Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa
File: R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa (raw, json)
Hash identifier: c/3zxG6m5VgITlAWiDb9QKSgSjQqMCcCy/y2n6uMJws=
Subject key identifier: 47:F7:91:13:D1:F3:BB:4F:A7:DC:38:6B:DD:FC:58:54:C6:65:65:00
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B590934E9B5216A9C3F9D3FD02831
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58079
IP address blocks: 46.35.180.0/23 maxlen: 24
46.35.184.0/21 maxlen: 24
93.152.241.0/24 maxlen: 24
93.152.242.0/23 maxlen: 24
93.152.244.0/23 maxlen: 24
95.158.153.0/24 maxlen: 24
95.158.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:59:09:34:e9:b5:21:6a:9c:3f:9d:3f:d0:28:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47f79113d1f3bb4fa7dc386bddfc5854c6656500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:87:19:43:a9:15:b0:80:8b:bc:dd:09:02:
9f:b0:4d:83:25:a0:4f:09:e4:47:0c:67:c3:56:0b:
5a:85:4d:83:f0:11:0f:21:6b:c2:28:75:a3:ce:bb:
86:a5:f6:46:a0:1c:56:53:25:49:56:c3:3d:08:78:
75:69:bd:6c:d5:53:c4:6b:2f:d0:7d:45:fe:46:6e:
c0:2e:c8:aa:3d:ed:95:d0:d0:8d:24:31:e9:d5:6b:
b1:3f:cf:e6:0f:0b:76:af:52:ba:91:25:c7:03:45:
bc:f4:70:05:73:e4:89:0c:18:73:9e:f1:5b:14:37:
0c:bd:db:d6:6c:e1:a2:c9:a7:87:8f:09:63:c8:c8:
7b:1b:06:ef:7a:62:42:06:f7:ef:42:92:ae:ef:8a:
57:d5:ce:d4:ae:b9:de:36:b2:c2:92:78:d5:b1:23:
c0:06:8c:9a:87:15:4e:aa:89:39:43:34:46:62:42:
b8:4d:20:68:1b:24:1e:d1:ab:6f:c4:df:98:57:d8:
e4:11:bb:22:cd:b1:b9:3b:4b:72:4d:30:ec:6d:24:
d3:c6:c7:8b:0f:3c:9f:6c:6c:bd:f6:6e:4c:66:15:
ea:5a:cd:e7:3b:7a:ff:75:40:87:3f:1a:98:b0:86:
a7:54:da:70:7b:a3:f8:98:b8:6a:48:56:1f:0b:00:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:91:13:D1:F3:BB:4F:A7:DC:38:6B:DD:FC:58:54:C6:65:65:00
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.180.0/23
46.35.184.0/21
93.152.241.0-93.152.245.255
95.158.153.0/24
95.158.184.0/22
Signature Algorithm: sha256WithRSAEncryption
37:5a:bc:18:fe:9a:e1:00:db:5c:17:86:f1:bd:6a:e1:0a:a8:
c9:17:ec:2c:8c:28:cf:eb:ad:76:de:ed:c3:6c:8a:df:f5:26:
62:63:22:4c:fa:fe:df:08:31:fe:b4:03:4c:75:ca:0c:46:a1:
ad:e7:f7:e2:35:67:57:cc:60:4a:f1:96:56:21:3a:48:e5:26:
f3:f5:af:e8:e2:60:69:e0:9b:bd:e6:f3:80:81:45:7d:09:9d:
1b:4b:0f:96:0c:e2:e3:15:14:73:17:ad:ae:3e:bb:32:2b:b6:
b9:c8:66:69:27:dc:65:e2:39:ee:d8:c3:48:95:56:c8:15:b8:
e6:5f:75:9c:dd:98:4a:2f:a8:1d:57:d1:de:f1:71:ee:13:ed:
70:ea:ae:72:f1:f9:41:89:28:bf:b9:35:e7:c3:81:d1:51:ab:
4c:85:fe:99:38:06:89:df:78:88:c7:0c:3e:4e:88:0e:3b:63:
56:14:99:20:a2:53:ee:6f:d2:40:01:d3:fc:c1:92:a2:c3:51:
6d:0f:d3:cc:1f:81:e0:1b:d6:93:1b:62:62:df:06:a9:a3:e0:
63:6a:99:2a:2b:b4:78:25:17:7f:b7:9b:cb:44:22:cf:4c:0f:
64:c1:7c:0a:51:58:da:68:e5:64:06:f1:36:73:80:f6:00:62:
2a:3f:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:38 2025 by rpki-client