Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ERUEHN9uLTfO2WyV8-1s6UiZCHE.roa
File: ERUEHN9uLTfO2WyV8-1s6UiZCHE.roa (raw, json)
Hash identifier: Dj9rqBKjHbhzYNpQojJ20SsBI7CNCcqDKlrnumviXmM=
Subject key identifier: 11:15:04:1C:DF:6E:2D:37:CE:D9:6C:95:F3:ED:6C:E9:48:99:08:71
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0194D730CA8BFF119D956360CC7868ED2BB6
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ERUEHN9uLTfO2WyV8-1s6UiZCHE.roa
Signing time: Wed 05 Feb 2025 17:38:06 +0000
ROA not before: Wed 05 Feb 2025 17:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 107.181.137.0/24 maxlen: 24
162.220.246.0/23 maxlen: 24
185.53.128.0/24 maxlen: 24
185.53.129.0/24 maxlen: 24
185.53.130.0/24 maxlen: 24
185.53.131.0/24 maxlen: 24
185.83.216.0/24 maxlen: 24
185.83.217.0/24 maxlen: 24
185.83.218.0/24 maxlen: 24
185.83.219.0/24 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.113.0/24 maxlen: 24
198.105.114.0/23 maxlen: 24
2a02:2ca0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:30:ca:8b:ff:11:9d:95:63:60:cc:78:68:ed:2b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 5 17:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1115041cdf6e2d37ced96c95f3ed6ce948990871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5d:78:82:92:8e:03:30:f3:47:0f:0e:9c:25:
7d:5e:6c:54:45:1b:e4:10:1b:e9:99:c2:52:74:48:
03:4c:65:e1:1b:36:0e:66:07:27:83:5a:4f:78:be:
d5:51:2c:3d:9c:0c:93:d8:aa:6a:34:c9:38:d1:7c:
10:6f:7d:69:2b:6e:4a:52:3d:f9:6c:8f:c7:70:23:
4f:a3:80:84:d5:21:a1:df:75:09:88:b1:00:48:43:
df:da:6c:28:6a:04:31:8f:46:9e:07:6c:b9:a4:b9:
3f:6e:c2:41:1f:91:d7:93:ad:2a:b0:e4:6c:e0:d8:
bc:a3:15:46:f6:88:94:61:e3:70:4f:c8:18:17:f7:
3b:01:f8:ac:e7:c9:ad:39:28:66:e1:d7:e7:8d:5e:
93:5e:2f:22:45:4c:f7:98:95:ee:7f:8a:5a:b9:1c:
50:82:8b:5d:0f:cc:b1:f5:9d:52:63:50:90:e3:63:
a9:cb:62:ae:34:fc:60:83:3a:d5:2c:fc:8e:3b:66:
05:0a:a0:14:7b:7f:c3:58:02:66:b0:07:13:2a:98:
02:dd:da:51:b7:56:58:39:05:85:2d:68:38:ed:23:
31:98:f6:a9:e1:8c:d4:ae:b9:b9:ce:d6:4a:2e:8d:
a3:62:a0:3c:39:8e:f2:a9:c8:96:db:e0:5e:b8:95:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:04:1C:DF:6E:2D:37:CE:D9:6C:95:F3:ED:6C:E9:48:99:08:71
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ERUEHN9uLTfO2WyV8-1s6UiZCHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.137.0/24
162.220.246.0/23
185.53.128.0/22
185.83.216.0/22
198.105.112.0/22
IPv6:
2a02:2ca0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:9e:96:f3:19:af:a0:1d:74:53:49:b8:2f:83:30:6f:69:e0:
a2:7a:3b:00:63:9b:3f:8d:1c:b4:16:84:8d:ea:85:26:b6:5e:
a9:cf:45:04:e3:e2:9a:7c:b2:6d:d2:cc:6d:99:a4:40:26:b1:
bf:aa:fa:6c:a0:93:bb:51:57:18:14:42:4e:27:97:aa:96:33:
bd:c0:ac:4f:75:e1:ec:64:b2:f0:d5:6e:b3:b7:1d:0f:25:6d:
77:92:52:5c:d8:c2:01:86:cc:03:4e:c7:a7:b3:13:1c:b1:c5:
4c:de:a2:af:fb:2d:56:94:b2:32:2c:88:e1:57:4f:80:01:86:
b7:9e:4d:c0:23:6f:b8:88:f1:61:34:d7:97:26:e6:ca:99:ec:
cd:dd:ed:0b:59:bf:58:e8:e2:db:58:45:6b:bf:44:3b:35:2e:
75:c6:b7:a9:24:40:7a:a0:6c:e8:ab:98:9e:d9:5f:0e:bc:58:
39:4b:b7:0f:1f:1f:be:25:0e:c3:7a:7d:94:cf:bf:05:4a:94:
ed:fe:78:23:6c:b5:a8:eb:c8:f2:e7:b6:91:fb:b3:52:73:53:
1a:33:69:e1:49:0e:a7:65:56:28:b6:1c:59:61:44:4e:22:73:
cf:f2:18:6c:ad:02:21:87:5d:a7:aa:8d:f4:b1:21:ad:c7:0f:
77:c0:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:05:34 2025 by rpki-client