Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/ejnyKRBFEQteemyTpx_XwL9WEoE.roa
File: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (raw, json)
Hash identifier: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=
Subject key identifier: 7A:39:F2:29:10:45:11:0B:5E:7A:6C:93:A7:1F:D7:C0:BF:56:12:81
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 019422FC37C3B19DF79BF02B1946DC21859E
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/ejnyKRBFEQteemyTpx_XwL9WEoE.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35704
IP address blocks: 80.245.144.0/20 maxlen: 20
80.245.144.0/22 maxlen: 22
80.245.145.0/24 maxlen: 24
80.245.146.0/24 maxlen: 24
80.245.147.0/24 maxlen: 24
80.245.148.0/22 maxlen: 22
80.245.152.0/21 maxlen: 21
80.245.156.0/24 maxlen: 24
80.245.159.0/24 maxlen: 24
2a09:1480::/29 maxlen: 29
2a09:1480::/40 maxlen: 40
2a09:1480:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:37:c3:b1:9d:f7:9b:f0:2b:19:46:dc:21:85:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a39f2291045110b5e7a6c93a71fd7c0bf561281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:ac:25:d4:7d:c4:d2:47:19:22:dd:65:d2:
9f:5a:df:9e:b8:8a:65:a9:da:da:63:1f:98:7e:a8:
04:e5:bf:14:59:4b:e5:3c:23:fc:1d:57:32:c5:a1:
0d:6b:a2:b2:e8:e6:a3:42:4c:31:35:bc:c9:5f:d5:
7d:4d:c5:53:d8:e0:d9:af:99:01:5d:45:f6:95:97:
d5:ab:38:ba:3f:e4:71:01:bf:3d:96:d8:03:2e:88:
53:5d:ee:d9:08:e1:21:f9:ff:22:56:f7:b7:d8:88:
9c:b8:d3:42:d5:5f:34:61:49:d9:cd:97:7e:50:a9:
8c:94:ff:eb:dc:0c:b2:19:d7:96:5c:59:fc:32:40:
c5:3b:6d:20:85:9c:de:22:fe:63:f1:37:1d:31:72:
ff:c9:73:55:72:ea:62:54:b2:a3:02:16:ba:80:8e:
29:23:b9:6d:89:71:d5:f9:c9:20:cc:34:c6:3e:8c:
4f:4f:42:32:6e:6c:9f:76:36:6b:cf:76:f9:cc:64:
80:90:74:16:05:80:cf:48:ac:3a:b1:b9:6f:56:61:
f7:34:08:d0:d4:4b:1a:57:97:a0:d3:07:bf:00:fc:
87:e1:75:a4:b7:29:2f:a3:f6:20:13:67:5f:3f:00:
c8:e5:67:6a:f0:bd:bc:3c:0b:1d:0c:c0:e1:da:f1:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:39:F2:29:10:45:11:0B:5E:7A:6C:93:A7:1F:D7:C0:BF:56:12:81
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/ejnyKRBFEQteemyTpx_XwL9WEoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.144.0/20
IPv6:
2a09:1480::/29
Signature Algorithm: sha256WithRSAEncryption
08:5b:a2:7e:1f:d7:fa:70:f2:ca:e4:70:52:c5:ee:8e:3f:bf:
c7:a2:b0:45:77:42:69:9f:e4:80:c0:86:77:b7:8a:42:dc:bc:
27:94:39:86:43:e7:cd:64:1b:94:de:94:d6:88:f4:c8:62:4d:
48:32:67:62:f1:b2:23:6c:7b:31:1c:96:85:a6:69:a3:ed:2a:
1b:f9:ca:c5:ae:0a:ad:74:94:bc:19:9e:f8:50:8b:d9:30:be:
1f:73:87:d3:c3:56:de:53:57:cf:59:b0:a2:e4:5e:8e:5c:61:
ee:d6:40:77:fa:57:1a:65:6f:1a:89:12:39:9c:f2:23:13:f9:
c5:d9:ec:f9:4d:bf:d1:bb:bb:97:56:41:4a:80:79:9d:da:73:
25:5b:6d:57:09:9b:35:40:87:be:69:6f:cb:27:5e:c7:23:32:
bf:69:a3:04:00:9b:1a:c1:fd:13:06:a6:ff:f5:d1:36:fd:cd:
56:e6:73:e4:8b:0b:22:f4:91:51:a7:79:13:3b:85:56:b8:72:
b3:7c:3b:64:ba:8d:cb:19:96:0a:a1:b6:87:11:d4:cb:8f:8a:
6e:c9:2e:41:c1:b0:a3:ba:50:6c:f3:1f:28:4a:a4:f8:a5:5e:
b5:f7:79:fb:3e:06:ac:1b:1e:97:62:47:ba:ef:72:04:c6:3b:
86:6b:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:45 2025 by rpki-client