Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TXff27gZBpaXickaoux8SBYA2Co.roa
File: TXff27gZBpaXickaoux8SBYA2Co.roa (raw, json)
Hash identifier: j1WSy1qPSrrkKocx5kuk+iIx8XAQ3kRznoJrGOu5bBA=
Subject key identifier: 4D:77:DF:DB:B8:19:06:96:97:89:C9:1A:A2:EC:7C:48:16:00:D8:2A
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB674A5CD8DB2A98988A82C1C47ECF
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TXff27gZBpaXickaoux8SBYA2Co.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 91.217.125.0/24 maxlen: 24
188.64.162.0/24 maxlen: 24
45.131.51.0/24 maxlen: 24
45.93.82.0/24 maxlen: 24
185.210.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:67:4a:5c:d8:db:2a:98:98:8a:82:c1:c4:7e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d77dfdbb81906969789c91aa2ec7c481600d82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a7:c9:8a:7c:73:06:24:63:4f:4a:74:a6:82:
83:77:31:fa:b1:21:77:e3:57:8f:bc:d4:cd:a1:c3:
32:00:52:fd:74:ae:a6:b7:4d:58:24:64:3b:ad:8e:
6a:20:5c:02:7e:cd:3b:48:0e:40:f3:4f:22:9a:c4:
5e:b2:b6:84:aa:1a:a4:e3:a3:af:f6:cb:2b:b6:49:
86:a6:66:c1:27:39:ba:2b:69:87:00:d7:7f:fa:72:
2b:e7:6f:38:92:49:26:8d:59:e7:fe:2a:43:df:46:
67:9d:25:4e:22:06:4a:d3:80:bc:a4:05:5d:56:9e:
df:87:a0:ae:90:3d:a3:66:4e:cb:35:f9:04:aa:13:
56:85:7f:79:8e:e0:05:da:1c:e1:6d:80:c8:58:cf:
a5:22:fb:fe:b0:37:76:ca:1d:45:a2:62:d7:ec:5e:
f0:d7:a0:5c:c8:c3:06:49:a6:79:7d:38:8b:a1:7d:
e6:7c:f3:71:7a:71:e9:bf:cf:ae:b9:ab:7c:0e:1f:
1e:79:6c:35:db:36:3e:51:35:f8:f4:b4:80:2d:ab:
b5:29:1d:6d:f9:59:bb:2b:e5:1f:07:5f:e9:0c:65:
c3:9e:c0:6e:ed:b2:79:73:98:e7:9e:1b:c6:56:a0:
6d:87:ab:cf:aa:50:24:35:c7:a3:da:86:bb:35:46:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:DF:DB:B8:19:06:96:97:89:C9:1A:A2:EC:7C:48:16:00:D8:2A
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TXff27gZBpaXickaoux8SBYA2Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.82.0/24
45.131.51.0/24
91.217.125.0/24
185.210.136.0/24
188.64.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:97:19:0b:80:f1:10:eb:1f:f5:79:ee:11:bd:99:e6:78:5f:
91:28:98:06:34:41:5b:28:52:0b:f1:29:c7:e2:4f:00:47:e6:
99:ec:ba:87:16:73:a3:56:25:95:81:c2:8b:cb:84:e7:cd:5c:
55:da:c6:63:e6:6a:7f:42:3d:32:9f:4c:d6:66:9e:cf:b9:75:
b7:ed:34:74:69:14:10:7a:3b:01:b9:c2:e8:19:8c:15:87:1d:
86:19:7e:f2:10:d7:52:0a:ff:49:1b:00:e4:8b:04:b3:27:d8:
86:18:06:b1:54:cf:52:42:05:aa:c7:c4:79:4d:24:36:de:61:
77:93:c9:43:ce:a6:f2:a1:25:53:33:70:2b:06:cf:64:0b:c6:
fc:82:16:8a:d6:f6:1c:fb:72:9e:99:95:ea:19:67:d7:cf:77:
f8:5e:cc:a2:ec:54:31:20:6f:1a:00:10:be:10:3a:02:c3:9e:
0f:9f:a7:72:fb:e8:cb:6b:2a:bc:7b:ae:ac:1f:57:a5:6a:4e:
fc:9d:78:30:24:3e:fc:f6:a7:67:16:c1:40:a4:90:84:bb:c5:
ac:c3:37:93:51:18:7e:37:fb:38:c0:23:8f:26:2a:9f:ff:75:
25:40:38:ce:80:98:eb:44:e6:1a:4b:6e:06:5d:b5:75:50:27:
fd:dd:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:05 2025 by rpki-client