Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/eLMltkiXvuxBgybELaaf_Cf0V2Y.roa
File: eLMltkiXvuxBgybELaaf_Cf0V2Y.roa (raw, json)
Hash identifier: 5uLg13hjl92VKFo+6GUznRIXVvFtyNC8dmx1VlxF6Sk=
Subject key identifier: 78:B3:25:B6:48:97:BE:EC:41:83:26:C4:2D:A6:9F:FC:27:F4:57:66
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 0190A35460C01C1B453DB334D15212C9F87A
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/eLMltkiXvuxBgybELaaf_Cf0V2Y.roa
Signing time: Thu 11 Jul 2024 19:45:34 +0000
ROA not before: Thu 11 Jul 2024 19:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 84.18.0.0/19 maxlen: 19
92.60.160.0/20 maxlen: 20
92.60.170.0/24 maxlen: 24
92.60.173.0/24 maxlen: 24
92.60.174.0/24 maxlen: 24
185.66.60.0/22 maxlen: 22
185.66.60.0/24 maxlen: 24
185.66.61.0/24 maxlen: 24
185.66.62.0/24 maxlen: 24
195.5.64.0/19 maxlen: 24
212.49.128.0/18 maxlen: 18
212.49.129.0/24 maxlen: 24
212.49.189.0/24 maxlen: 24
212.59.192.0/19 maxlen: 19
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 23
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 20
212.163.0.0/16 maxlen: 16
212.163.1.0/24 maxlen: 24
212.163.5.0/24 maxlen: 24
212.163.31.0/24 maxlen: 24
212.163.48.0/24 maxlen: 24
212.163.91.0/24 maxlen: 24
212.163.92.0/24 maxlen: 24
212.163.94.0/24 maxlen: 24
212.163.130.0/24 maxlen: 24
212.163.185.0/24 maxlen: 24
212.163.193.0/24 maxlen: 24
212.163.216.0/22 maxlen: 22
212.163.220.0/22 maxlen: 22
212.163.225.0/24 maxlen: 24
212.163.226.0/24 maxlen: 24
212.163.227.0/24 maxlen: 24
212.163.235.0/24 maxlen: 24
212.163.240.0/20 maxlen: 20
213.9.128.0/17 maxlen: 17
213.9.142.0/23 maxlen: 23
213.9.144.0/24 maxlen: 24
213.9.162.0/23 maxlen: 23
213.9.182.0/24 maxlen: 24
213.9.185.0/24 maxlen: 24
213.9.186.0/24 maxlen: 24
213.9.190.0/23 maxlen: 23
213.9.217.0/24 maxlen: 24
213.9.224.0/20 maxlen: 20
213.9.240.0/23 maxlen: 23
213.9.244.0/24 maxlen: 24
213.9.245.0/24 maxlen: 24
213.9.246.0/24 maxlen: 24
213.9.247.0/24 maxlen: 24
213.9.248.0/24 maxlen: 24
213.192.192.0/18 maxlen: 18
213.192.193.0/24 maxlen: 24
213.192.195.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.203.0/24 maxlen: 24
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.238.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.241.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.246.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.248.0/21 maxlen: 21
213.192.249.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.253.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
2001:ac0::/29 maxlen: 29
2001:ac0::/32 maxlen: 32
2001:ac0:30fd::/48 maxlen: 48
2001:ac0:c040::/44 maxlen: 44
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a3:54:60:c0:1c:1b:45:3d:b3:34:d1:52:12:c9:f8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Jul 11 19:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78b325b64897beec418326c42da69ffc27f45766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:6c:85:95:aa:e0:53:12:97:0f:41:15:0b:
31:8b:4b:91:9c:16:f4:b8:a6:50:13:e3:f9:2a:93:
33:7f:a4:12:74:99:9e:c8:33:ec:6f:18:37:e3:50:
6d:38:71:7b:c6:bc:ce:b0:10:30:61:2c:85:68:e4:
c7:eb:f3:50:86:1f:21:7e:61:f2:92:40:3e:be:f2:
78:f1:02:10:1d:e4:05:b4:d2:fb:64:39:96:0a:40:
ff:43:91:80:9a:bb:02:c4:67:3c:09:47:f8:e4:c6:
45:de:2a:91:e8:d4:31:bc:4e:f1:9e:e1:a7:3b:ae:
c8:58:e9:ae:69:9d:f7:46:8b:a9:ac:c5:4f:8f:e9:
00:c4:98:47:bf:76:f9:6a:f5:8b:b9:eb:13:fe:d2:
c6:32:d9:ff:85:f8:7a:76:cf:8e:2c:b6:74:41:56:
91:c6:40:ab:84:c0:9a:34:c9:fd:e4:4e:ab:28:ff:
2e:5a:91:9e:99:b5:0c:e0:fc:88:dd:d3:99:6a:13:
7b:0e:61:ff:01:3c:d1:1f:69:9d:e6:f9:8f:5a:db:
43:ab:ca:d1:1c:f5:50:fa:1a:6e:06:bc:69:32:e4:
bc:13:de:c3:3a:77:2f:76:a8:b0:31:8f:db:8b:90:
4d:92:88:3d:66:d5:46:dd:31:ff:2b:ab:6d:2c:e5:
d9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:25:B6:48:97:BE:EC:41:83:26:C4:2D:A6:9F:FC:27:F4:57:66
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/eLMltkiXvuxBgybELaaf_Cf0V2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.0.0/19
92.60.160.0/20
185.66.60.0/22
195.5.64.0/19
212.49.128.0/18
212.59.192.0/19
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:e1:50:86:f9:96:fe:f2:d6:53:4b:ab:7c:62:39:ad:f0:af:
be:58:d2:0e:1f:23:70:4c:84:69:fb:b9:35:48:b5:b4:8b:67:
d8:0d:fc:f8:76:3a:88:a4:65:9a:ff:57:07:f7:30:cb:8b:a3:
77:ac:39:5c:e0:2d:bc:2f:8e:41:41:ae:07:88:80:cd:e0:a1:
93:9e:20:28:21:d4:0b:53:e2:1d:e4:7e:74:fd:5a:5f:3f:14:
58:7b:9b:27:a2:ff:71:af:95:52:8b:46:0f:25:e1:da:3a:52:
53:c3:6d:fe:8d:39:8e:97:69:66:8f:81:d1:ba:bf:3a:17:df:
18:65:93:42:c4:7a:f2:65:a0:ad:f6:20:70:ca:96:19:26:6c:
e9:47:de:29:0c:9b:d6:6b:48:5c:be:9e:c4:6c:75:12:4e:05:
7e:af:48:31:19:20:d0:fb:05:e1:5f:a8:22:be:0e:34:81:df:
ac:02:bf:21:29:b5:a4:61:14:13:fd:c8:18:b2:7e:dd:7f:94:
21:fd:8a:e5:f1:4c:67:cf:e9:23:ac:45:3a:aa:45:42:92:e3:
48:73:15:70:36:8f:ef:53:cd:cd:e0:f1:eb:44:4e:86:86:a1:
7b:5d:4d:85:19:85:9b:b4:07:ee:1a:ba:c4:67:cb:5b:6a:41:
93:3e:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 13:26:14 2024 by rpki-client on console-fra.rpki-client.org