Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fEnCsXbtZL6FcVTMQkgNNBrVMZY.roa
File: fEnCsXbtZL6FcVTMQkgNNBrVMZY.roa (raw, json)
Hash identifier: JcJRXIuxdbBA5cNsV+KbF6Q4fQQMwDGjq/fzU8eIVq8=
Subject key identifier: 7C:49:C2:B1:76:ED:64:BE:85:71:54:CC:42:48:0D:34:1A:D5:31:96
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01946194D7AFE1696849566FEB22C5E33AA9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fEnCsXbtZL6FcVTMQkgNNBrVMZY.roa
Signing time: Mon 13 Jan 2025 21:32:11 +0000
ROA not before: Mon 13 Jan 2025 21:32:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
185.117.20.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:94:d7:af:e1:69:68:49:56:6f:eb:22:c5:e3:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 13 21:32:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c49c2b176ed64be857154cc42480d341ad53196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:1a:1e:26:ad:1a:c8:06:87:15:6e:3a:2b:
06:46:b5:4a:54:64:cb:82:00:33:3d:91:56:ab:6d:
6e:da:ff:8a:70:b6:da:76:54:eb:34:9d:0d:ff:9d:
01:56:8b:b9:ac:8b:6b:2e:5c:1a:6f:15:96:01:4f:
8b:39:2e:e0:82:32:0a:c7:ce:d6:71:15:84:0d:7b:
c5:55:ca:7a:04:1e:d8:81:81:f7:1d:59:60:81:9f:
be:48:e7:ec:84:8a:4e:23:7b:75:55:cc:54:6a:f8:
ba:39:a1:00:87:6c:d2:27:13:07:6d:09:7f:f8:b4:
b7:fe:1f:21:cf:28:48:4e:c9:8e:0c:7d:22:db:29:
dd:3e:44:5f:c2:b7:93:19:54:0e:84:b7:16:ee:21:
ad:85:21:85:ac:7c:cc:1c:97:d5:1b:ad:b6:ee:96:
a5:f0:51:e1:20:5b:79:98:b9:f5:d5:72:2e:8f:61:
62:be:7b:93:7b:35:b0:20:9e:db:49:ec:78:91:de:
df:f6:78:d8:ab:44:14:24:7a:65:ca:c0:83:47:39:
f3:eb:90:19:f2:78:27:0d:32:2f:6f:6a:f7:89:92:
9d:0f:a6:2a:01:eb:ed:df:3b:55:04:f9:e1:4a:f9:
f7:05:07:0b:73:dd:90:08:23:37:98:4b:5a:09:79:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:C2:B1:76:ED:64:BE:85:71:54:CC:42:48:0D:34:1A:D5:31:96
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fEnCsXbtZL6FcVTMQkgNNBrVMZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
185.117.20.0/24
185.211.48.0-185.211.50.255
Signature Algorithm: sha256WithRSAEncryption
40:89:a4:28:a0:7b:16:46:d8:c2:be:0c:88:93:7b:1c:aa:39:
e3:80:2e:13:e9:4b:3c:13:28:fc:1b:f2:32:cf:64:ac:46:00:
7c:36:6e:71:1e:00:46:cd:37:99:22:a5:e3:9c:0d:c6:fb:b7:
85:b2:68:2c:33:13:0d:0d:c2:13:7e:64:22:00:ca:be:73:f5:
1f:27:d3:1d:1c:40:1a:b9:14:04:b8:52:02:64:af:69:fd:2a:
31:6f:e0:69:b6:24:ba:d3:a2:b3:c0:2a:75:66:7e:e6:ef:d0:
7b:98:31:b9:35:1e:a1:65:31:2d:ee:f8:41:90:a3:1a:61:ac:
41:af:ad:7e:12:49:3e:ff:cd:fa:8c:ae:38:f2:b8:10:b0:c3:
79:19:8e:4c:28:55:b6:39:50:24:32:ad:d3:65:2c:3b:77:f5:
2d:6e:3a:7e:6a:4f:8f:8f:34:3d:c7:ab:b9:f6:05:fc:07:79:
6e:8b:26:47:12:1b:e8:f7:6c:c9:1e:a3:61:dc:8e:9d:b2:71:
55:0c:1f:ab:8f:84:83:b4:d3:4a:79:f8:37:d7:29:af:6f:50:
f7:02:e0:0b:32:2b:80:92:75:ca:8d:c7:1b:37:21:94:4b:3b:
b9:f4:92:7a:51:10:3e:25:92:69:d7:31:8c:e1:0d:85:75:1d:
f9:42:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:05 2025 by rpki-client