Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ETJiLj_FPEXG5No5WrAoxGg_y_w.roa
File: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (raw, json)
Hash identifier: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=
Subject key identifier: 11:32:62:2E:3F:C5:3C:45:C6:E4:DA:39:5A:B0:28:C4:68:3F:CB:FC
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01942521FDB727AA97A79BD1C7FBA9F705D7
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ETJiLj_FPEXG5No5WrAoxGg_y_w.roa
Signing time: Thu 02 Jan 2025 03:49:32 +0000
ROA not before: Thu 02 Jan 2025 03:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39486
IP address blocks: 45.134.79.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
193.161.128.0/22 maxlen: 24
194.104.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fd:b7:27:aa:97:a7:9b:d1:c7:fb:a9:f7:05:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1132622e3fc53c45c6e4da395ab028c4683fcbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:f8:31:ac:a8:9d:ab:8b:01:b1:74:cf:cd:
c8:6e:06:5f:8a:f0:81:eb:3c:3f:3f:63:51:a9:28:
70:42:9f:63:5b:21:b6:2d:fe:19:ed:6f:5c:0e:04:
bf:db:be:26:3a:b1:4f:6e:6b:78:ca:50:0b:96:db:
bf:83:9f:0b:09:6d:c2:19:ea:81:91:5c:d5:12:aa:
71:5a:30:2f:dc:01:a2:7f:c7:77:7b:e7:1c:aa:3c:
2f:1f:53:8d:81:46:11:52:87:88:6f:d2:18:2c:6d:
c7:36:0d:fc:32:5c:8e:60:63:6b:48:36:61:65:dd:
fc:f4:8f:8c:a3:44:d2:6d:96:99:21:38:36:5d:2e:
ba:5a:a6:87:ed:4a:ad:1e:dd:04:21:8b:81:30:02:
98:d2:ce:76:97:43:9d:e2:31:39:71:28:b4:6b:54:
05:48:7b:94:b6:33:4a:24:5e:8e:88:72:ca:1f:ca:
10:0f:3c:f8:8c:21:05:46:6b:0b:f6:dc:f6:3b:c7:
f5:ca:60:f4:5b:10:d5:0e:e2:70:3f:37:6f:ac:e4:
82:b4:bf:bf:3e:c4:07:d5:e4:34:c2:c2:44:b1:4e:
a0:7e:1d:fc:7f:37:32:42:e4:7e:4a:d4:07:7f:86:
c4:fd:dc:d1:2f:10:5f:0d:5f:8f:09:6b:fd:e5:a7:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:62:2E:3F:C5:3C:45:C6:E4:DA:39:5A:B0:28:C4:68:3F:CB:FC
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ETJiLj_FPEXG5No5WrAoxGg_y_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.79.0/24
185.184.228.0/24
193.161.128.0/22
194.104.104.0/22
Signature Algorithm: sha256WithRSAEncryption
44:92:48:5c:df:76:76:c3:0b:1a:a8:2f:6b:47:01:9e:70:5e:
71:b0:e5:76:28:91:b6:83:27:9d:17:60:54:3a:5c:a0:7c:7c:
79:c7:d5:ff:72:0a:76:88:7f:ca:53:29:fb:6f:e8:2f:07:72:
db:1b:5a:fd:dc:44:7b:83:5b:84:b5:8f:3f:d3:8d:41:4a:5a:
cd:0f:88:43:a9:d4:a1:ad:2f:a9:ec:15:64:05:a5:fd:4b:54:
d3:41:22:71:52:01:85:17:0a:14:33:66:59:65:0c:39:42:d1:
5c:8a:3a:13:35:14:cc:05:22:9a:d2:9f:9f:94:b8:d6:f1:0d:
73:e2:3c:01:31:4f:fc:5f:3d:c3:b5:89:23:25:57:e3:b6:4a:
6b:37:ae:54:61:5c:b7:65:68:f6:92:0c:17:5a:ad:79:1b:09:
c4:92:4f:19:64:8a:b0:a4:25:f2:1c:c4:59:7c:55:6c:3d:e8:
55:e4:5f:82:03:9a:1d:c2:ed:2a:c5:eb:3e:77:26:bc:5e:4d:
e4:a9:d5:b5:56:ee:54:54:e6:0f:bd:d4:75:89:d7:3d:31:7e:
18:4f:ec:af:24:24:0f:c4:c9:43:b7:ce:50:8f:6a:9e:1a:63:
e4:12:2d:75:69:1e:0a:3e:23:16:69:af:87:47:c2:15:08:61:
28:ce:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:14:21 2025 by rpki-client