Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa
File: EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa (raw, json)
Hash identifier: myxXdWA4+IfOZijb00R5q5cEaLQsxJLVjp4payzucnw=
Subject key identifier: 10:BF:0D:C0:85:B8:CA:71:CA:B8:32:4A:81:27:52:F9:83:8B:53:0D
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0194282803096D9BC0FC56E8C62EB60C2522
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa
Signing time: Thu 02 Jan 2025 17:54:58 +0000
ROA not before: Thu 02 Jan 2025 17:54:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 80.90.178.0/24 maxlen: 24
80.90.179.0/24 maxlen: 24
80.90.180.0/22 maxlen: 24
80.90.184.0/22 maxlen: 24
80.90.188.0/22 maxlen: 24
95.140.146.0/23 maxlen: 24
95.140.152.0/21 maxlen: 24
185.125.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:03:09:6d:9b:c0:fc:56:e8:c6:2e:b6:0c:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 2 17:54:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10bf0dc085b8ca71cab8324a812752f9838b530d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:2d:85:a7:02:fb:c5:38:91:05:bf:28:e9:
ba:6c:17:1f:29:8f:f6:73:02:f1:ff:63:61:ac:74:
97:a7:bf:c4:33:b5:ec:44:3b:fb:77:0c:c5:b6:c5:
2c:ad:ce:82:7b:67:e3:e7:aa:e9:1a:5f:b9:71:c9:
42:87:4e:4a:41:e5:d9:a8:ca:44:d1:cc:75:24:ab:
fc:91:88:fc:55:5e:ba:46:fc:88:3a:28:31:b9:ed:
0b:89:b8:23:f1:1c:2c:27:43:65:13:95:69:83:06:
f2:ef:53:f9:20:d4:12:2e:07:9d:71:98:4a:3c:aa:
4a:7e:e3:86:03:b2:f2:e7:51:ca:d4:bd:e1:f9:46:
8c:83:c1:04:dc:90:80:9a:9c:2c:a5:4b:b5:1a:1f:
bd:cb:a3:b5:f0:a8:86:6b:2e:70:fe:80:a1:63:9a:
34:49:69:f8:20:51:68:84:18:c8:3b:1a:8b:fa:89:
a5:a1:fd:de:12:d4:3c:fb:b4:ed:b7:70:61:be:eb:
9c:33:e3:a8:a4:8f:36:0e:92:98:f5:5e:07:27:09:
77:a3:ea:63:09:39:01:ae:13:54:ec:f8:6a:85:42:
85:b4:37:1d:a4:54:6c:16:df:13:87:0c:a0:4e:64:
1a:d2:e2:23:e8:5d:65:cc:ac:28:f7:53:5d:4c:cc:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BF:0D:C0:85:B8:CA:71:CA:B8:32:4A:81:27:52:F9:83:8B:53:0D
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.178.0-80.90.191.255
95.140.146.0/23
95.140.152.0/21
185.125.200.0/22
Signature Algorithm: sha256WithRSAEncryption
15:fa:60:27:0f:e8:66:b5:c5:d6:46:c5:69:4f:60:1a:93:a0:
35:bc:db:9c:4b:a6:2d:6f:c1:c7:a9:cc:d3:1e:0c:2c:4a:c8:
d5:54:ee:ae:20:10:d6:f9:c6:f0:75:69:ab:c1:5d:57:e9:f5:
74:a8:f9:9d:30:30:83:ca:06:41:65:c7:ab:a0:ad:a3:71:c8:
d2:94:27:00:e0:87:8b:47:c2:46:d0:5a:16:a9:19:d0:ec:18:
f8:71:99:17:62:ab:9a:06:0b:43:22:58:4d:80:63:53:26:a8:
d6:da:5c:cf:77:55:0c:bc:dd:06:ae:82:b4:3d:b3:34:f7:5c:
45:2a:57:5b:11:76:8e:42:a1:d0:56:b8:4b:51:11:7c:c8:00:
7a:25:de:76:d0:64:ee:62:57:2e:4a:51:4f:e9:11:d1:cb:f6:
72:c0:89:69:72:51:68:8a:29:73:52:e3:87:19:23:19:32:e6:
fe:e7:f7:62:90:40:b1:cf:b0:23:85:cb:38:b2:d7:ec:d7:7a:
98:c2:3a:07:5e:73:c2:13:af:f1:d9:10:09:4f:94:fe:57:0b:
38:12:3b:8f:57:c4:ab:c1:a6:3b:b1:64:46:59:e5:2e:b2:ef:
71:72:74:bb:05:5b:ac:78:31:17:b5:f6:7c:24:60:9f:29:6c:
6d:38:81:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:01 2025 by rpki-client