Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/11EUti3lnSrvcME_sLAUVVEJCyA.roa
File: 11EUti3lnSrvcME_sLAUVVEJCyA.roa (raw, json)
Hash identifier: zosfyuqqMAp/geMMw6u9z8/OyVXxmv9rqLq+GU2ia9c=
Subject key identifier: D7:51:14:B6:2D:E5:9D:2A:EF:70:C1:3F:B0:B0:14:55:51:09:0B:20
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 0194221FE999FB1F82A1C3486E67DEED72C6
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/11EUti3lnSrvcME_sLAUVVEJCyA.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25227
IP address blocks: 46.28.94.0/24 maxlen: 24
81.95.134.0/24 maxlen: 24
81.95.137.0/24 maxlen: 24
81.95.140.0/24 maxlen: 24
85.236.0.0/19 maxlen: 24
92.60.80.0/20 maxlen: 24
92.60.80.0/24 maxlen: 24
94.230.0.0/20 maxlen: 24
141.136.112.0/21 maxlen: 24
213.134.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e9:99:fb:1f:82:a1:c3:48:6e:67:de:ed:72:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d75114b62de59d2aef70c13fb0b0145551090b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:54:60:e7:45:59:26:7b:5a:b4:ca:c3:97:
30:33:dd:2b:e5:91:42:a0:1f:5a:ce:a4:35:13:8d:
11:84:25:fe:70:33:40:0c:a6:dc:5a:9f:9e:18:2a:
72:df:79:79:fb:45:93:0b:43:de:59:7b:8d:8f:3e:
d7:1d:d9:c2:c9:82:be:dd:39:db:f1:63:59:03:ad:
5c:6c:a0:51:19:96:3f:a2:5a:f4:4e:97:ad:7d:87:
cf:11:af:25:3f:15:93:02:bb:d4:9a:ae:6b:cf:64:
9e:91:95:16:2f:6f:98:2a:b2:3b:d8:84:f9:2d:13:
ad:aa:e5:94:03:e8:19:73:f5:2a:bc:2d:b0:28:4e:
fd:63:28:e1:83:16:6d:6f:15:0f:a9:c8:63:80:67:
06:34:46:32:c4:7e:e6:0c:29:0e:af:90:b6:a8:c1:
a4:6c:11:58:01:42:5c:2e:4d:aa:6a:25:c9:e2:4f:
9e:71:28:85:3f:31:92:06:91:2a:2e:45:d7:b8:cc:
5f:89:a4:02:3d:9a:88:59:83:10:fb:f9:4f:3e:3f:
35:cb:4c:1b:a7:5f:3b:18:08:d5:c0:e8:3f:5c:0c:
1f:b9:c0:4e:ae:70:d9:81:da:8d:b9:75:a8:6d:e5:
db:0d:8a:a3:4b:2e:0a:04:c4:f5:73:f5:b4:ab:85:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:14:B6:2D:E5:9D:2A:EF:70:C1:3F:B0:B0:14:55:51:09:0B:20
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/11EUti3lnSrvcME_sLAUVVEJCyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.94.0/24
81.95.134.0/24
81.95.137.0/24
81.95.140.0/24
85.236.0.0/19
92.60.80.0/20
94.230.0.0/20
141.136.112.0/21
213.134.192.0/19
Signature Algorithm: sha256WithRSAEncryption
42:4a:e4:47:e8:44:2d:78:68:76:80:2e:62:5c:ed:b7:6d:f9:
ff:25:13:1d:4a:cc:be:87:4b:22:a3:7a:9b:0c:0f:b2:8d:39:
2f:24:26:6c:43:80:88:ac:36:6d:3a:74:57:ec:4e:5d:19:d8:
20:19:d0:e4:a9:57:1f:28:f5:f2:64:1f:e0:94:4f:63:78:51:
72:c9:b3:05:8a:9b:69:a6:0b:8a:e9:e7:06:8d:60:14:0e:d8:
7e:1d:5e:b0:23:c2:e6:e1:94:97:a5:57:d4:26:d2:f5:1d:3a:
4e:a8:bc:d8:26:70:01:7b:03:b4:ac:4c:05:72:e0:04:98:2d:
99:b1:78:b7:bf:74:05:98:fa:51:64:6c:fc:49:a2:08:ce:63:
04:74:59:bc:d4:52:ba:51:dc:52:83:db:d9:22:d5:fc:ca:4e:
e2:a4:a4:fa:5b:4a:0c:91:0e:88:a7:0a:25:f9:f5:51:1d:01:
52:2e:8d:e1:9d:3e:90:48:83:ef:49:29:c5:fc:30:2c:b2:1d:
4b:b8:ee:9d:40:d1:27:5d:9e:3a:45:29:53:1c:f8:c0:ee:88:
d7:b2:b0:c8:3f:9f:77:86:98:5e:53:f7:f7:6d:cb:6d:0e:c7:
67:8c:e2:5e:36:1a:25:53:84:43:84:77:a7:a6:93:8d:79:08:
e0:c3:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:33 2025 by rpki-client