Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/Rx7cBU7vu-ToKS-rTuUapvEuA-U.roa
File: Rx7cBU7vu-ToKS-rTuUapvEuA-U.roa (raw, json)
Hash identifier: xxPo8BiMNk8VVQsRZHnG6B4FNOLp3WCohttn72JbhlE=
Subject key identifier: 47:1E:DC:05:4E:EF:BB:E4:E8:29:2F:AB:4E:E5:1A:A6:F1:2E:03:E5
Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622
Certificate serial: 01942823B2D92C89AE180748AE56DABCFB52
Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/Rx7cBU7vu-ToKS-rTuUapvEuA-U.roa
Signing time: Thu 02 Jan 2025 17:50:15 +0000
ROA not before: Thu 02 Jan 2025 17:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15969
IP address blocks: 45.86.212.0/22 maxlen: 22
46.227.240.0/23 maxlen: 23
46.227.242.0/23 maxlen: 23
46.227.244.0/24 maxlen: 24
46.227.245.0/24 maxlen: 24
46.227.246.0/23 maxlen: 23
185.7.168.0/23 maxlen: 23
185.7.170.0/23 maxlen: 23
2a01:5e00::/29 maxlen: 29
2a01:7600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:b2:d9:2c:89:ae:18:07:48:ae:56:da:bc:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622
Validity
Not Before: Jan 2 17:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=471edc054eefbbe4e8292fab4ee51aa6f12e03e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:1b:06:a6:97:b4:fb:59:8f:03:b2:5b:d6:
c7:72:55:e2:e2:01:fa:88:14:bd:db:ef:bd:07:2e:
be:99:dc:ab:78:96:11:1a:38:82:2d:32:ee:7f:f2:
7a:34:76:64:63:90:9f:78:f9:c3:5b:a1:69:36:83:
68:7d:d8:d9:ec:b4:db:e5:51:e5:5c:78:5f:17:9c:
60:ea:78:2d:32:27:23:d7:fc:96:7f:cd:87:e1:10:
12:3f:09:fe:f6:8b:07:9b:8d:47:95:1c:9f:e0:70:
96:f3:8b:1b:05:94:f2:a5:33:b8:01:d3:2a:5a:af:
2a:ff:18:ca:78:ae:4a:6b:e0:d3:62:4c:95:f8:b2:
f5:cb:f7:84:a7:76:c0:7b:e0:bc:c4:8a:28:8f:ac:
03:66:d3:04:b0:3a:94:83:ee:d8:68:18:be:95:4b:
c8:35:4a:15:cd:00:c2:84:00:5e:ee:09:ea:bd:31:
0d:58:80:a5:56:0f:54:b1:34:98:11:0a:49:d2:55:
4d:a4:75:6f:1d:38:a4:4c:3d:74:79:a8:b0:9c:cd:
24:51:e4:b3:20:e3:19:3d:f3:66:65:c8:de:25:f7:
5f:1a:24:50:67:46:df:65:41:09:80:32:d6:e5:a2:
2b:d1:77:f1:54:c6:d4:53:2f:b3:c9:56:c8:e0:52:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1E:DC:05:4E:EF:BB:E4:E8:29:2F:AB:4E:E5:1A:A6:F1:2E:03:E5
X509v3 Authority Key Identifier:
keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/Rx7cBU7vu-ToKS-rTuUapvEuA-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.212.0/22
46.227.240.0/21
185.7.168.0/22
IPv6:
2a01:5e00::/29
2a01:7600::/29
Signature Algorithm: sha256WithRSAEncryption
2b:f4:1c:12:e1:eb:b9:d8:9a:8c:59:e4:48:53:70:00:38:3c:
13:eb:6d:6c:d8:16:3b:0c:d1:ef:84:9b:af:aa:a4:36:a7:77:
d7:a9:cf:ac:f2:47:b9:4c:50:55:a1:77:db:83:a0:a0:2e:43:
b3:77:c1:e7:66:1c:73:46:55:5f:66:63:ed:8b:82:96:58:9f:
77:1b:7f:ac:88:46:bc:34:ac:e3:93:d5:ac:1f:cc:c6:db:7e:
be:cf:90:45:75:32:ed:b7:84:11:9d:ab:80:18:1c:38:43:f0:
dd:fe:14:2a:e8:b3:66:4d:3f:a2:78:ab:d5:35:90:2e:93:a2:
d4:de:0d:7a:94:9c:71:c9:d8:9e:4f:50:79:95:85:5c:d5:20:
58:10:d1:df:f2:21:b1:75:56:c9:59:5d:13:19:5f:b5:07:55:
00:e9:ac:47:75:41:71:cd:cb:10:65:38:12:55:ab:01:a0:35:
3b:0d:81:10:6e:72:56:bf:38:fb:b9:26:56:c8:39:bd:83:b7:
d0:09:b2:55:86:0a:13:6e:96:99:0e:b6:e2:c6:7d:69:91:43:
b0:c6:d0:b6:9c:8f:17:86:9f:30:50:2a:05:46:85:60:e3:6b:
46:0c:3b:1c:47:9c:cb:5f:cb:8d:09:1d:0d:47:0a:e0:ad:3b:
8a:7c:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:12 2025 by rpki-client