Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ldMFW0X-QYPgKFzb16ww8RuwzJU.roa
File: ldMFW0X-QYPgKFzb16ww8RuwzJU.roa (raw, json)
Hash identifier: eQmUCxOPAjl5G/BKyj0zN1Ia5XS3qqch4uIRH9gt18k=
Subject key identifier: 95:D3:05:5B:45:FE:41:83:E0:28:5C:DB:D7:AC:30:F1:1B:B0:CC:95
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 018CC4936F5DFEB2CB483580CBCE7D619891
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ldMFW0X-QYPgKFzb16ww8RuwzJU.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9153
IP address blocks: 85.116.9.0/24 maxlen: 24
46.248.96.0/19 maxlen: 19
82.136.0.0/18 maxlen: 18
82.136.4.0/23 maxlen: 23
82.136.8.0/22 maxlen: 22
195.68.206.0/24 maxlen: 24
195.22.128.0/23 maxlen: 23
82.136.48.0/22 maxlen: 22
2001:4088::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6f:5d:fe:b2:cb:48:35:80:cb:ce:7d:61:98:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95d3055b45fe4183e0285cdbd7ac30f11bb0cc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:bc:1b:c3:9e:e6:40:38:a5:e3:e9:17:57:
b3:f5:73:8f:ec:da:ca:6b:3d:9e:85:f8:c0:64:6a:
c6:e5:48:9c:53:c4:89:b2:c8:b3:6e:56:c4:1e:b4:
5d:1b:22:ad:c1:8e:bf:a3:dd:df:41:60:ee:35:2f:
57:83:db:e7:69:5c:76:ea:a9:ed:87:0a:40:51:1c:
a4:b0:b8:fe:82:9b:49:3a:8a:2b:b1:9c:cb:de:98:
28:4a:09:ad:0b:60:42:41:08:df:d7:2f:53:34:52:
51:8a:32:1c:a4:71:72:5c:c5:8b:b7:9f:6c:79:21:
6e:af:1d:8e:2e:fb:1d:7c:1d:6a:1a:9f:36:9c:8e:
9f:69:b2:1c:82:b3:ff:6f:64:ed:52:6e:f1:b9:e6:
7c:60:28:a0:4b:06:3a:ef:08:e0:f3:b3:38:79:0f:
0c:d9:9d:9e:f6:34:39:af:a9:53:2e:db:25:31:d3:
51:b4:b1:68:0b:35:e6:bd:89:9d:94:e6:cc:ab:aa:
14:e1:68:a7:bb:bc:a5:b8:ad:e8:56:7b:09:ae:e3:
d4:bf:05:d3:4e:f9:bc:d8:da:36:5d:9e:76:7a:58:
e1:ba:c5:0e:f3:55:2c:88:1b:3e:2b:19:fd:7a:05:
f8:84:a7:e3:80:28:e0:22:c9:d6:1e:66:b8:69:26:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:05:5B:45:FE:41:83:E0:28:5C:DB:D7:AC:30:F1:1B:B0:CC:95
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ldMFW0X-QYPgKFzb16ww8RuwzJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.96.0/19
82.136.0.0/18
85.116.9.0/24
195.22.128.0/23
195.68.206.0/24
IPv6:
2001:4088::/32
Signature Algorithm: sha256WithRSAEncryption
2e:cd:d3:90:4b:e7:f4:34:bd:27:5b:50:e6:1d:ca:46:ab:3b:
74:d2:58:a5:35:64:48:67:bc:43:d8:38:be:c4:a8:7a:e9:c7:
09:b2:6e:e9:f9:73:bd:87:71:34:a7:a8:64:c5:01:a9:2b:f0:
32:e8:43:b9:cd:47:9c:6b:94:d1:c4:85:6a:1c:79:e1:00:cd:
cd:ef:ff:34:93:c4:80:0e:2f:c2:15:2e:58:af:df:be:5d:80:
a5:54:eb:21:37:15:a1:b5:f3:d3:62:6e:c9:e3:7c:a7:37:a2:
35:ac:ef:4d:90:b3:53:3f:71:50:e0:dc:97:e5:d5:c7:7c:e8:
f9:48:8f:ac:f3:b4:27:d2:40:e7:84:bd:7a:24:f3:32:34:78:
87:24:4d:13:6e:ef:8d:d5:45:82:c0:98:5d:7b:29:5c:b6:91:
09:99:a7:68:45:09:ad:39:92:a9:b8:1a:9e:b2:30:28:bc:3d:
40:82:1a:4f:c0:9d:f0:30:96:94:8e:06:36:0a:84:66:ca:f3:
b7:d3:0f:82:8e:de:9a:6e:74:ed:5c:e3:78:a0:3c:a6:3e:ba:
ec:5b:72:c3:23:57:d0:56:51:1a:7d:7d:3a:e5:a1:f7:74:e5:
7c:5e:05:5d:34:95:e5:26:2a:bd:54:9a:4d:a7:9f:56:b7:e7:
57:57:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:49 2025 by rpki-client