Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/2palNxTXR2q3BTJIpB_NKkJrEl8.roa
File: 2palNxTXR2q3BTJIpB_NKkJrEl8.roa (raw, json)
Hash identifier: j0RmwcfU/SZZR+APW4WjHcEl+9Ne/ZgmkqWWs1c0W7I=
Subject key identifier: DA:96:A5:37:14:D7:47:6A:B7:05:32:48:A4:1F:CD:2A:42:6B:12:5F
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018433F5AFF59D52A53FC475D65F7B069F65
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/2palNxTXR2q3BTJIpB_NKkJrEl8.roa
Signing time: Tue 01 Nov 2022 16:10:50 +0000
ROA not before: Tue 01 Nov 2022 16:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47890
IP address blocks: 45.129.15.0/24 maxlen: 24
2.57.122.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.29.14.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:f5:af:f5:9d:52:a5:3f:c4:75:d6:5f:7b:06:9f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 1 16:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da96a53714d7476ab7053248a41fcd2a426b125f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:37:c5:a7:c4:21:fd:52:3d:61:11:76:aa:
60:67:ca:6a:1b:c6:dd:1a:e2:65:07:05:da:9a:1c:
8d:75:82:16:b2:d9:e0:00:6f:07:01:da:60:ab:98:
75:66:58:21:52:e7:3b:a2:73:65:93:f3:b1:0c:96:
be:54:12:64:93:07:91:41:da:a6:3f:f8:1b:97:9c:
b1:d3:9b:f4:0f:1c:a9:bc:ff:ba:d0:d8:30:d3:9b:
19:b8:75:cd:f9:f5:2a:84:b5:71:aa:26:15:fb:7e:
54:4c:1e:7e:4e:ca:e3:97:96:0f:0d:8c:e5:b1:f7:
25:96:f1:51:fa:cd:f8:f5:04:dd:60:09:87:aa:51:
27:17:80:4d:b8:69:62:db:36:68:eb:01:69:e3:2c:
3f:b8:5e:12:75:c2:cb:e7:32:f8:48:ba:eb:87:e7:
bf:c1:bd:55:29:c6:e7:21:b0:26:7f:a3:35:82:f2:
eb:c4:62:35:ed:a6:c9:39:3a:c9:d9:09:94:00:c0:
98:41:87:48:fd:69:a7:36:90:61:70:8e:8f:65:f4:
e2:84:be:fd:8e:4f:1f:0a:e0:17:2d:4d:28:f8:46:
1a:74:b6:5c:7f:9c:04:14:da:9d:85:8b:d9:be:46:
36:61:d1:81:43:71:b7:96:5b:64:eb:e8:4e:8b:69:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:96:A5:37:14:D7:47:6A:B7:05:32:48:A4:1F:CD:2A:42:6B:12:5F
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/2palNxTXR2q3BTJIpB_NKkJrEl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.13.212.0/23
45.129.15.0/24
45.134.50.0/24
80.94.92.0/24
92.118.39.0/24
185.232.64.0/24
185.232.66.0/24
193.29.14.0/24
193.32.160.0/24
193.32.163.0/24
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
74:d3:52:da:c9:10:31:a9:fc:5f:8c:4d:ca:c3:c3:99:2e:78:
5d:4d:a4:ea:9c:2a:22:29:c0:80:a4:59:c3:c3:8e:48:59:93:
d2:ab:4e:20:14:0d:ab:da:20:47:70:74:c8:fe:9f:9c:8a:67:
5b:fd:6b:40:8c:48:5e:5b:4b:ba:86:99:f9:da:a4:16:4b:bf:
53:b0:bc:4f:da:89:84:7e:76:da:57:ed:59:2b:97:60:d1:aa:
06:15:96:d3:8e:3c:06:80:ad:5a:57:2e:f5:46:e0:06:e2:75:
d7:a7:ac:d7:9d:1d:e4:3c:2b:15:23:67:70:5c:1e:e9:9b:d9:
14:d3:f2:67:33:96:2f:16:54:58:91:98:5a:5e:56:ce:69:73:
81:be:f9:4f:e7:00:2b:4e:01:1f:a1:2c:4c:20:a7:bc:14:cf:
d9:13:c8:ba:f6:4b:4c:81:28:10:2a:d2:d2:00:0c:71:17:13:
5d:de:ed:8e:9c:45:03:38:da:1a:2d:d1:39:c2:7d:41:f6:33:
2c:2d:e0:68:4f:d6:dd:85:74:87:aa:d1:68:41:ef:9f:cd:f5:
86:b4:d5:56:e0:9f:a9:19:a0:3b:97:17:8d:8c:ed:83:eb:33:
a0:21:6f:ab:76:22:24:67:fc:97:f0:b0:a4:16:22:f9:03:5e:
e6:c6:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:59 2025 by rpki-client