Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TXKrqumbeHeB5gENZNAx6-mF1hk.roa
File: TXKrqumbeHeB5gENZNAx6-mF1hk.roa (raw, json)
Hash identifier: d+EeM9GNrBEgS5+KDb8dBUjG3XGM76OsAWuhRykhPOo=
Subject key identifier: 4D:72:AB:AA:E9:9B:78:77:81:E6:01:0D:64:D0:31:EB:E9:85:D6:19
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D2DC2A28E90B8EBCD38657A6916C
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TXKrqumbeHeB5gENZNAx6-mF1hk.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.93.82.0/24 maxlen: 24
45.131.51.0/24 maxlen: 24
80.64.27.0/24 maxlen: 24
80.64.29.0/24 maxlen: 24
91.217.125.0/24 maxlen: 24
185.210.136.0/24 maxlen: 24
188.64.162.0/24 maxlen: 24
213.139.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d2:dc:2a:28:e9:0b:8e:bc:d3:86:57:a6:91:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d72abaae99b787781e6010d64d031ebe985d619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:41:24:b6:a1:ba:bb:74:f5:1a:7c:f6:cb:
fc:0d:1e:8d:a0:0d:f7:42:2d:22:f2:48:47:46:ab:
2e:20:5e:39:8f:8f:4e:fe:54:ee:82:33:f6:af:3e:
fc:f6:ee:08:d7:11:0f:a4:34:fc:b3:c4:23:e9:07:
e1:9b:3d:6c:53:81:37:26:41:68:84:9f:7f:bd:8c:
85:72:02:8c:c8:19:83:da:3e:78:50:57:d7:dc:a8:
e9:57:a6:6d:d3:62:46:67:66:0c:7d:34:10:d4:c8:
c4:ff:51:e0:48:a4:02:34:0b:66:b4:ec:1f:c9:d4:
83:0b:b4:15:d0:16:a1:dc:a6:69:1d:3f:0b:ec:54:
16:69:c5:b2:8b:0e:e5:c5:cd:0f:da:f1:7c:e0:6b:
31:e1:7e:4e:d3:0f:20:53:23:1e:e1:ed:ec:15:9c:
4c:d8:f8:73:f0:44:4b:01:d4:da:f8:8e:69:a5:4b:
ae:f4:de:e8:19:db:f0:19:6f:76:a8:0e:1d:35:09:
15:d7:b3:0c:7b:9a:39:62:8e:c8:11:19:58:b6:94:
36:f2:9b:a1:03:a0:45:d1:8a:f6:d0:e9:dd:4e:27:
44:d5:6b:7f:da:8b:64:8b:c5:92:2a:6d:26:6e:45:
c9:4c:dd:78:fa:04:8f:ce:c6:fe:61:5c:d1:1c:de:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:72:AB:AA:E9:9B:78:77:81:E6:01:0D:64:D0:31:EB:E9:85:D6:19
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TXKrqumbeHeB5gENZNAx6-mF1hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.82.0/24
45.131.51.0/24
80.64.27.0/24
80.64.29.0/24
91.217.125.0/24
185.210.136.0/24
188.64.162.0/24
213.139.202.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cd:d6:a7:cc:19:e5:59:8f:9b:9e:d6:cb:37:fc:7f:13:5a:
a6:41:d5:08:3e:96:89:ab:5e:d3:bf:15:d9:16:28:ee:c7:82:
4a:86:e7:14:8a:88:61:85:49:a2:92:1f:fb:72:0f:00:ab:2b:
28:a3:30:ad:23:6b:19:f1:90:cf:01:10:a3:7c:52:70:58:46:
22:bd:69:fb:3e:3b:73:c3:82:ad:f6:1c:15:0c:cd:29:0c:70:
6d:89:0d:c9:a7:5c:89:a6:f6:b5:82:09:e6:71:fe:ff:6c:0f:
55:84:1b:28:38:ff:a8:38:8f:76:87:94:4f:32:a8:6a:79:3e:
95:5a:c1:23:33:c9:51:59:88:3d:18:e3:a4:52:06:4c:c7:23:
2a:29:48:f7:3b:b7:5b:38:7b:a7:94:70:4d:80:bb:f0:04:78:
cf:32:2a:3b:d8:28:4f:30:dc:56:10:27:71:97:81:52:86:9a:
9d:56:66:25:54:14:5c:3f:72:23:87:36:38:c2:a4:0f:9e:de:
37:17:f7:84:98:d0:a1:cb:89:50:36:ee:9a:ef:4d:3c:08:32:
93:41:88:e2:5a:51:62:c8:1b:0b:72:c5:fe:b1:ad:47:c9:94:
f9:1d:81:33:47:d7:a7:60:83:74:29:7a:ca:4c:3c:6c:27:55:
a2:ee:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:46 2025 by rpki-client