Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/fmaEZE3Z-jqI94nHXnzhINQJBsw.roa
File: fmaEZE3Z-jqI94nHXnzhINQJBsw.roa (raw, json)
Hash identifier: rKiXdEX2+AJVjdA29YInto5q2hEPC92xPP94rQBGlKQ=
Subject key identifier: 7E:66:84:64:4D:D9:FA:3A:88:F7:89:C7:5E:7C:E1:20:D4:09:06:CC
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018D5C0099E73CEDEFEE70F68E6AEAEA6CD9
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/fmaEZE3Z-jqI94nHXnzhINQJBsw.roa
Signing time: Tue 30 Jan 2024 20:12:39 +0000
ROA not before: Tue 30 Jan 2024 20:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47890
IP address blocks: 2.57.122.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
45.129.15.0/24 maxlen: 24
45.138.96.0/24 maxlen: 24
45.138.97.0/24 maxlen: 24
45.138.98.0/24 maxlen: 24
45.138.99.0/24 maxlen: 24
45.148.9.0/24 maxlen: 24
45.148.11.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
80.94.94.0/24 maxlen: 24
92.118.37.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.29.14.0/24 maxlen: 24
193.32.162.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
2a0c:9f00:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5c:00:99:e7:3c:ed:ef:ee:70:f6:8e:6a:ea:ea:6c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 30 20:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e6684644dd9fa3a88f789c75e7ce120d40906cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:2a:16:61:88:dc:d3:91:86:d1:c1:9a:ad:
3a:ad:b0:f0:03:f5:4a:b6:ce:0f:a3:f3:0d:10:37:
8f:8b:6c:bf:38:51:27:29:15:22:44:27:87:8b:c4:
90:af:21:b0:02:e8:87:77:1a:4d:8b:55:20:30:d9:
17:99:0a:48:df:fd:b8:df:4c:59:37:e0:8d:e4:9f:
47:bb:87:ec:8a:4d:22:33:c4:9e:b1:ba:2e:e4:ae:
89:3f:ec:aa:fe:df:c2:c0:12:01:b6:59:b7:eb:88:
b4:e3:fa:ba:7d:b9:f9:f9:86:fa:56:e7:44:fd:9e:
9e:21:a3:01:f4:51:4c:1e:f5:9f:a0:88:3c:41:53:
b6:3f:6b:33:f0:38:20:4e:62:9f:61:cd:45:f8:69:
df:51:fa:53:d1:3a:fc:e7:9b:7a:44:63:8b:7a:77:
54:7d:87:13:b1:c3:0e:2b:50:56:d5:a4:ae:80:16:
25:69:40:b0:c2:f4:3e:d2:ba:d4:cc:01:04:d0:17:
7a:8f:6e:df:4d:75:be:c9:39:76:15:cf:9c:08:91:
cf:51:de:e3:0b:0b:8b:88:7d:eb:7b:5e:98:86:e6:
3e:fe:33:58:d5:84:ee:8b:bd:91:73:88:bb:80:6e:
e9:91:de:5c:4e:33:2d:fe:64:76:be:ab:b7:a8:8d:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:66:84:64:4D:D9:FA:3A:88:F7:89:C7:5E:7C:E1:20:D4:09:06:CC
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/fmaEZE3Z-jqI94nHXnzhINQJBsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.13.212.0/23
45.129.15.0/24
45.138.96.0/22
45.148.9.0/24
45.148.11.0/24
80.94.92.0/24
80.94.94.0/24
92.118.37.0/24
92.118.39.0/24
185.232.64.0/24
185.232.66.0/24
193.29.14.0/24
193.32.162.0/23
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
2a0c:9f00:2::/48
Signature Algorithm: sha256WithRSAEncryption
33:bf:6b:28:57:72:77:cd:c0:49:de:a1:34:e3:67:ed:6b:fc:
0c:d8:7b:15:f2:52:1e:fb:06:8e:1f:e8:7c:97:20:1f:8e:dc:
64:95:13:68:35:df:a4:c1:a0:74:89:16:4a:90:00:fa:35:5c:
75:96:ec:83:69:67:24:65:b2:2a:ae:33:bb:6f:f4:65:fe:16:
0b:9b:5e:f7:4e:98:95:60:84:32:a3:cc:82:08:80:ac:30:fc:
e2:7f:47:4b:e7:97:d7:98:26:e8:d7:c5:39:db:15:c8:d6:8a:
89:d8:57:cd:03:05:fc:86:50:9a:6c:01:1a:ca:1d:56:ca:53:
bc:53:d3:47:eb:8e:82:a2:72:cc:35:ad:b8:a3:36:20:79:fd:
f3:aa:ab:e6:60:8d:37:4f:d6:b6:0a:a8:ca:68:fa:51:35:07:
0c:35:b5:aa:cf:59:78:54:64:3a:fa:fc:f6:31:c7:02:16:6f:
41:3f:9c:42:cf:bc:a0:ff:04:fa:d1:27:ff:da:eb:47:a8:e6:
4d:dc:bf:68:b9:88:4a:ac:d9:4d:93:38:6d:36:4d:8f:99:6c:
2b:6f:89:f8:33:97:bf:aa:42:8a:ee:36:ca:bd:de:6a:af:54:
2f:fe:28:18:8f:61:d5:cd:00:61:a2:33:fd:85:c0:d3:73:79:
73:ad:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:13 2025 by rpki-client