Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/Kq5xAZANKOfKwGgabwcEpDAlttw.roa
File: Kq5xAZANKOfKwGgabwcEpDAlttw.roa (raw, json)
Hash identifier: gZrCab7OfKcDgXrji1r5JrFbiZW+bpKbWNRFXqaDbXg=
Subject key identifier: 2A:AE:71:01:90:0D:28:E7:CA:C0:68:1A:6F:07:04:A4:30:25:B6:DC
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 019539F882F19500B8FC62413E83EC0BFEAB
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/Kq5xAZANKOfKwGgabwcEpDAlttw.roa
Signing time: Mon 24 Feb 2025 21:59:02 +0000
ROA not before: Mon 24 Feb 2025 21:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212286
IP address blocks: 45.87.128.0/23 maxlen: 23
45.91.73.0/24 maxlen: 24
45.128.80.0/22 maxlen: 22
45.131.216.0/22 maxlen: 22
45.132.164.0/22 maxlen: 22
45.138.248.0/22 maxlen: 22
45.145.136.0/22 maxlen: 22
45.153.36.0/22 maxlen: 22
45.154.148.0/22 maxlen: 22
193.17.224.0/24 maxlen: 24
193.17.231.0/24 maxlen: 24
193.17.253.0/24 maxlen: 24
193.17.255.0/24 maxlen: 24
212.102.124.0/24 maxlen: 24
2a0e:fc87:fffe::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:f8:82:f1:95:00:b8:fc:62:41:3e:83:ec:0b:fe:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Feb 24 21:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2aae7101900d28e7cac0681a6f0704a43025b6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:66:c5:9e:21:90:4d:cd:f2:e1:73:05:a5:
47:12:26:58:71:aa:d6:21:2c:6e:3e:33:29:ad:48:
7c:00:ac:46:0e:64:48:71:e7:6c:18:4f:9e:59:49:
a4:77:52:d3:ca:9b:6d:d3:8f:22:0a:eb:2a:ff:e3:
3f:5c:06:d4:ae:4e:f5:03:35:8c:f3:f1:c3:7c:e7:
f1:34:c6:37:13:bb:16:58:8a:68:b3:df:d7:62:d0:
c7:ef:fa:04:fa:51:dd:8a:3f:fc:ee:22:6e:84:58:
c2:a3:9d:13:ca:88:fb:61:a0:ac:bb:e5:00:62:f1:
7a:13:79:7e:ee:03:13:95:46:13:e4:ba:3d:62:84:
4f:b0:60:15:c5:ae:37:ea:fb:16:f2:01:fb:2d:25:
35:ba:e0:e3:ba:52:55:eb:59:3b:90:ae:89:b3:e6:
99:24:14:5e:c9:85:b0:7d:64:f6:f3:6f:14:57:e4:
99:41:4c:75:a0:d3:08:45:d2:b3:a1:58:93:f6:20:
37:72:8e:75:e0:66:2f:9e:da:b0:db:2b:fe:5b:42:
2f:04:d4:b3:7e:ae:be:91:f0:1c:b5:10:a3:62:da:
c9:e4:33:9e:39:ce:a6:60:97:a5:c0:cc:55:2d:8d:
d1:ca:7f:c6:c7:2d:86:8b:91:5f:cb:28:51:e5:5b:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:71:01:90:0D:28:E7:CA:C0:68:1A:6F:07:04:A4:30:25:B6:DC
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/Kq5xAZANKOfKwGgabwcEpDAlttw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.128.0/23
45.91.73.0/24
45.128.80.0/22
45.131.216.0/22
45.132.164.0/22
45.138.248.0/22
45.145.136.0/22
45.153.36.0/22
45.154.148.0/22
193.17.224.0/24
193.17.231.0/24
193.17.253.0/24
193.17.255.0/24
212.102.124.0/24
IPv6:
2a0e:fc87:fffe::/47
Signature Algorithm: sha256WithRSAEncryption
86:a5:d7:3c:af:7a:0f:44:77:09:ee:92:69:4e:70:07:4e:4b:
30:59:4f:2f:2b:6a:f8:6f:66:38:81:68:fb:34:f2:a9:86:c2:
3e:c1:e7:2b:78:f3:cc:8c:1b:d8:47:13:4d:ef:18:5e:81:f4:
0a:e2:a5:5b:f8:ed:c5:07:30:b0:d0:1e:e8:95:70:67:67:8e:
13:75:46:24:ae:cb:16:53:62:18:40:da:d5:b9:fa:cd:96:64:
0a:19:14:68:29:75:9b:83:b1:b2:d1:54:3f:39:2f:36:fd:34:
7c:12:ed:a4:f2:41:bd:b1:f8:4b:be:dc:8a:ec:f0:7b:ab:8c:
ba:0e:c9:82:28:1d:62:32:08:ce:a4:76:4c:22:82:02:5b:4b:
7f:1c:1b:c6:89:19:e4:f5:4f:7b:b4:2d:b8:e7:bb:88:03:e8:
9e:11:b7:39:fb:3a:74:3f:fb:8d:f6:e6:98:1e:e4:9f:46:9d:
d9:1e:f6:71:54:ac:e9:88:64:0c:f9:59:ae:51:2a:b1:71:a4:
f9:59:7d:00:74:e9:8b:ed:11:4a:91:46:a5:20:9b:51:10:89:
a1:d4:9c:52:e9:93:52:cf:15:4e:f3:86:c7:e5:3c:3e:df:85:
b5:5d:75:a9:e5:cb:c1:cb:91:07:1c:fe:25:15:7c:ea:40:36:
14:bc:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:50 2025 by rpki-client