:d4:d6:d8:6c:2b:0e:2e:3d:63:
ed:d3:a1:7a:ec:3e:56:6e:67:14:e6:e9:e9:3c:ba:
7c:ff:ac:7a:e9:2e:8a:c5:70:f7:55:3c:00:ee:f2:
8e:6b:d7:c3:6c:4a:4f:d8:62:07:53:6b:dc:eb:ad:
7b:fa:5c:47:26:7c:df:03:ca:fc:ab:5f:15:b5:5f:
0d:fa:f9:35:ff:df:85:94:14:88:b3:57:3c:a2:a5:
22:b4:b5:f4:e9:0d:f5:c7:38:20:da:1d:2c:3e:30:
48:a7:aa:7b:d4:63:22:72:a2:5e:93:3a:92:d9:67:
53:d1:16:c1:5c:c4:3a:9b:47:c6:2a:63:63:da:63:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:B4:F2:F5:6C:D5:F7:AE:98:DC:56:A9:14:AD:C7:A8:5F:9A:71
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Ee608vVs1feumNxWqRStx6hfmnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.245.0/24
Signature Algorithm: sha256WithRSAEncryption
18:30:c6:98:d3:51:fa:aa:7c:d1:a4:0c:e8:07:1a:1e:a9:4a:
20:9b:ee:a4:60:87:1a:33:f1:1d:86:1f:57:d6:09:72:4c:2e:
3e:0a:3f:be:e3:a3:b7:32:89:de:07:57:1e:05:76:e3:65:91:
76:d0:8a:26:37:b6:e5:19:b3:12:ed:04:ce:d0:cc:7e:52:ee:
6d:85:26:ca:23:8f:ad:fe:14:36:36:28:18:17:02:2a:84:c4:
48:70:96:ac:93:63:1c:3c:c3:f1:1c:c7:96:79:cc:53:12:e9:
ef:72:7d:f3:f2:c5:e9:a0:62:9e:b5:da:e0:6a:60:58:c8:19:
2d:e6:ca:5f:94:7d:36:df:7b:20:d6:ce:de:91:a1:97:10:77:
ef:57:50:52:f1:80:d1:20:85:98:2d:88:ba:d4:7f:0b:5d:8a:
1e:5b:f3:b1:f0:a7:97:3f:c6:08:ac:70:fb:3e:e8:0b:41:dd:
8a:ee:b5:aa:c4:9f:56:c7:0d:8c:cc:e7:95:99:2a:e2:c4:8c:
cb:e9:3a:6d:07:2e:01:eb:56:44:0c:a1:f4:c8:9d:de:a0:e1:
05:83:73:d9:d7:95:f7:f0:f8:0b:d9:87:d2:33:fe:3f:fa:83:
4f:3c:db:89:49:ee:f6:d5:3d:0b:30:05:0b:e9:e1:00:1a:a6:
86:e3:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:33 2025 by rpki-client