Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/e2BcAV15shqdiU98OktC9_gXkUU.roa
File: e2BcAV15shqdiU98OktC9_gXkUU.roa (raw, json)
Hash identifier: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=
Subject key identifier: 7B:60:5C:01:5D:79:B2:1A:9D:89:4F:7C:3A:4B:42:F7:F8:17:91:45
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019425FD95ACE0BAC940E2187E50F29F087B
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/e2BcAV15shqdiU98OktC9_gXkUU.roa
Signing time: Thu 02 Jan 2025 07:49:23 +0000
ROA not before: Thu 02 Jan 2025 07:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35077
IP address blocks: 45.13.32.0/22 maxlen: 22
166.108.128.0/18 maxlen: 18
166.108.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:95:ac:e0:ba:c9:40:e2:18:7e:50:f2:9f:08:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b605c015d79b21a9d894f7c3a4b42f7f8179145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:38:6f:65:f8:8a:d3:fe:41:fc:7a:4b:ea:
a9:12:a4:9b:8d:90:cf:ae:0c:ab:54:6c:ab:d7:b4:
0c:2b:35:01:74:91:c2:a5:16:f3:b5:a2:37:fb:c9:
c1:60:a1:39:cf:dd:e7:69:53:44:ed:20:c8:8a:00:
f6:1b:c2:7c:c3:d2:36:11:ce:92:4a:39:3d:21:ea:
ad:b3:ea:f4:f2:9d:33:64:10:17:ab:88:9d:d0:33:
25:9a:2d:88:f2:15:db:05:96:5f:53:b9:af:39:81:
16:92:6a:42:e4:c1:b1:5b:85:4b:a3:68:16:5d:44:
8f:2d:06:93:be:9e:cf:fd:6a:c3:64:eb:a1:24:85:
99:48:af:7d:2d:62:c7:9f:bc:c3:af:79:ab:19:03:
3d:e9:03:a7:7e:65:26:78:3d:55:d4:6f:6b:09:7b:
c2:be:13:58:88:9d:9c:14:78:1b:97:0c:66:64:f6:
63:44:c5:12:ab:0f:2f:2d:46:fb:8b:d6:b0:b4:76:
8a:e6:6e:7f:f9:6e:3c:54:2c:49:4e:59:bb:67:81:
35:89:ff:16:27:85:6a:9c:f3:03:9b:91:06:95:5d:
75:aa:e1:24:46:3a:2c:81:8c:ea:ac:1e:76:04:89:
25:47:50:c7:d2:ea:ec:ac:72:26:7e:6e:4c:d3:7c:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:5C:01:5D:79:B2:1A:9D:89:4F:7C:3A:4B:42:F7:F8:17:91:45
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/e2BcAV15shqdiU98OktC9_gXkUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.32.0/22
166.108.128.0/18
Signature Algorithm: sha256WithRSAEncryption
c2:56:4e:bc:fe:71:31:f4:0b:dd:47:4d:b3:30:6e:85:9f:a3:
d2:a6:3b:e3:92:b9:8d:25:89:9c:8d:36:86:4a:65:6d:d0:85:
12:a9:4d:a5:b5:8c:28:62:e2:a4:89:47:eb:0f:81:48:d5:d6:
10:58:f3:38:76:34:7a:3f:08:7e:2a:e1:41:0d:ac:d0:c8:64:
2e:28:1f:33:70:8a:35:89:a6:3a:fc:b1:db:b2:8a:4e:e3:f4:
aa:b4:c4:78:d0:f1:31:74:f0:0b:13:ca:bd:17:17:de:35:af:
dd:33:2a:7a:9b:61:b6:bf:03:a4:e6:aa:11:08:20:0d:33:40:
16:37:8f:6f:c7:b0:a9:a0:1c:57:c7:3c:6a:19:ff:e4:d4:35:
81:29:47:37:95:bb:ae:da:ec:cc:fe:80:80:40:e9:67:3b:38:
dc:5b:d7:87:40:9c:f1:fe:56:3f:2b:07:9d:92:51:34:9b:60:
ac:ec:70:08:91:5f:ba:9d:be:03:a6:4b:14:43:fa:4a:42:d9:
f5:e4:30:44:f0:13:09:81:9c:f5:90:bf:2c:c5:c1:38:4c:d9:
ec:5c:56:28:59:cf:a5:f1:fe:36:1a:80:d7:62:b6:46:22:9e:
f9:e6:24:6d:95:5b:c5:a1:3b:89:a8:41:ea:77:2a:e5:28:17:
8f:ef:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:40:57 2025 by rpki-client