Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/eHjabfptJIylTFfsPi2hUFy3RK8.roa
File: eHjabfptJIylTFfsPi2hUFy3RK8.roa (raw, json)
Hash identifier: iVzk+DrPQjJ6/K3+6OMzdP3Eqk0KkdROb074NEouRRo=
Subject key identifier: 78:78:DA:6D:FA:6D:24:8C:A5:4C:57:EC:3E:2D:A1:50:5C:B7:44:AF
Certificate issuer: /CN=73f33c451e745fa8938fceeed59283dea7b2701c
Certificate serial: 01857227FDD900FD32B3FC515CC27C5325A4
Authority key identifier: 73:F3:3C:45:1E:74:5F:A8:93:8F:CE:EE:D5:92:83:DE:A7:B2:70:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_M8RR50X6iTj87u1ZKD3qeycBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/eHjabfptJIylTFfsPi2hUFy3RK8.roa
Signing time: Mon 02 Jan 2023 11:05:01 +0000
ROA not before: Mon 02 Jan 2023 11:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47215
IP address blocks: 5.11.48.0/21 maxlen: 32
109.75.176.0/20 maxlen: 32
93.190.64.0/21 maxlen: 32
95.130.248.0/21 maxlen: 32
185.32.116.0/22 maxlen: 32
185.143.164.0/22 maxlen: 22
185.65.88.0/22 maxlen: 32
141.101.32.0/21 maxlen: 32
2a00:12c0::/29 maxlen: 29
2a00:12c0::/32 maxlen: 32
2a04:4cc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:fd:d9:00:fd:32:b3:fc:51:5c:c2:7c:53:25:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f33c451e745fa8938fceeed59283dea7b2701c
Validity
Not Before: Jan 2 11:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7878da6dfa6d248ca54c57ec3e2da1505cb744af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:a4:8f:ac:86:74:86:d0:ba:c5:1c:a4:0b:
35:02:42:20:fb:ea:ab:54:05:a0:d3:f6:96:94:77:
6c:fc:8b:30:e8:a9:ee:37:d2:f5:0d:b7:02:cb:c4:
45:c3:12:47:a3:b6:de:7a:19:ba:46:15:43:0b:76:
31:cd:3d:c6:68:05:f7:72:31:a9:2e:3b:1a:b4:d5:
00:f8:50:4c:32:3c:70:17:12:47:09:d1:42:60:13:
5e:1e:9f:de:c9:f3:06:ec:84:ed:2a:e1:f0:61:a6:
6a:fc:71:d4:8a:70:4f:39:8b:36:cd:b5:aa:b8:4b:
45:29:ad:c7:ae:ad:67:4c:6a:c5:1c:7a:35:b0:cc:
69:d9:50:68:b5:33:84:ac:9d:e9:46:a9:46:e9:a6:
65:2a:18:39:26:ad:97:6f:76:a9:cf:b3:d4:5a:cd:
52:e9:6b:29:eb:b5:20:8f:ce:98:09:46:49:d3:85:
00:df:4a:ed:cc:4b:c3:57:14:4a:bc:bc:56:e2:5f:
83:fc:1f:d1:b5:71:10:49:7d:2d:56:5f:77:0b:cd:
94:c1:9d:ff:30:a4:23:37:5e:e2:d6:69:66:64:50:
1f:b0:f8:e2:b9:3c:e3:7f:84:27:28:1a:f3:0f:70:
58:43:79:d9:93:95:ae:6b:75:e4:d8:66:8b:20:49:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:DA:6D:FA:6D:24:8C:A5:4C:57:EC:3E:2D:A1:50:5C:B7:44:AF
X509v3 Authority Key Identifier:
keyid:73:F3:3C:45:1E:74:5F:A8:93:8F:CE:EE:D5:92:83:DE:A7:B2:70:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_M8RR50X6iTj87u1ZKD3qeycBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/eHjabfptJIylTFfsPi2hUFy3RK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/c_M8RR50X6iTj87u1ZKD3qeycBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
93.190.64.0/21
95.130.248.0/21
109.75.176.0/20
141.101.32.0/21
185.32.116.0/22
185.65.88.0/22
185.143.164.0/22
IPv6:
2a00:12c0::/29
2a04:4cc0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:32:5c:44:12:93:be:cf:8b:67:72:47:8d:c2:2f:c5:e6:cf:
13:3e:53:9a:4a:04:ed:c3:4d:ac:0b:17:7f:0d:46:66:57:28:
0d:7b:43:26:e8:c1:6e:93:41:f8:81:09:cb:2f:4f:ff:57:e0:
82:d8:2c:d5:05:cf:d4:85:d7:d8:64:04:99:33:47:f9:6b:86:
bd:e2:ee:d7:93:99:38:1c:82:57:9d:84:c6:29:9c:8f:4a:17:
9a:dc:a9:dc:8b:89:78:5b:37:ab:a2:83:21:6a:ff:c9:a9:cc:
8b:a7:50:5c:7d:0c:32:8b:9c:45:f3:fa:db:b4:90:2c:fd:c0:
8a:0c:4c:9a:71:35:34:70:2f:72:b0:c1:e0:ff:b1:cb:cb:8e:
49:29:f8:b6:ab:77:52:ee:03:ec:30:ea:1d:96:6f:07:90:df:
24:1c:b2:25:1e:86:63:80:47:2d:e4:bc:89:66:bb:60:d0:57:
8f:74:1c:c7:db:59:2b:8b:d1:ff:e3:04:79:ad:fa:7d:f5:d3:
ad:9d:1b:28:c3:69:8c:24:c4:b9:19:d3:c9:8c:4d:f4:19:7f:
30:63:13:4a:fa:e0:6a:85:c2:6c:7d:f8:a7:14:51:04:47:6b:
15:b4:a2:29:30:b6:77:24:4e:7f:11:9c:ca:66:55:9b:fb:5f:
20:dd:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:35 2025 by rpki-client