Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/EZTTi0DeKjOt5n50pGmAFCowsBg.roa
File: EZTTi0DeKjOt5n50pGmAFCowsBg.roa (raw, json)
Hash identifier: E6d6xhT95nfb0o31mLYa+7IwZxSu5Vcz/JzrKKV4/Tw=
Subject key identifier: 11:94:D3:8B:40:DE:2A:33:AD:E6:7E:74:A4:69:80:14:2A:30:B0:18
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 019427B5B7677F64A3BFA0801C8E6547D5AE
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/EZTTi0DeKjOt5n50pGmAFCowsBg.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5626
IP address blocks: 89.26.128.0/17 maxlen: 24
194.38.128.0/19 maxlen: 24
213.146.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b7:67:7f:64:a3:bf:a0:80:1c:8e:65:47:d5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1194d38b40de2a33ade67e74a46980142a30b018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:ea:cf:13:39:6a:71:47:d1:aa:ca:70:46:
0e:9a:ae:f8:97:00:23:55:61:4d:f9:d9:01:c7:5d:
03:3d:2a:4f:8e:2a:0b:85:38:5c:3c:84:43:64:61:
38:60:0f:e6:35:9c:87:e0:09:e7:db:b7:48:98:2c:
c6:94:53:41:36:e8:a1:2f:c5:c2:d3:c3:f8:b6:1b:
ab:25:7d:99:a9:d6:b8:77:10:75:11:e2:4b:a5:ac:
2a:af:18:9e:9f:5a:bf:f5:6a:f8:ea:a0:cc:5b:3e:
ee:39:f8:f1:a2:ab:f8:41:5d:c8:79:14:c2:18:ef:
56:d4:8e:8b:72:9d:1d:79:49:50:2c:d9:d3:c4:9a:
47:ac:c8:cb:ef:fb:77:db:75:be:cb:81:63:45:48:
b2:63:7e:ef:b8:63:69:5c:3d:74:55:d5:6b:fc:2e:
82:0e:e6:a1:2f:3e:85:9c:9e:79:89:9a:d9:e2:3a:
37:0a:54:39:dc:a0:2a:97:05:40:77:b6:57:76:50:
f0:46:2f:4d:0c:86:6b:51:d5:3a:56:bf:a7:96:4f:
52:3a:4b:29:22:9d:8a:7c:90:f7:14:0e:6a:d2:00:
f8:6d:c0:5c:17:c1:e3:b6:4e:71:3b:fe:de:c1:ff:
87:65:a9:8b:39:3e:b9:85:20:0a:2f:e5:52:20:82:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:94:D3:8B:40:DE:2A:33:AD:E6:7E:74:A4:69:80:14:2A:30:B0:18
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/EZTTi0DeKjOt5n50pGmAFCowsBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.128.0/17
194.38.128.0/19
213.146.192.0/19
Signature Algorithm: sha256WithRSAEncryption
27:06:7c:a1:e1:93:9c:2b:a4:76:61:18:c5:1e:fe:08:28:84:
61:89:09:57:92:f2:56:ad:c9:5b:1b:4b:d4:a3:26:75:41:ab:
a4:2b:50:b5:24:af:ec:38:c8:cb:b2:50:ea:e3:b7:66:1e:6c:
52:85:cf:f0:20:bc:3e:24:05:7d:ed:16:5f:1f:0f:89:09:85:
12:69:bd:e9:cc:6d:a4:38:58:6e:0d:cc:45:2b:5d:1c:38:5e:
10:b6:43:0d:76:75:0f:93:81:0b:3f:f8:50:a7:db:0b:d5:5f:
06:f2:47:8a:13:d4:7a:4d:c5:7a:e5:59:20:7c:a0:f9:3c:98:
fe:57:01:73:21:fe:92:7c:54:6f:14:2f:2d:7b:d1:4b:14:3f:
da:a8:42:a0:0d:f1:d5:19:80:3b:91:aa:d3:b8:77:83:e7:9f:
18:df:62:6e:f7:a1:e5:a7:9f:2c:2a:fa:9e:45:47:cc:51:dd:
d3:a8:ef:d3:c1:ec:8d:42:19:e2:c1:ef:c1:54:f8:ed:b1:ad:
d7:24:51:b7:82:21:dd:88:86:47:0e:24:de:cb:dc:48:44:e4:
13:80:6d:43:84:b3:9e:28:50:61:c2:72:b4:ed:d4:67:13:cd:
bc:91:21:fa:ec:f6:5c:c9:56:a5:9d:0e:01:9e:75:85:bd:eb:
2e:ae:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net