Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eJDoVJBOJd_ap7y92drhD4U9tkA.roa
File: eJDoVJBOJd_ap7y92drhD4U9tkA.roa (raw, json)
Hash identifier: L4zQGk1s6nypnDZN8gOI7HDfyfRYCqZnkQqRzOUGk38=
Subject key identifier: 78:90:E8:54:90:4E:25:DF:DA:A7:BC:BD:D9:DA:E1:0F:85:3D:B6:40
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019495E6EDCD79CEE482594113109346175B
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eJDoVJBOJd_ap7y92drhD4U9tkA.roa
Signing time: Fri 24 Jan 2025 01:22:06 +0000
ROA not before: Fri 24 Jan 2025 01:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.117.22.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
193.201.208.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.100.0/24 maxlen: 32
194.36.101.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.65.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
195.85.69.0/24 maxlen: 32
195.85.70.0/24 maxlen: 32
195.85.71.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:95:e6:ed:cd:79:ce:e4:82:59:41:13:10:93:46:17:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 24 01:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7890e854904e25dfdaa7bcbdd9dae10f853db640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:37:4c:ab:44:c4:71:98:c2:1f:a7:e6:c0:
79:59:27:ff:57:30:4b:5c:c6:8c:22:f7:b1:e6:94:
c4:51:d6:b4:a3:8b:60:61:df:36:36:73:6d:21:8a:
d5:1a:9b:c8:d5:9b:25:cc:b9:f9:10:7b:b2:69:35:
60:a3:a2:58:33:3e:4f:19:14:b4:d7:30:d1:f7:2f:
a7:96:50:9f:af:48:a4:ce:44:59:db:1f:2f:ef:99:
0d:d2:fb:3a:03:cb:27:7a:1f:84:06:78:bb:42:0f:
9f:20:b6:de:94:44:d5:0d:13:dc:be:6a:97:2e:7d:
b1:86:3f:20:4b:02:aa:38:74:87:6c:a5:17:80:d7:
05:d0:e0:7e:6b:3e:ca:22:48:3b:fd:42:5a:f9:05:
df:89:e2:14:a1:05:5e:55:e3:82:5c:32:5a:84:7b:
16:73:da:1d:07:cb:26:48:60:97:08:7f:63:12:32:
56:8b:7d:ec:05:d2:4b:f3:27:d4:de:39:b2:db:f7:
15:f6:95:3d:77:bd:98:8a:f5:fe:d5:25:95:a5:74:
82:6e:c6:05:5f:92:6d:e5:13:9e:fd:1b:55:c9:60:
59:13:74:c8:a1:41:0d:6d:49:a0:01:10:6c:dd:05:
8f:a9:19:72:ce:36:ce:86:3c:df:fb:bc:ad:fd:f6:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:E8:54:90:4E:25:DF:DA:A7:BC:BD:D9:DA:E1:0F:85:3D:B6:40
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/eJDoVJBOJd_ap7y92drhD4U9tkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
128.0.119.0/24
185.117.20.0/22
185.211.48.0-185.211.50.255
185.227.240.0/24
193.201.208.0/22
194.36.100.0/22
194.124.64.0/22
195.85.68.0/22
Signature Algorithm: sha256WithRSAEncryption
90:ff:83:48:c8:83:de:ac:d1:86:a8:ee:29:43:e0:67:b2:60:
7b:73:7e:41:94:9d:45:7f:89:21:18:b2:18:bf:9e:e8:0b:d3:
ab:c2:d2:20:36:2f:36:88:92:3c:1b:15:8d:df:6a:3d:d0:61:
e9:94:72:95:8c:91:bb:44:da:61:8a:8d:ae:16:e2:f1:81:17:
15:8d:e1:96:25:66:30:e7:6b:15:aa:94:86:0d:7f:27:7f:14:
11:4d:8f:a6:1f:44:ef:92:c3:3f:7a:2b:58:b9:d5:c1:45:83:
d7:a1:0c:f4:c2:41:a9:b1:ab:6b:45:6c:ab:fc:5f:03:b0:1d:
24:ac:1b:d3:68:f4:d4:ca:53:48:08:9d:de:72:b0:63:b2:64:
fb:02:ee:c3:21:65:ea:b7:08:58:be:5c:c6:6d:15:77:de:71:
e6:4e:b6:b2:ea:9f:65:55:ba:ff:f2:da:53:50:c7:a0:4b:45:
ab:ad:ff:6d:0d:17:69:1c:00:3e:5b:27:07:f3:2f:99:4b:d5:
a1:21:ce:7c:6c:54:36:bf:b1:1d:fd:dc:54:d3:e4:3a:97:1c:
13:16:5c:39:0d:b9:28:de:07:96:31:40:11:ef:ae:9e:01:f2:
47:47:c5:c6:a0:c8:07:5c:cf:88:6e:f8:56:f0:59:5f:8c:67:
7a:a4:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:43 2025 by rpki-client