Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/EYShRPlXmJWhgb18KbC7VHOz-8s.roa
File: EYShRPlXmJWhgb18KbC7VHOz-8s.roa (raw, json)
Hash identifier: p4ETAsk/Jr0PEAPHa3UXBY/73Bvs+QNCOIAvajvwJpw=
Subject key identifier: 11:84:A1:44:F9:57:98:95:A1:81:BD:7C:29:B0:BB:54:73:B3:FB:CB
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018DF42C6C17233CB9BFF43D52DD3CE0E4E7
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/EYShRPlXmJWhgb18KbC7VHOz-8s.roa
Signing time: Thu 29 Feb 2024 09:22:48 +0000
ROA not before: Thu 29 Feb 2024 09:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.15.211.0/24 maxlen: 24
62.68.76.0/24 maxlen: 24
80.94.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:2c:6c:17:23:3c:b9:bf:f4:3d:52:dd:3c:e0:e4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Feb 29 09:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1184a144f9579895a181bd7c29b0bb5473b3fbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:df:dc:36:8a:4f:ef:e3:dd:08:3e:a7:e5:89:
a1:d8:cc:bb:72:67:ea:5e:5e:5c:7b:e4:36:77:50:
1e:89:0b:13:ed:50:7d:d4:4f:d8:82:b7:5f:f3:be:
0a:35:a7:46:2b:ff:48:bc:9c:be:9d:fa:b0:ae:56:
82:88:9d:f2:bf:47:79:de:3d:1b:38:e7:1e:40:97:
9e:ba:24:bf:62:1e:db:a7:7d:61:4d:88:64:63:a1:
18:5e:31:5d:cf:b0:68:8c:80:88:05:3e:09:e3:20:
60:5b:2a:c5:ca:b8:34:21:66:6f:f0:f2:70:8f:e4:
1c:30:e1:1e:83:ab:b7:05:cd:fc:f1:5a:c9:af:06:
cf:18:2c:70:8d:dd:1c:2d:e6:9f:f9:28:0f:bf:9e:
d8:4a:25:7c:15:94:45:d3:21:dd:5c:47:99:f3:d9:
28:74:f2:e8:4b:a5:eb:16:6a:c5:0a:0c:ef:0b:e9:
e6:95:39:90:d9:95:3d:44:88:0c:28:d2:3b:8c:b3:
c0:b1:e0:eb:7b:b2:8b:5b:82:74:42:43:aa:34:2b:
09:1c:c2:ba:05:af:45:69:6b:6f:01:55:05:73:a0:
82:9b:47:b4:c8:1a:62:7a:d2:ae:e8:01:c8:77:1d:
43:a6:25:05:91:7d:f9:75:67:79:1b:6f:f7:09:58:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:A1:44:F9:57:98:95:A1:81:BD:7C:29:B0:BB:54:73:B3:FB:CB
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/EYShRPlXmJWhgb18KbC7VHOz-8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.211.0/24
62.68.76.0/24
80.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:16:e5:e3:57:0c:8f:d2:ee:50:87:f7:b5:10:58:e7:42:f4:
1c:9a:31:e0:fa:fd:62:77:cc:fe:73:9f:1b:dd:e9:42:db:5b:
d1:6b:13:c1:2d:45:27:79:62:40:d5:4c:2a:43:fa:90:6a:b0:
5e:87:32:24:57:c4:72:12:f1:f5:dd:21:60:5f:77:15:3b:a3:
13:df:a0:1d:d9:de:e4:ff:b0:ed:ee:46:88:78:d8:52:78:04:
ad:61:c9:24:20:3b:5f:77:c2:4d:d2:8e:bb:a4:a1:0c:01:bb:
04:b6:e4:3b:e9:89:c2:64:c7:df:a7:fb:8a:2a:b7:07:b3:a7:
d0:0c:c0:cb:dd:5b:5f:f6:5c:5f:e3:10:b3:f8:28:82:bc:de:
d2:04:44:c6:ee:91:fe:66:6f:a8:0a:1b:8e:94:f1:33:7f:7a:
d5:1c:af:de:74:9a:bb:62:20:e8:b7:ad:a5:e0:33:12:57:7a:
8e:7e:17:2a:b9:87:68:a2:dd:da:f5:c0:24:61:af:19:5e:13:
36:78:06:ba:b6:11:2b:0a:46:58:b7:1d:11:fa:2f:e6:fe:d8:
70:c2:66:dc:e5:1d:f3:fc:3d:a5:35:ab:19:99:c3:e4:12:e9:
97:f2:df:fe:66:75:c8:b6:b5:7c:25:4b:0d:51:50:ca:70:5f:
b3:39:1e:26
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY30LGwXIzy5v/Q9Ut084OTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjQwMjI5MDkyMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTg0YTE0NGY5NTc5ODk1YTE4MWJkN2MyOWIwYmI1NDczYjNmYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9/cNopP7+PdCD6n5Ymh2My7cmfq
Xl5ce+Q2d1AeiQsT7VB91E/Ygrdf874KNadGK/9IvJy+nfqwrlaCiJ3yv0d53j0b
OOceQJeeuiS/Yh7bp31hTYhkY6EYXjFdz7BojICIBT4J4yBgWyrFyrg0IWZv8PJw
j+QcMOEeg6u3Bc388VrJrwbPGCxwjd0cLeaf+SgPv57YSiV8FZRF0yHdXEeZ89ko
dPLoS6XrFmrFCgzvC+nmlTmQ2ZU9RIgMKNI7jLPAseDre7KLW4J0QkOqNCsJHMK6
Ba9FaWtvAVUFc6CCm0e0yBpietKu6AHIdx1DpiUFkX35dWd5G2/3CVhk+QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBGEoUT5V5iVoYG9fCmwu1Rzs/vLMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvRVlTaFJQbFhtSldoZ2IxOEtiQzdWSE96LThzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQ/TAwQA
PkRMAwQAUF5YMA0GCSqGSIb3DQEBCwUAA4IBAQB+FuXjVwyP0u5Qh/e1EFjnQvQc
mjHg+v1id8z+c58b3elC21vRaxPBLUUneWJA1UwqQ/qQarBehzIkV8RyEvH13SFg
X3cVO6MT36Ad2d7k/7Dt7kaIeNhSeAStYckkIDtfd8JN0o67pKEMAbsEtuQ76YnC
ZMffp/uKKrcHs6fQDMDL3Vtf9lxf4xCz+CiCvN7SBETG7pH+Zm+oChuOlPEzf3rV
HK/edJq7YiDot62l4DMSV3qOfhcquYdoot3a9cAkYa8ZXhM2eAa6thErCkZYtx0R
+i/m/thwwmbc5R3z/D2lNasZmcPkEumX8t/+ZnXItrV8JUsNUVDKcF+zOR4m
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:50 2025 by rpki-client