Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/5OEgsLEw0-6gzCXCIgnICSE9btM.roa
File: 5OEgsLEw0-6gzCXCIgnICSE9btM.roa (raw, json)
Hash identifier: xmbYL6JMfzF0eiwswztzKiVIy7Y6OjJZSf7iFb1fyCc=
Subject key identifier: E4:E1:20:B0:B1:30:D3:EE:A0:CC:25:C2:22:09:C8:09:21:3D:6E:D3
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369C4F0EB86A812F54C75FEC68119F4
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/5OEgsLEw0-6gzCXCIgnICSE9btM.roa
Signing time: Wed 01 Jan 2025 19:48:41 +0000
ROA not before: Wed 01 Jan 2025 19:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35278
IP address blocks: 45.142.44.0/24 maxlen: 24
80.64.24.0/24 maxlen: 24
185.218.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c4:f0:eb:86:a8:12:f5:4c:75:fe:c6:81:19:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4e120b0b130d3eea0cc25c22209c809213d6ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:73:5e:cd:fe:a5:fa:5c:92:00:da:b9:d7:
02:ce:03:99:07:5f:d5:64:5f:3d:dc:58:3b:a4:e6:
9b:d1:3f:e6:8f:60:fd:51:07:91:f5:37:b8:36:92:
76:7f:dd:33:cb:a3:18:1b:ec:ae:6b:a3:94:84:de:
5b:a1:5d:4b:4e:15:6a:8a:89:ea:60:4f:b4:5f:2b:
a2:6e:40:ac:34:b4:1a:82:be:c6:a1:0d:e8:a0:e7:
cd:b9:4f:ac:d7:fb:66:c5:ef:26:55:fa:2e:dd:4d:
51:7e:8f:c9:86:f2:1c:b1:cf:fa:53:5b:35:4f:fc:
66:30:11:0a:85:6d:10:0e:a0:e5:c9:68:a6:64:d9:
f0:ba:e7:f1:49:49:c2:0c:8f:31:ee:93:ef:f7:14:
b9:71:38:77:51:e7:63:55:91:45:b8:95:f4:b9:1c:
8d:b1:7e:fd:90:62:27:68:da:52:ae:4b:95:d7:3d:
57:16:65:0d:92:d8:28:2a:eb:3a:78:2f:38:c0:6f:
67:f3:7b:4e:db:a5:da:9d:e9:0d:37:83:f3:0d:e7:
b5:53:9f:dd:d5:fd:47:a5:f6:ab:53:58:f4:96:20:
66:56:aa:8e:86:9f:ff:19:17:fe:2c:a1:09:a8:40:
ff:3a:33:9c:46:87:29:9c:fe:f2:b9:21:48:10:8e:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E1:20:B0:B1:30:D3:EE:A0:CC:25:C2:22:09:C8:09:21:3D:6E:D3
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/5OEgsLEw0-6gzCXCIgnICSE9btM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.44.0/24
80.64.24.0/24
185.218.0.0/24
Signature Algorithm: sha256WithRSAEncryption
74:07:94:89:20:5a:3a:98:da:6d:a5:f5:09:ad:a3:92:4d:19:
b8:1a:31:b5:bc:24:ec:ae:53:cd:8f:4c:97:1f:31:0c:a7:5b:
44:5c:35:7f:5c:66:0a:ea:f0:05:bc:1b:91:0a:6c:6a:2d:45:
75:cc:89:05:af:0a:75:6f:e4:da:b3:ca:67:e3:3c:74:a8:d7:
71:1e:73:83:7c:27:c3:4f:93:68:c5:e1:ad:50:d2:3c:1a:f8:
08:1e:d7:b1:98:16:d9:61:ed:fb:ce:18:b1:89:d6:4e:0c:bb:
2d:1d:38:71:77:64:15:10:01:da:53:dc:ca:78:d2:dc:02:e9:
48:bc:9c:60:d7:4f:d8:05:43:78:f8:c6:3f:f2:e2:df:63:73:
9a:44:6b:e6:d8:84:32:7b:9d:e2:ee:38:d4:1a:19:00:33:34:
4a:20:45:f8:91:bb:dd:86:b3:3e:23:41:8e:92:de:a0:28:e2:
fd:9a:28:f6:6d:ee:d3:ba:96:d1:5a:ff:43:9d:4c:45:8e:f5:
1f:58:27:00:59:c2:4f:20:49:90:71:d0:cb:03:1d:ec:f7:72:
0b:11:d4:96:9c:e6:6d:8b:ab:ce:35:f6:36:3d:0b:69:67:b7:
32:39:32:3f:38:8a:80:03:5a:91:bc:21:c5:8d:db:d9:28:c0:
96:b5:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:01 2025 by rpki-client