Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/EJxH9YM4T4z2OK_adCvCeJ1uWkQ.roa
File: EJxH9YM4T4z2OK_adCvCeJ1uWkQ.roa (raw, json)
Hash identifier: uAsvwaMtcMOr9i0+t37QKzdz9ftJWtmHdf0VDRcsGJI=
Subject key identifier: 10:9C:47:F5:83:38:4F:8C:F6:38:AF:DA:74:2B:C2:78:9D:6E:5A:44
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 01941F8C339936A225C2E35144B6F39E6196
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/EJxH9YM4T4z2OK_adCvCeJ1uWkQ.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207990
IP address blocks: 37.61.226.0/24 maxlen: 32
43.252.28.0/22 maxlen: 32
45.114.240.0/22 maxlen: 32
45.130.120.0/22 maxlen: 32
85.208.148.0/22 maxlen: 32
89.223.14.0/23 maxlen: 32
89.223.18.0/23 maxlen: 32
92.255.32.0/21 maxlen: 32
92.255.86.0/23 maxlen: 32
94.176.48.0/20 maxlen: 32
94.176.80.0/20 maxlen: 32
103.30.12.0/22 maxlen: 32
103.207.152.0/23 maxlen: 32
103.211.184.0/23 maxlen: 32
103.225.128.0/22 maxlen: 32
116.212.188.0/22 maxlen: 32
139.5.104.0/22 maxlen: 32
180.94.216.0/22 maxlen: 32
193.151.52.0/22 maxlen: 32
203.78.168.0/21 maxlen: 32
206.204.0.0/20 maxlen: 32
206.204.16.0/20 maxlen: 32
206.204.32.0/20 maxlen: 32
206.204.48.0/20 maxlen: 32
213.188.64.0/22 maxlen: 32
213.188.80.0/20 maxlen: 32
216.194.80.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:33:99:36:a2:25:c2:e3:51:44:b6:f3:9e:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=109c47f583384f8cf638afda742bc2789d6e5a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:ae:9c:47:0d:bd:4d:70:9e:80:96:6d:62:
ca:02:42:d0:c0:d0:a2:70:7f:4b:17:cc:11:9f:bd:
fd:43:ab:d6:51:c9:9a:f1:4d:06:31:a7:b4:77:05:
6c:56:cf:94:3b:72:70:ab:2a:e3:46:ab:4e:14:bc:
c7:93:19:d8:77:1d:ad:46:39:0e:65:4e:02:ef:42:
11:6e:4a:25:7d:0d:3f:ce:d0:a8:c6:e6:19:1d:68:
44:76:a4:09:f6:3c:d8:57:85:ef:bb:1e:c1:d9:92:
d7:89:b6:49:b2:b3:4b:40:ea:89:da:1d:70:71:d8:
37:af:37:13:ff:e5:79:2f:04:cf:49:f8:de:06:f0:
9b:7a:eb:b8:59:7e:aa:93:3b:24:31:93:a1:6d:5d:
01:06:a3:ef:ee:06:b2:e4:1f:5c:f0:28:6a:ef:79:
58:18:d6:1c:d8:88:22:78:d6:61:3e:6c:96:21:79:
af:84:e6:db:4e:61:e3:71:2d:1a:ff:24:cd:b1:35:
39:e1:28:94:2e:c0:3f:1c:85:5f:21:94:d1:ad:c4:
a3:b8:5f:15:1c:6e:96:82:5b:ac:ee:30:56:be:d4:
a8:62:d4:36:2e:4d:de:37:73:53:ed:97:b9:4a:9a:
3e:26:73:d4:50:bc:8d:c4:02:58:20:3a:0a:c9:ab:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:47:F5:83:38:4F:8C:F6:38:AF:DA:74:2B:C2:78:9D:6E:5A:44
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/EJxH9YM4T4z2OK_adCvCeJ1uWkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/24
43.252.28.0/22
45.114.240.0/22
45.130.120.0/22
85.208.148.0/22
89.223.14.0/23
89.223.18.0/23
92.255.32.0/21
92.255.86.0/23
94.176.48.0/20
94.176.80.0/20
103.30.12.0/22
103.207.152.0/23
103.211.184.0/23
103.225.128.0/22
116.212.188.0/22
139.5.104.0/22
180.94.216.0/22
193.151.52.0/22
203.78.168.0/21
206.204.0.0/18
213.188.64.0/22
213.188.80.0/20
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:cd:c8:68:d5:5e:d6:96:2c:60:55:6e:6f:56:06:1f:86:b5:
8a:90:1b:03:fa:87:b6:4f:0a:1a:5c:77:21:41:0a:14:b6:97:
24:ed:0a:b7:13:32:e9:59:ff:a9:b2:d8:4e:4b:6a:06:9b:58:
2a:50:9c:45:8b:08:ca:6b:16:60:ec:10:f0:d3:6e:30:ff:3a:
39:39:40:ee:34:5e:71:d9:c4:89:a4:52:a2:08:b8:b0:10:2c:
b6:68:61:4c:e0:49:13:c4:c2:6e:04:59:19:db:18:1c:16:06:
50:49:29:e9:11:d2:70:cd:d9:d4:4d:09:f2:ec:b8:b9:6f:eb:
eb:ed:7c:aa:dd:5a:17:74:e7:5e:b4:4e:6a:e2:27:51:2b:10:
b8:7f:46:f4:e7:56:2f:26:c4:d6:cc:27:04:14:5d:f3:10:aa:
6a:fa:6a:d4:ca:90:32:c0:35:04:37:2f:c1:be:d3:72:0b:18:
19:e9:97:d3:68:7c:c9:80:60:b0:10:c9:32:6d:e0:84:34:6f:
42:70:f4:74:60:b7:73:82:be:00:62:9f:7c:39:30:62:e6:69:
3a:fb:5d:b4:1e:7c:14:c7:35:b9:55:ab:0e:41:d8:63:df:02:
06:c5:7a:eb:50:8d:22:bf:d4:59:3c:5a:87:de:6d:31:35:85:
50:f1:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:04 2025 by rpki-client