Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6YmUlQ3uvo5tDfsUVPP_t1jCdjQ.roa
File: 6YmUlQ3uvo5tDfsUVPP_t1jCdjQ.roa (raw, json)
Hash identifier: b9SRjjBR9oirdjqq2+nSEPgGOQwXEKUzNpQlfGNNZaM=
Subject key identifier: E9:89:94:95:0D:EE:BE:8E:6D:0D:FB:14:54:F3:FF:B7:58:C2:76:34
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0194FF3CCFBD943FCF4EB416EEE49AD7836A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6YmUlQ3uvo5tDfsUVPP_t1jCdjQ.roa
Signing time: Thu 13 Feb 2025 12:16:02 +0000
ROA not before: Thu 13 Feb 2025 12:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43278
IP address blocks: 45.129.237.0/24 maxlen: 24
45.137.154.0/24 maxlen: 24
213.226.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:3c:cf:bd:94:3f:cf:4e:b4:16:ee:e4:9a:d7:83:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 13 12:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e98994950deebe8e6d0dfb1454f3ffb758c27634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:de:b7:2e:27:de:ae:16:51:ac:a4:a3:3f:
22:f7:41:f0:ca:3d:b9:61:5e:e3:3f:43:d9:5b:29:
1a:a5:ee:4b:1e:38:18:bc:a7:48:2a:5c:d2:dd:8c:
82:1d:86:c0:89:64:eb:ff:58:07:c3:d4:fe:d3:c7:
cf:11:7e:4d:b8:14:c1:d3:3b:e7:98:76:55:bb:bc:
cd:35:2e:c7:61:92:00:90:4c:6c:b0:b0:bd:a2:be:
04:09:9c:f1:57:3b:91:a7:f6:f3:7b:24:8a:7e:f8:
d7:76:2d:cc:9e:c5:76:11:75:15:f0:30:c2:e5:7d:
b2:78:26:f7:0f:7d:00:40:75:7a:40:78:d3:8d:0c:
b3:d0:8c:36:2a:6b:92:25:6a:a6:02:27:2a:e7:a4:
d9:a6:34:97:a3:f7:8f:d8:97:b6:b5:88:c9:bf:a9:
6a:cb:68:4a:41:ff:5a:11:fd:27:75:3e:46:38:29:
0d:58:9c:d1:71:6b:5b:c9:f0:a6:a4:c8:2f:33:59:
d3:c5:f2:8d:97:b1:50:9e:f6:1e:d1:3a:a5:46:d5:
3a:8b:a0:f5:be:88:2b:9b:30:ca:64:0a:13:36:57:
e7:d0:18:17:e6:ca:8c:38:01:6b:10:5a:6a:c3:4c:
97:b6:fc:a4:9e:d2:e3:5c:ed:b1:fb:13:a2:ba:c0:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:94:95:0D:EE:BE:8E:6D:0D:FB:14:54:F3:FF:B7:58:C2:76:34
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6YmUlQ3uvo5tDfsUVPP_t1jCdjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.237.0/24
45.137.154.0/24
213.226.115.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f2:ad:fb:bd:32:0b:05:f7:5b:e9:53:30:9b:f7:f8:7a:47:
b2:e4:e5:21:b4:06:c8:3b:22:e3:fd:cf:47:d3:3a:35:b9:af:
c4:c4:6d:54:56:b5:f7:d3:f1:24:f8:12:ff:c4:39:b8:7d:eb:
7d:2c:ff:a3:6d:1d:e8:5f:d0:ee:a5:c8:2c:8e:d9:75:e0:d4:
e0:0c:69:57:1a:a8:5c:74:a2:72:b3:0f:70:40:85:d3:d7:5a:
e0:c9:3e:0c:69:bc:92:4c:15:62:82:66:1a:33:0e:bf:06:ed:
03:bd:45:a8:88:95:fd:50:81:05:ab:9d:8d:a9:df:c0:66:e7:
e0:42:24:c4:8f:75:5b:0e:85:3d:0f:10:44:b9:83:fc:cf:27:
aa:6d:ce:97:56:65:d8:51:6b:d6:f5:bc:0d:1f:5e:53:b8:b0:
d5:7a:d5:54:fb:31:fc:45:1d:84:86:44:a2:1f:46:8f:0f:7f:
96:a2:ae:72:89:a3:71:d1:6a:88:ac:e6:fd:59:b5:de:9d:4e:
76:c2:46:36:29:5e:c0:0a:a3:d7:f2:e2:b1:ab:0f:50:02:01:
34:c2:bb:65:7b:df:94:03:c1:68:0d:e6:5b:0b:ae:0b:37:d0:
db:c4:12:aa:b9:fa:f9:f6:82:98:ff:93:49:d6:5c:48:ba:86:
50:62:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:38 2025 by rpki-client