Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/bETkyP80sy6hlRCzvEGmZeisxF4.roa
File: bETkyP80sy6hlRCzvEGmZeisxF4.roa (raw, json)
Hash identifier: +PMdRBV3+/H3Dapb4/ZootNYzjktYG8iASt1NgJq53A=
Subject key identifier: 6C:44:E4:C8:FF:34:B3:2E:A1:95:10:B3:BC:41:A6:65:E8:AC:C4:5E
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019423D717DF5CA41521D6E48D541384014E
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/bETkyP80sy6hlRCzvEGmZeisxF4.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15570
IP address blocks: 77.242.192.0/21 maxlen: 21
77.242.194.0/23 maxlen: 23
95.172.64.0/24 maxlen: 24
95.172.72.0/23 maxlen: 23
95.172.76.0/22 maxlen: 22
95.172.88.0/22 maxlen: 22
95.172.94.0/23 maxlen: 23
212.118.234.0/24 maxlen: 24
2a02:b50::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:17:df:5c:a4:15:21:d6:e4:8d:54:13:84:01:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c44e4c8ff34b32ea19510b3bc41a665e8acc45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:33:b0:61:54:67:ce:20:80:8d:06:07:48:
b8:65:e8:cd:75:43:57:8a:89:ab:47:a6:5e:c5:5d:
7f:5b:f4:ce:b8:cb:92:04:33:2d:ea:07:07:c6:5c:
da:bc:ab:68:60:18:7c:0e:1b:54:bc:69:0c:36:1f:
0d:1d:92:27:8a:2f:ab:f5:df:18:7c:94:d8:35:c8:
63:cf:da:13:2e:94:f0:aa:52:b8:89:0c:f1:46:43:
d4:1f:fe:20:ba:0f:38:43:71:42:b2:2e:f1:7f:52:
a0:41:fe:96:5e:30:0b:11:c1:65:21:ca:ad:62:a5:
b2:68:a6:f4:da:db:42:54:91:8f:8f:fe:17:1c:fd:
ef:6a:ae:ab:99:01:74:20:65:f7:50:19:78:a9:8f:
b3:e3:cf:c2:ba:c8:db:df:7e:04:e5:d4:da:fb:15:
9c:67:b6:3f:9b:49:0b:36:c6:06:9e:be:e6:58:ca:
58:73:cf:8e:e5:c5:cf:53:fe:a4:ef:f8:dc:91:01:
38:07:8f:57:1c:65:53:24:10:33:b5:3f:e7:16:e2:
74:49:f3:84:a7:6d:1c:12:92:9d:50:92:62:ef:82:
80:43:7c:3d:52:e0:a8:01:2b:03:39:e8:12:95:8c:
07:60:a3:0d:c9:b6:f2:c4:dd:a4:db:16:98:bb:0a:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:44:E4:C8:FF:34:B3:2E:A1:95:10:B3:BC:41:A6:65:E8:AC:C4:5E
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/bETkyP80sy6hlRCzvEGmZeisxF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.192.0/21
95.172.64.0/24
95.172.72.0/23
95.172.76.0/22
95.172.88.0/22
95.172.94.0/23
212.118.234.0/24
IPv6:
2a02:b50::/34
Signature Algorithm: sha256WithRSAEncryption
41:bb:a2:2c:d1:89:30:91:74:2b:78:4b:c2:f5:54:e0:d0:a9:
df:12:57:e7:9e:5b:96:29:f3:21:83:44:ab:ec:6b:d0:65:30:
a6:09:bc:80:87:b7:2e:d3:64:b8:36:f8:0d:87:e5:83:6a:a7:
b6:5b:e9:e0:5f:ff:8e:f9:8c:e1:e2:4a:42:1b:0e:da:57:35:
90:ed:d8:ec:35:06:1c:89:eb:7e:0c:bf:58:ca:c0:d6:07:f9:
a2:b1:e5:fb:df:f8:9a:81:1e:c8:3c:cf:8b:5d:f8:22:01:1e:
4a:9d:d2:7d:32:d3:0f:dd:e2:9f:63:12:9d:93:ae:54:ed:8d:
e9:ad:2e:4d:15:12:ab:21:a4:c2:2c:df:1c:2c:8a:98:f8:6d:
31:4f:91:c8:f3:b5:24:8f:3f:ea:de:91:ff:4c:13:77:58:dc:
7a:09:fb:43:97:3a:1f:64:bd:2e:78:e8:ee:c4:ea:95:5f:74:
b9:b4:db:1b:c2:70:ce:af:f1:6e:e5:70:d6:fb:cb:fc:a1:9f:
21:6a:28:5e:df:04:c0:06:b1:a6:84:be:a4:de:15:4f:ca:fa:
63:a6:f6:1b:07:28:58:54:67:fa:da:a5:dc:8d:c3:fc:fa:f6:
bb:dc:89:73:23:a1:b6:5f:36:ec:c8:70:f7:5e:50:31:ed:1f:
fa:f1:fa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:51 2025 by rpki-client