Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/rLGKVyUKBREDsm9aK6Yw80lJkwg.roa
File: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (raw, json)
Hash identifier: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=
Subject key identifier: AC:B1:8A:57:25:0A:05:11:03:B2:6F:5A:2B:A6:30:F3:49:49:93:08
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 019422FB11A65202DDA02B5FFC294766B06C
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/rLGKVyUKBREDsm9aK6Yw80lJkwg.roa
Signing time: Wed 01 Jan 2025 17:47:46 +0000
ROA not before: Wed 01 Jan 2025 17:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211768
IP address blocks: 45.83.160.0/22 maxlen: 24
185.86.188.0/22 maxlen: 24
185.124.192.0/22 maxlen: 24
193.19.128.0/22 maxlen: 24
193.148.188.0/24 maxlen: 24
193.148.190.0/24 maxlen: 24
2a06:b500::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:11:a6:52:02:dd:a0:2b:5f:fc:29:47:66:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jan 1 17:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acb18a57250a051103b26f5a2ba630f349499308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:58:4d:ad:f8:6b:f5:c6:a6:95:cf:1d:ff:c2:
44:c5:bc:6c:9b:41:cb:aa:68:e1:a9:9c:27:8a:43:
62:a2:a7:30:4b:b9:3d:77:26:e6:14:ff:d0:84:9b:
bf:9d:a5:c8:96:a5:70:28:15:4c:02:bf:6f:0c:29:
fb:33:83:83:72:ec:27:b7:a1:18:91:ce:6b:66:90:
da:2f:71:d7:af:fe:4a:04:99:3e:87:f7:a5:b4:ef:
31:ad:5d:88:9b:3e:27:90:80:7c:80:84:ac:a8:82:
5c:a4:bc:64:02:47:59:60:a0:5f:5a:68:62:c4:11:
e9:0b:5b:eb:bd:23:4f:48:4a:27:79:05:7d:03:61:
8a:d4:3f:b2:11:c0:8a:c3:46:55:a4:d6:00:43:fd:
dc:3d:04:6a:fd:d7:31:a3:2a:21:8f:90:41:b8:4c:
70:82:8a:9f:a3:c8:33:f6:59:ea:81:eb:47:6b:3e:
e9:94:a3:7f:e2:0a:55:e4:38:55:8d:03:fa:95:ff:
6d:16:f5:04:bc:8a:1e:71:94:5f:d4:27:66:36:ac:
58:7e:08:d2:e9:ef:45:5d:e8:e4:7e:e8:af:ff:7f:
75:0d:b7:d7:f9:81:25:59:82:54:e3:22:13:46:05:
d0:27:8f:ad:09:ec:fc:f9:41:e0:11:92:14:07:d2:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:8A:57:25:0A:05:11:03:B2:6F:5A:2B:A6:30:F3:49:49:93:08
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/rLGKVyUKBREDsm9aK6Yw80lJkwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.160.0/22
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.188.0/24
193.148.190.0/24
IPv6:
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
7b:9a:58:0d:26:63:17:9a:25:c9:01:71:d0:1e:95:33:c5:29:
b0:e1:11:c1:37:d2:06:2d:8e:9c:59:13:e8:30:9e:8a:f2:ab:
d1:8a:f5:6b:9c:3c:16:e6:eb:4e:77:4c:f6:6f:34:45:a2:dd:
a2:a3:92:e0:99:35:f6:a6:32:52:49:76:86:0b:d9:c6:c0:3e:
78:28:57:f2:13:dd:d1:0d:0d:41:e6:3f:32:08:4f:c1:ed:31:
3f:da:11:3e:46:c7:16:e7:68:82:78:1d:b9:a2:d9:a4:32:4c:
54:c4:6e:cb:19:1d:4d:89:21:70:8d:d2:50:1a:eb:10:f7:38:
51:09:b2:b8:f4:71:8f:a8:82:a7:71:de:7a:81:df:6a:82:f6:
4d:03:c1:36:32:5e:04:c8:80:61:a8:69:b6:07:1d:65:e8:39:
df:ad:46:70:61:12:10:5e:90:04:45:a3:34:6b:81:9f:95:b4:
03:1e:84:f7:4a:86:a4:1c:fd:98:df:fc:be:59:be:e2:8f:46:
18:9a:72:bf:5e:ff:b9:f7:27:e9:ee:c7:1a:df:90:ac:23:d4:
94:62:c5:84:66:71:b1:c0:28:e7:95:02:2f:2a:25:d5:71:b7:
2c:ad:0c:9f:c8:5b:a0:bb:d4:6f:c4:27:5d:9e:fe:6a:d4:d4:
4a:3c:93:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:43:58 2025 by rpki-client