Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/EVPStFkRBh3w_uJOzW4uT9O6JII.roa
File: EVPStFkRBh3w_uJOzW4uT9O6JII.roa (raw, json)
Hash identifier: SHDlCejSDqZK7r1lDdHKLyehrWKZBsK+RJ2vrP1zWkY=
Subject key identifier: 11:53:D2:B4:59:11:06:1D:F0:FE:E2:4E:CD:6E:2E:4F:D3:BA:24:82
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018DD5A4F9AF0A5E231D41C60855D88BAE2B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/EVPStFkRBh3w_uJOzW4uT9O6JII.roa
Signing time: Fri 23 Feb 2024 11:06:15 +0000
ROA not before: Fri 23 Feb 2024 11:06:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12325
IP address blocks: 89.46.128.0/22 maxlen: 24
89.46.232.0/21 maxlen: 24
93.115.9.0/24 maxlen: 24
93.115.104.0/22 maxlen: 24
185.18.224.0/23 maxlen: 24
188.215.40.0/22 maxlen: 24
188.241.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:a4:f9:af:0a:5e:23:1d:41:c6:08:55:d8:8b:ae:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 23 11:06:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1153d2b45911061df0fee24ecd6e2e4fd3ba2482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:aa:0f:28:58:1e:af:e5:85:44:f4:9f:f4:
04:8d:9e:ee:e8:ba:5c:fa:bc:9d:cc:14:23:7e:47:
81:1f:47:02:8c:e8:9d:a3:29:99:03:4b:bb:f2:90:
37:cf:66:6e:58:14:25:87:c4:fa:1e:7a:ca:5b:0d:
77:ef:56:37:c7:22:19:78:79:51:7e:79:72:b2:5e:
ea:a8:90:ac:80:a4:46:bb:70:f4:83:35:3b:39:1c:
9a:2b:95:4b:ec:5f:51:05:a6:9c:8e:e1:ef:a8:5d:
a9:05:9d:02:d9:8a:c9:bc:c5:2f:c4:3f:52:42:aa:
a4:bc:1f:78:9f:ae:4b:88:cd:61:06:08:ed:81:7e:
22:8f:04:65:cd:1e:83:7e:8b:94:26:19:86:dc:cb:
02:35:14:6d:35:28:06:f1:fc:7b:42:fc:13:01:6c:
9a:33:ed:5a:fa:ec:6a:07:82:27:a8:3a:87:32:e2:
da:aa:9e:49:b7:f5:ec:8f:14:70:12:de:ff:18:d6:
18:66:6a:c9:3e:cc:e9:f8:c5:4d:09:f3:d5:d9:8d:
ae:94:a2:d4:14:e0:e2:41:bf:18:87:7b:9a:09:e7:
9e:ba:03:17:33:0c:5f:3d:9c:73:ec:b0:d7:1a:68:
fb:05:88:f9:4f:fd:33:28:8b:f7:42:5f:85:5d:60:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:D2:B4:59:11:06:1D:F0:FE:E2:4E:CD:6E:2E:4F:D3:BA:24:82
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/EVPStFkRBh3w_uJOzW4uT9O6JII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.128.0/22
89.46.232.0/21
93.115.9.0/24
93.115.104.0/22
185.18.224.0/23
188.215.40.0/22
188.241.220.0/23
Signature Algorithm: sha256WithRSAEncryption
12:d0:22:5b:19:01:fa:c1:d9:37:db:01:a1:74:a8:01:8f:fe:
db:4c:1d:b1:5c:a3:b3:aa:69:10:ef:15:0b:55:d7:6e:c6:06:
e3:e4:fd:34:c4:2e:20:30:a9:33:d5:5d:6f:73:83:f1:1d:9b:
93:f8:17:53:dc:45:f3:df:9c:f2:6e:02:35:cf:bd:17:3c:af:
42:c3:b8:af:48:4d:ac:6b:90:b6:ba:9e:be:6f:f4:80:dd:b8:
2a:cb:d9:06:19:02:85:e0:62:3b:48:fb:45:e3:2a:a5:66:f6:
0e:56:dd:da:2b:4b:2f:ad:78:28:0c:41:a7:64:39:fb:b2:ae:
fa:5b:90:2f:db:06:ab:36:fc:0a:6d:04:02:b4:5b:a5:a2:eb:
fe:ce:ef:16:00:4a:52:93:64:30:6a:17:d1:14:36:64:e8:85:
5a:f2:6e:8a:6f:2f:2f:11:18:ec:48:47:0d:2f:1e:cc:74:9a:
51:23:17:2d:cb:23:8f:1a:0a:08:1d:32:f3:a6:5e:ac:26:28:
da:c8:78:72:16:a2:f8:de:92:12:9e:4b:d0:ed:32:88:44:6a:
df:1c:e9:49:f5:f5:26:6a:73:79:17:8e:16:51:8a:25:df:66:
0a:39:20:80:32:0c:da:4a:41:9f:a5:d6:4a:08:8d:af:fc:21:
19:29:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:20 2025 by rpki-client