Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EPLOvPpSxgofQo70adtTUX9nOXI.roa
File: EPLOvPpSxgofQo70adtTUX9nOXI.roa (raw, json)
Hash identifier: /m//rOggTXZWogwm9f5dyINqFB2Rw0daTbzfvvG9ck8=
Subject key identifier: 10:F2:CE:BC:FA:52:C6:0A:1F:42:8E:F4:69:DB:53:51:7F:67:39:72
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019591F99EC8F45368D588F1E7BDBE59293A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EPLOvPpSxgofQo70adtTUX9nOXI.roa
Signing time: Fri 14 Mar 2025 00:06:50 +0000
ROA not before: Fri 14 Mar 2025 00:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.149.240.0/24 maxlen: 24
87.120.68.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:91:f9:9e:c8:f4:53:68:d5:88:f1:e7:bd:be:59:29:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 14 00:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10f2cebcfa52c60a1f428ef469db53517f673972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:f1:4b:1b:37:61:ed:1c:8b:fc:7a:e2:21:
3d:70:1e:be:96:0e:bd:7d:a8:0f:18:b7:1f:94:d4:
65:7a:59:f9:f0:93:1e:65:58:f7:1f:6c:7b:c5:59:
1a:7f:db:d8:25:b4:43:50:01:17:7b:a5:63:e8:13:
d8:96:5f:14:84:3c:1e:7c:90:57:86:69:91:6c:85:
18:43:a5:09:99:62:1a:50:8d:8e:ba:7d:92:f6:42:
54:86:f7:54:54:72:bc:e5:c3:b4:83:42:70:a5:ca:
5e:89:6f:2a:70:4d:be:55:f5:d9:94:aa:76:ec:ae:
d2:8d:eb:1b:c6:2a:01:5a:c1:da:b8:33:7c:05:71:
1e:5b:dc:aa:02:be:a5:80:14:66:f0:bf:59:f3:86:
47:f2:45:f3:ff:ac:fb:8d:da:88:98:f6:d3:0d:57:
c0:af:71:1f:0e:d8:75:93:35:b7:41:40:70:f9:64:
00:82:0a:6b:45:90:97:8b:28:92:db:74:dd:79:b7:
f8:10:31:6a:de:21:ac:af:8e:ea:9f:37:52:9a:33:
c3:84:c2:01:34:76:c8:83:ef:92:c0:81:89:d1:36:
cd:1b:df:9f:f1:ea:21:6e:fa:00:3e:58:9c:be:bd:
55:76:4f:d3:69:2a:03:6d:49:0e:42:ca:a5:41:f6:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:CE:BC:FA:52:C6:0A:1F:42:8E:F4:69:DB:53:51:7F:67:39:72
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EPLOvPpSxgofQo70adtTUX9nOXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
87.120.68.0/24
87.121.46.0/24
93.123.116.0/24
94.156.14.0/24
95.214.25.0-95.214.26.255
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
54:26:f3:bc:34:df:43:1c:20:e7:50:3f:b6:01:95:26:85:da:
f0:c7:23:48:f6:bd:d8:29:b3:ad:2c:61:56:92:86:c3:a9:a6:
92:19:39:5f:aa:13:de:92:b3:55:0e:f8:20:95:88:b2:18:d3:
e7:69:1c:9a:06:50:71:fd:bb:23:21:64:18:3d:9f:65:78:20:
94:f4:9a:fb:fb:90:ba:d0:f6:0f:60:95:f9:d0:7a:a1:6d:99:
59:ad:f8:29:51:25:cf:c9:b7:ca:c4:99:62:27:13:99:11:2a:
b2:11:3b:46:b5:1f:30:5e:61:f7:c8:5e:b2:4d:f4:e9:91:72:
52:a7:fd:96:0e:30:1f:65:42:b8:03:2c:74:bb:15:68:1e:30:
20:39:92:52:a1:e8:4b:23:c7:07:f7:2d:b1:85:e6:af:b0:78:
3b:bd:0a:27:b2:e1:c3:7f:f4:68:4a:86:be:cc:d6:5c:00:83:
61:8f:69:de:56:fc:44:21:f5:4e:05:18:02:6b:3e:e4:15:3b:
3d:78:c9:77:0e:6c:bf:9a:46:43:25:09:76:45:c5:91:9b:cc:
57:5f:f6:ac:63:5f:81:65:c0:51:eb:5b:71:d9:ae:00:00:9c:
f2:ee:c6:9e:fe:c1:1c:0f:e3:3e:30:f1:d4:75:d2:d5:58:39:
4f:00:3b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:43 2025 by rpki-client