Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EOah1AYBvIZXUZ9ZJrmRte4qUug.roa
File: EOah1AYBvIZXUZ9ZJrmRte4qUug.roa (raw, json)
Hash identifier: +lqUN2FIJNkK1a6wqZMOh3m8NLNM4xDGOCU+RZtqS4w=
Subject key identifier: 10:E6:A1:D4:06:01:BC:86:57:51:9F:59:26:B9:91:B5:EE:2A:52:E8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019619EE8225FCB5C9A6A729EB7D5F049CE9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EOah1AYBvIZXUZ9ZJrmRte4qUug.roa
Signing time: Wed 09 Apr 2025 09:43:03 +0000
ROA not before: Wed 09 Apr 2025 09:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206068
IP address blocks: 86.104.19.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
94.231.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:ee:82:25:fc:b5:c9:a6:a7:29:eb:7d:5f:04:9c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 9 09:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e6a1d40601bc8657519f5926b991b5ee2a52e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ff:96:a7:86:62:52:c8:90:63:bd:8c:ec:de:
cd:e6:14:11:29:5f:a1:3b:d7:c5:9e:fa:5e:26:0a:
83:5c:af:54:f5:35:00:03:2f:01:03:34:34:b5:c7:
08:5c:3a:4a:8c:67:50:b8:f3:b8:78:05:30:8e:9c:
ad:0e:d9:fc:e3:4e:d6:81:26:cb:6b:8f:90:50:97:
02:fd:c2:0a:7a:ad:59:24:b7:19:db:e9:6a:78:1a:
67:ed:ad:79:59:a8:18:d4:90:32:b4:00:15:2c:5c:
4d:86:77:bf:04:eb:92:d4:de:5b:76:1a:09:ab:8f:
0e:11:6a:b3:b3:0a:79:86:7e:f9:d7:05:e1:f2:79:
f1:0b:81:63:3b:64:4a:77:0a:ca:7e:99:f8:4f:59:
af:5e:a0:b4:97:8b:16:20:14:3b:05:42:ce:e8:bb:
d8:01:b7:43:e6:02:5b:f6:26:bd:25:c6:d0:88:c6:
fb:52:05:f5:a2:9c:90:2a:4e:6a:76:9b:a2:4f:e2:
a9:c3:81:24:69:f4:3b:57:bf:2f:77:f3:59:43:71:
7f:4e:0e:54:33:4e:a3:1a:34:04:fd:7a:19:27:aa:
80:07:ad:45:d9:c3:f3:06:5e:5c:06:27:97:93:46:
67:76:3d:69:10:c5:94:ea:b4:fc:33:51:0c:ed:f6:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:A1:D4:06:01:BC:86:57:51:9F:59:26:B9:91:B5:EE:2A:52:E8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EOah1AYBvIZXUZ9ZJrmRte4qUug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.19.0/24
89.32.126.0/24
94.231.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:29:b9:f0:20:b3:fc:56:a2:21:d4:ab:d2:7e:77:b1:4b:d9:
98:42:64:2e:5b:17:24:ce:2a:ec:68:cb:b9:c5:72:4b:a3:dc:
2b:eb:cd:6d:86:50:99:b5:55:c2:03:3d:6a:5e:e5:a0:e9:b7:
30:a6:27:65:2d:aa:43:89:d9:e8:7f:1b:34:6d:90:73:a5:6f:
6c:08:14:f1:ff:73:a7:15:c7:98:df:3b:db:40:5b:81:bc:2e:
c2:26:57:55:78:00:af:f6:14:b9:15:96:24:64:1a:a6:d2:9e:
d3:7a:e9:df:49:11:73:e8:3b:e6:1f:46:aa:09:74:c0:ae:e8:
69:57:86:cb:e0:8a:03:99:40:43:67:44:2d:07:0a:68:2d:03:
24:6e:21:5e:52:bd:ef:c0:9e:c7:6e:8c:5f:18:71:37:d2:ef:
03:99:12:2c:0b:8b:85:85:0a:79:98:64:eb:1d:e6:a3:69:41:
c2:0e:ef:7a:59:f5:e5:a0:60:d5:bc:c0:31:f7:49:d6:27:42:
b6:cc:ef:88:96:01:26:8e:d9:79:c1:16:f2:a2:ab:8e:97:a0:
f0:aa:b8:34:00:dd:1e:2b:ad:f5:5a:2f:87:d3:d8:dd:c5:90:
3c:60:78:16:98:ce:42:18:fe:da:75:97:3d:9a:f6:f2:4b:f3:
e3:9a:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net