Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/_E_UTkXEbOlNF6MbAMSYsMsDR-I.roa
File: _E_UTkXEbOlNF6MbAMSYsMsDR-I.roa (raw, json)
Hash identifier: nzinhaXPQSTmkmq8uOwlj36AQdiA4mNWQJ3r1/kf0dk=
Subject key identifier: FC:4F:D4:4E:45:C4:6C:E9:4D:17:A3:1B:00:C4:98:B0:CB:03:47:E2
Certificate issuer: /CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Certificate serial: 0667F5CD
Authority key identifier: 9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/_E_UTkXEbOlNF6MbAMSYsMsDR-I.roa
Signing time: Wed 26 Jan 2022 08:03:00 +0000
ROA not before: Wed 26 Jan 2022 08:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15435
IP address blocks: 159.180.0.0/18 maxlen: 24
136.143.0.0/17 maxlen: 24
213.184.96.0/19 maxlen: 24
62.45.0.0/16 maxlen: 24
83.128.0.0/16 maxlen: 24
163.158.0.0/16 maxlen: 24
2a0f:900::/29 maxlen: 48
2001:4c38::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107476429 (0x667f5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Validity
Not Before: Jan 26 08:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc4fd44e45c46ce94d17a31b00c498b0cb0347e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:bb:49:82:8c:f5:23:86:69:1f:92:f3:39:
1b:f4:91:89:b3:0c:0c:8d:ab:60:7c:04:de:b4:a1:
1f:a9:d9:27:ac:fd:54:d4:2f:a7:42:6e:90:08:85:
63:64:7a:03:f1:e5:5f:75:43:68:79:a1:d6:87:8a:
ae:f6:71:22:f3:4b:99:53:17:1e:69:05:ff:2a:37:
e3:07:43:ac:af:9e:db:f0:1e:3f:a3:db:bc:d9:db:
38:19:d7:41:7d:9c:5c:f6:74:51:8e:d2:f4:1c:cd:
29:7d:aa:c0:81:9f:2d:f9:a1:65:7e:17:cd:3b:15:
41:35:fc:4b:30:3a:67:47:9e:f6:32:c1:12:bc:4d:
41:a7:9d:b0:65:dd:51:09:fa:0d:9e:95:9f:62:7a:
58:a9:28:a6:f6:db:18:4f:20:f7:6d:ad:ab:e7:85:
39:ef:b4:ec:31:a7:1c:58:a4:2b:80:38:d8:79:49:
bf:46:95:99:4f:f6:2e:e9:b4:e5:6d:0e:5e:b3:30:
14:55:68:16:f0:99:d5:3a:ae:d4:3b:01:bf:fd:38:
ec:5e:1d:e7:6d:52:13:7b:21:98:4f:f7:73:83:67:
a0:ea:7d:58:0a:94:f7:43:01:95:64:39:f4:c6:56:
d0:17:36:0b:fb:cd:36:e1:47:c3:77:a1:28:da:7b:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:D4:4E:45:C4:6C:E9:4D:17:A3:1B:00:C4:98:B0:CB:03:47:E2
X509v3 Authority Key Identifier:
keyid:9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/_E_UTkXEbOlNF6MbAMSYsMsDR-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.45.0.0/16
83.128.0.0/16
136.143.0.0/17
159.180.0.0/18
163.158.0.0/16
213.184.96.0/19
IPv6:
2001:4c38::/29
2a0f:900::/29
Signature Algorithm: sha256WithRSAEncryption
53:cd:05:ba:c4:89:33:0f:32:d1:00:e1:1c:4b:6b:9e:d2:93:
c7:7d:d7:00:87:d0:72:59:aa:a4:a1:52:ce:d1:5d:19:17:91:
8b:17:8e:52:91:34:cb:70:9d:81:7d:ff:57:19:9d:35:f6:b1:
08:99:dc:03:d7:9c:88:e7:94:ce:d3:f3:e2:84:c8:e2:df:5f:
f2:1d:8a:5d:be:50:d4:b6:d1:ae:81:de:4b:6d:94:83:ab:d7:
37:33:6e:ad:53:0a:97:1c:29:f4:23:75:05:84:30:e1:d2:ea:
ae:65:9b:be:09:51:55:ec:10:6b:65:d0:c9:60:20:51:cf:fb:
53:cd:68:20:a9:db:ce:e1:80:38:b9:12:99:b0:5b:fb:8f:8d:
3d:51:00:8e:ac:50:a8:e0:cb:10:d1:55:ec:3d:8b:5b:31:58:
01:2c:e9:47:f8:05:47:00:19:6f:3e:06:5c:d3:79:09:0c:f3:
6a:b4:e1:ba:c8:95:ad:fd:ab:4b:c3:c2:f3:19:00:48:bd:10:
71:30:82:33:50:1e:a6:44:46:7d:60:90:2a:5b:d4:02:96:07:
6d:3e:ea:01:f8:4f:39:23:9d:18:33:81:2f:fb:b5:a7:57:95:
80:1f:3e:34:24:04:f7:db:79:99:9e:f4:55:6b:ff:63:7f:ae:
b8:43:ff:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:40 2025 by rpki-client