Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa
File: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (raw, json)
Hash identifier: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=
Subject key identifier: D8:40:84:81:A7:B2:BD:26:26:83:72:FA:29:50:E6:B6:AD:D0:B8:3E
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 019426D9595C6F15FA24E904A95E1C2435DF
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 45.83.112.0/22 maxlen: 24
80.254.236.0/22 maxlen: 24
185.220.28.0/22 maxlen: 24
192.144.52.0/22 maxlen: 24
193.9.40.0/22 maxlen: 24
193.187.168.0/22 maxlen: 24
194.39.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:59:5c:6f:15:fa:24:e9:04:a9:5e:1c:24:35:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8408481a7b2bd26268372fa2950e6b6add0b83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:05:ec:07:73:78:2e:b2:9c:fc:de:96:7d:
8d:14:77:5f:25:e9:b9:25:41:2a:43:a4:99:d8:68:
88:10:72:e7:38:ba:61:2e:37:e7:7d:89:b5:9d:b2:
be:67:96:98:80:18:e8:68:ee:cd:3b:89:6c:bb:fc:
f5:c0:46:55:ca:65:cb:82:e9:15:3d:ef:17:e6:cc:
24:f9:ef:fa:0e:21:f7:43:5b:5e:62:58:15:3c:5f:
51:d6:da:ef:47:49:03:94:d8:eb:9d:9c:0a:84:e7:
96:ad:2c:bd:f4:ca:4c:ee:56:40:09:8a:59:7f:ca:
1a:0f:81:f5:45:98:4e:bb:96:ca:25:9c:fb:e5:73:
78:b4:c7:e3:94:5b:1e:e9:89:d7:8d:0e:34:61:38:
c4:ea:fe:1f:02:86:6f:e2:ab:80:66:6c:9d:9e:e9:
c1:84:a7:ab:75:13:30:7d:b3:80:fd:d9:42:f8:9d:
0d:45:f3:10:56:c0:07:e2:ce:39:ab:a6:32:34:61:
ae:5c:bf:36:0f:d5:4d:cc:c6:2d:51:96:2d:02:d9:
e7:f3:23:27:95:63:18:7c:8f:67:27:b0:48:16:a5:
01:3f:5a:2c:7b:cc:4c:6f:1c:70:93:db:a4:62:cc:
a4:01:bf:5b:a6:1a:b4:86:25:37:0b:18:5a:18:bc:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:40:84:81:A7:B2:BD:26:26:83:72:FA:29:50:E6:B6:AD:D0:B8:3E
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.112.0/22
80.254.236.0/22
185.220.28.0/22
192.144.52.0/22
193.9.40.0/22
193.187.168.0/22
194.39.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:47:cf:a9:18:0d:f0:14:5a:45:25:0f:3e:05:e3:c8:03:d0:
43:a0:c5:c1:80:8c:9a:eb:29:56:1c:46:7c:7d:5a:1a:71:1d:
f1:b5:7f:11:5e:33:c0:ef:84:a7:00:73:72:46:a0:96:4a:c6:
2c:b5:d5:67:30:80:3d:5b:9f:b4:82:50:c8:11:4f:c8:16:b9:
65:5f:21:82:46:7d:29:ce:64:ef:b8:50:4b:e2:85:af:63:83:
d9:45:19:0e:54:f4:72:b8:67:c3:94:bb:6d:0f:df:01:ef:c2:
5a:82:30:91:b2:f2:33:c1:1b:bf:c2:27:e3:92:62:53:b9:df:
86:05:c5:0b:53:0b:e5:1e:b2:0b:b7:52:b5:3d:c3:72:50:55:
8c:2e:d6:a9:a9:ce:98:1f:bb:38:e9:25:b9:6c:89:50:c8:58:
72:8f:1d:7a:36:65:2c:6c:04:f8:bc:f2:de:4a:8c:03:fa:59:
38:67:fc:27:18:da:e2:03:30:0d:50:8a:f7:31:2b:26:84:81:
c5:8b:5a:10:f8:d6:61:22:5f:60:be:f7:02:17:4e:f6:e5:4b:
fd:c2:43:54:f2:c2:d2:80:4e:83:92:5b:63:1a:60:93:79:42:
b4:45:7c:c1:0f:a2:32:63:3d:f5:96:5b:7d:83:07:3c:59:e4:
8a:8c:7b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:28:59 2025 by rpki-client