Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/LL0Pj0fZreHLkeh4rR4UwnIwB_A.roa
File: LL0Pj0fZreHLkeh4rR4UwnIwB_A.roa (raw, json)
Hash identifier: rLqHd+aH7AD/GyVSlTbRVdK2u+t7HJBhIRQnKwecbYo=
Subject key identifier: 2C:BD:0F:8F:47:D9:AD:E1:CB:91:E8:78:AD:1E:14:C2:72:30:07:F0
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369CB35B785237876CFB1D5E428DE18
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/LL0Pj0fZreHLkeh4rR4UwnIwB_A.roa
Signing time: Wed 01 Jan 2025 19:48:43 +0000
ROA not before: Wed 01 Jan 2025 19:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47204
IP address blocks: 45.131.48.0/24 maxlen: 24
45.131.49.0/24 maxlen: 24
45.131.50.0/24 maxlen: 24
80.76.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:cb:35:b7:85:23:78:76:cf:b1:d5:e4:28:de:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cbd0f8f47d9ade1cb91e878ad1e14c2723007f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:4d:5d:c1:b7:28:0b:f7:a2:bf:b5:f4:60:
36:53:c3:97:52:18:56:32:9d:8c:2b:d0:02:2d:8d:
b7:a9:dc:56:06:1b:99:f0:2f:c1:f7:55:92:c7:d1:
47:0d:2a:70:d7:33:43:1c:22:aa:b9:86:57:c4:6d:
51:55:4a:c6:bd:63:02:4b:78:a9:be:de:3e:af:78:
19:90:e5:4a:a4:32:61:ed:26:97:3a:79:74:65:04:
f8:f2:f8:16:36:a1:e5:9b:31:da:6c:25:2c:ac:c9:
59:62:98:a1:d9:6c:fb:a2:38:5f:61:a8:0c:99:b4:
f0:7b:9b:e9:51:ea:23:76:80:f8:a5:35:c0:ae:89:
b8:e5:e5:da:69:c4:fc:ba:48:b0:a4:d0:cd:ca:a3:
6a:48:4e:fa:fe:c1:2a:f6:59:e1:6d:37:99:af:12:
1b:e9:f0:33:d0:df:38:7f:0a:b9:c6:94:4a:87:c2:
6e:00:8c:9c:c4:7d:24:ac:47:81:67:bc:40:69:8d:
a4:97:97:5c:a2:b1:74:f6:b9:58:94:7f:aa:a8:a6:
e2:02:1c:cf:b7:c2:dd:8b:47:71:28:2e:6f:6f:77:
32:62:dc:f7:3a:dc:8b:ca:71:ec:ac:15:8d:1a:99:
c8:f9:60:d3:25:7e:68:16:47:46:09:19:8b:71:d8:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BD:0F:8F:47:D9:AD:E1:CB:91:E8:78:AD:1E:14:C2:72:30:07:F0
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/LL0Pj0fZreHLkeh4rR4UwnIwB_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.48.0-45.131.50.255
80.76.63.0/24
Signature Algorithm: sha256WithRSAEncryption
79:60:6e:8f:4c:f9:7a:92:64:ee:67:6c:36:d9:b9:74:e7:ef:
46:2d:34:21:e7:76:76:23:53:fd:f8:81:21:16:75:b8:ef:c3:
11:66:47:35:f1:a0:b8:c1:4b:fe:c7:67:3e:b9:13:a5:d2:b2:
df:20:1f:f9:1e:09:03:b8:d2:7c:b7:74:70:28:d4:29:1c:79:
cb:8b:d3:e2:ff:b0:10:cf:5e:c4:39:37:78:5e:40:8a:f3:22:
52:0b:19:1c:63:26:3a:d7:65:93:1e:31:64:67:58:57:e7:43:
55:59:96:d5:a6:27:49:b5:fa:7f:5d:60:cc:4c:7c:f4:5e:f7:
d5:dc:5d:50:ee:14:bf:db:6f:2d:66:a9:ad:73:80:81:25:5c:
3e:8e:0e:a7:48:70:50:c8:71:bd:03:f8:a5:3a:2b:82:b9:39:
66:27:8f:ce:fe:fd:b7:64:a3:d7:41:93:bf:18:62:ff:77:ff:
46:21:e6:8e:38:a3:3a:6b:18:29:bb:bd:22:95:8e:e9:6b:0d:
74:25:e8:d6:fd:6a:11:7a:98:03:be:cb:f9:31:0e:0f:2d:a7:
00:7d:22:1e:4e:24:ba:b4:b7:5e:cf:9e:4e:ed:43:ca:07:64:
e4:a4:00:61:13:be:c0:96:5d:f3:50:f2:b6:74:e5:41:27:0a:
95:08:b5:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:23 2025 by rpki-client