Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/sEaOTviNSEyGczLljVng6JfukTY.roa
File: sEaOTviNSEyGczLljVng6JfukTY.roa (raw, json)
Hash identifier: 55TnFry0yCGjIxVY3olFxWoG3Dy1mLsBme/TexXmxBw=
Subject key identifier: B0:46:8E:4E:F8:8D:48:4C:86:73:32:E5:8D:59:E0:E8:97:EE:91:36
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018EA4D019499CC606CE40415BC148A031C5
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/sEaOTviNSEyGczLljVng6JfukTY.roa
Signing time: Wed 03 Apr 2024 16:34:45 +0000
ROA not before: Wed 03 Apr 2024 16:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 2.59.40.0/24 maxlen: 24
2.59.41.0/24 maxlen: 24
2.59.42.0/24 maxlen: 24
2.59.43.0/24 maxlen: 24
45.93.201.0/24 maxlen: 24
45.153.70.0/24 maxlen: 24
45.153.71.0/24 maxlen: 24
80.76.60.0/24 maxlen: 24
91.198.220.0/24 maxlen: 24
93.93.207.0/24 maxlen: 24
176.53.160.0/24 maxlen: 24
176.53.161.0/24 maxlen: 24
176.53.162.0/24 maxlen: 24
176.53.163.0/24 maxlen: 24
185.192.246.0/24 maxlen: 24
185.192.247.0/24 maxlen: 24
185.251.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:d0:19:49:9c:c6:06:ce:40:41:5b:c1:48:a0:31:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 3 16:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0468e4ef88d484c867332e58d59e0e897ee9136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:d4:7c:35:f0:08:4d:8e:42:44:4a:b7:f0:
a7:bf:1f:4f:5f:15:45:96:f3:15:0b:51:e3:e7:7a:
95:20:77:cd:44:27:4a:e4:40:9b:7d:38:b4:22:17:
d7:c2:ef:e4:41:5c:dc:a5:2b:5e:8a:1d:b8:70:02:
db:35:0e:fe:00:ee:aa:50:b2:06:a4:b3:90:a2:5f:
e3:1f:e4:26:2c:52:7d:51:8a:ec:09:42:5e:d2:2f:
26:1a:0b:13:5f:6c:ca:30:92:de:0a:75:18:27:0f:
f2:c0:df:f5:a9:f4:c6:d7:95:2c:b7:07:88:f1:46:
51:4b:98:dd:ee:c2:c7:3d:5d:4b:4f:15:d4:f1:12:
0d:fd:68:2b:c2:ea:3a:c2:fc:66:ce:07:94:5f:da:
17:94:63:e1:6a:b8:5c:cd:fc:bb:eb:2c:8b:21:aa:
96:77:b4:34:92:18:b2:03:ad:0c:00:77:ab:d5:49:
02:8b:c2:55:8c:11:7c:4e:fb:58:c1:be:cc:8a:d2:
97:dd:13:2f:27:5d:02:c0:73:18:03:1d:4b:32:a2:
86:e6:f4:4a:5a:b2:c2:ef:8e:64:4f:43:94:f6:ec:
b1:ec:bb:dc:ba:cd:28:4e:1d:66:96:a0:e0:d1:38:
49:9c:0f:bb:f1:a4:33:be:be:0b:8f:77:4c:9e:4d:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:46:8E:4E:F8:8D:48:4C:86:73:32:E5:8D:59:E0:E8:97:EE:91:36
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/sEaOTviNSEyGczLljVng6JfukTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.40.0/22
45.93.201.0/24
45.153.70.0/23
80.76.60.0/24
91.198.220.0/24
93.93.207.0/24
176.53.160.0/22
185.192.246.0/23
185.251.20.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:77:24:3b:4b:a0:24:0f:9a:d8:31:9f:eb:1c:67:27:ec:a5:
fb:14:9d:1a:22:a4:85:57:f4:84:36:67:39:d7:c1:09:f8:43:
91:9c:a4:0d:2b:3d:6f:fa:41:3d:d6:4f:52:f4:c7:21:3a:a9:
01:f7:cc:a4:53:bc:75:36:61:9b:12:2c:7a:7f:0e:15:c9:98:
77:21:2c:1c:0e:d2:36:9a:5b:2a:0b:8f:52:f3:11:80:84:42:
38:2b:71:59:87:e0:dd:8c:22:f3:1a:b9:4e:ce:25:8c:f7:6b:
f7:47:db:32:85:1c:aa:35:a7:c0:e9:2a:3c:2c:0e:d7:73:4c:
57:b7:b1:0f:f3:60:24:00:9b:8e:49:99:9d:70:30:99:3a:bb:
a5:3b:df:64:bd:a3:94:f4:45:88:43:03:0d:21:e2:ef:cd:4b:
4e:92:e1:d7:89:b0:ba:5f:57:90:09:f3:dd:9c:3e:92:8e:bf:
9e:84:f3:d0:bc:f4:4b:4b:c5:1e:d8:79:a5:fd:c7:8b:30:e6:
05:fd:30:00:80:37:d1:0e:46:a9:5a:70:d4:3a:fb:ad:cf:81:
a9:d4:17:71:ef:87:4c:90:7f:e8:3c:6c:39:45:ab:08:ee:39:
26:a1:9f:71:4a:2f:26:c7:7b:00:25:0a:80:b3:20:b2:af:be:
fd:cd:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:55 2025 by rpki-client