Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/2X1Aq3uwv_rdP11PERDf5xc38AI.roa
File: 2X1Aq3uwv_rdP11PERDf5xc38AI.roa (raw, json)
Hash identifier: B7sjMQo7xNloOK1hTmdNbqOOboiaTbdNnO+C5uW+j58=
Subject key identifier: D9:7D:40:AB:7B:B0:BF:FA:DD:3F:5D:4F:11:10:DF:E7:17:37:F0:02
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 01941F8C1D77537699D1563CBD6A045B7127
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/2X1Aq3uwv_rdP11PERDf5xc38AI.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25098
IP address blocks: 46.248.100.0/24 maxlen: 24
82.136.7.0/24 maxlen: 24
82.136.12.0/22 maxlen: 22
82.136.16.0/22 maxlen: 22
85.116.8.0/24 maxlen: 24
85.116.10.0/24 maxlen: 24
85.116.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1d:77:53:76:99:d1:56:3c:bd:6a:04:5b:71:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d97d40ab7bb0bffadd3f5d4f1110dfe71737f002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:51:02:9d:47:8c:fe:94:24:8c:0a:60:dd:
cb:77:bf:ad:b5:ba:d4:ff:7a:19:b7:40:73:28:77:
07:f3:88:db:b1:5d:98:ee:d9:a0:52:8c:aa:41:d5:
a7:5c:c1:f2:4e:1f:f4:ba:1c:83:4c:01:50:8a:2b:
3b:eb:53:0a:fd:6a:7b:aa:78:95:b5:fe:7b:84:9f:
94:77:2a:61:3a:f9:60:af:6f:28:b9:91:9f:e4:7e:
e0:f6:0b:fe:11:64:48:9b:c2:bf:e1:94:e1:66:53:
d0:24:fd:29:e2:da:1b:ed:fb:77:c7:e5:cd:2c:e9:
01:43:be:69:71:9b:93:b0:ae:77:12:a2:4d:62:90:
c7:3e:c9:ec:65:07:93:96:06:f7:da:4e:89:d8:b3:
1f:4b:75:9e:d6:d3:f8:66:3d:62:ba:00:c3:22:9e:
be:60:7a:87:97:b3:1c:65:c8:3d:92:49:11:f1:66:
0f:fb:eb:26:05:67:76:c1:f9:72:18:b6:67:c2:36:
8f:30:0f:4b:77:c9:64:9a:67:ec:67:66:7a:38:25:
9b:d6:ff:5e:79:36:02:3a:d6:df:b3:a8:42:41:57:
a7:66:5b:c6:9a:d3:fd:55:61:16:6a:ba:79:fe:ff:
d7:58:ef:06:8f:30:f6:d0:ec:32:5b:8e:65:32:d0:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:40:AB:7B:B0:BF:FA:DD:3F:5D:4F:11:10:DF:E7:17:37:F0:02
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/2X1Aq3uwv_rdP11PERDf5xc38AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.100.0/24
82.136.7.0/24
82.136.12.0-82.136.19.255
85.116.8.0/24
85.116.10.0/24
85.116.12.0/23
Signature Algorithm: sha256WithRSAEncryption
14:0b:d5:c5:47:e9:9d:be:15:71:4b:98:f1:e3:ef:0f:22:a0:
b2:db:d4:58:e4:db:53:26:8e:ec:5b:30:f6:cc:34:27:92:10:
e5:c3:cd:86:40:5a:df:ed:61:3e:8a:47:35:33:9a:a3:06:59:
5f:c4:bc:df:2a:64:5b:9e:87:0a:a2:a2:60:5d:f1:fa:32:3b:
73:22:82:7f:7a:ab:d8:92:2a:00:3d:99:62:f7:f8:92:77:2d:
31:3a:e7:70:c0:dd:44:02:ab:3d:bd:a2:8c:a8:a5:87:3d:e7:
ac:10:16:4e:80:5b:97:d1:e4:29:82:6e:6d:11:e5:d9:35:2b:
29:c2:ed:70:8b:ad:d9:76:8c:1c:c9:81:d3:89:60:d6:8a:6f:
c1:bc:1c:7f:d5:0b:7d:3b:05:0d:c1:1b:5a:87:d5:00:ef:83:
93:5a:4d:82:8d:2f:19:85:8b:12:a8:50:96:14:16:2d:da:dc:
e1:61:9d:b7:bc:f1:20:7c:c2:e5:c6:9d:5b:17:78:01:ad:d6:
9a:38:62:d6:20:e7:9b:6f:5b:8f:5b:57:ca:f9:fe:0c:c8:70:
6d:40:ec:9c:0d:f8:b5:8f:c2:4f:21:67:1b:65:9b:46:e3:86:
70:70:0a:e1:63:90:eb:1e:b2:30:5c:25:79:68:99:f5:ac:02:
71:d4:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:00 2025 by rpki-client