Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/L_i4yCwXGt3EyLbIpakl46-7eYs.roa
File: L_i4yCwXGt3EyLbIpakl46-7eYs.roa (raw, json)
Hash identifier: s/HpLKW9+sOAB0uIETFr6yuJf6YQfo8jOuu0Xd3A+Dk=
Subject key identifier: 2F:F8:B8:C8:2C:17:1A:DD:C4:C8:B6:C8:A5:A9:25:E3:AF:BB:79:8B
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0195607ED67ACBB31D8C140A9418DE6593FC
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/L_i4yCwXGt3EyLbIpakl46-7eYs.roa
Signing time: Tue 04 Mar 2025 09:31:19 +0000
ROA not before: Tue 04 Mar 2025 09:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44803
IP address blocks: 45.148.28.0/22 maxlen: 22
93.92.112.0/24 maxlen: 24
217.78.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:7e:d6:7a:cb:b3:1d:8c:14:0a:94:18:de:65:93:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 4 09:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff8b8c82c171addc4c8b6c8a5a925e3afbb798b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:f6:d2:5e:d6:78:7f:98:03:de:f5:77:4d:
3e:b0:7c:4b:23:66:82:d3:22:ef:f0:7c:c8:4b:8d:
5f:3a:32:48:2f:c5:02:42:07:1b:a2:67:ef:54:58:
14:e0:b3:e8:2c:bb:e9:23:41:e2:17:89:48:c4:c5:
74:8e:3a:17:0f:f3:42:6a:9f:57:a7:7c:7c:e4:df:
e5:fc:db:44:7c:00:73:40:b7:6e:70:49:6d:de:e4:
67:3e:8e:f1:42:90:1b:6c:86:83:7e:ee:76:a6:c1:
19:e8:7b:c5:9a:a7:ae:63:ca:d4:b3:e0:13:24:2e:
3e:cb:6c:e7:d4:cd:5b:86:af:96:10:46:ef:86:74:
a0:47:3f:9f:84:a7:81:13:2b:c9:e7:3f:02:5e:ea:
21:c6:b8:5b:49:c3:d1:ab:a6:ac:c4:30:7c:bb:7f:
ce:72:89:cf:e6:1c:51:45:20:b7:01:0f:bb:75:3a:
af:9c:4d:1c:56:73:06:5b:ca:47:cc:bf:97:8a:91:
5b:a6:b6:5e:d9:36:0f:90:1e:b5:94:0d:17:c5:1c:
69:21:46:a4:69:55:4a:72:d8:8a:dc:ad:2e:4a:be:
da:ab:66:cb:e0:cf:69:e0:31:c8:35:41:2b:17:be:
ab:40:1b:db:b4:3d:cd:a0:f2:57:09:db:f8:ad:b1:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:B8:C8:2C:17:1A:DD:C4:C8:B6:C8:A5:A9:25:E3:AF:BB:79:8B
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/L_i4yCwXGt3EyLbIpakl46-7eYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.28.0/22
93.92.112.0/24
217.78.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c8:2d:12:19:ad:2c:f9:a8:4d:13:5a:89:19:41:b9:ba:cc:
fe:33:11:a0:13:c7:fa:a4:bc:fd:03:1f:08:d3:fc:d2:69:b7:
d6:90:43:10:ab:b8:5b:67:b9:02:45:ed:22:5d:07:70:48:7c:
df:08:c6:19:49:19:95:33:63:fe:11:0b:74:9e:1f:37:cc:6e:
aa:24:ea:0d:48:35:81:19:60:6a:44:2a:44:11:13:cd:e2:44:
52:2b:76:86:e7:45:60:68:2e:64:58:83:35:34:72:f5:f2:ee:
d9:a3:61:30:96:03:a5:9b:e3:8d:c2:ae:d1:40:76:50:ff:be:
f2:5a:fa:01:fa:1a:e1:07:ab:04:e3:32:b2:3a:34:2a:48:07:
3b:b9:49:96:fe:3f:3c:be:05:c9:65:49:14:23:89:fd:55:f4:
b5:7b:e5:82:8f:e9:cf:90:39:a3:47:c9:f3:9e:a3:18:de:9c:
89:b7:3c:34:ad:19:42:1b:45:9d:c6:f7:b7:28:26:9d:71:6e:
34:ea:cf:c8:d2:a2:fe:47:45:82:8c:ef:c4:32:1b:9f:2d:2c:
2a:33:ee:15:61:21:03:16:39:c0:36:db:a7:73:9d:15:f1:06:
11:2f:bd:14:cc:09:1f:a5:bf:1e:e7:95:e5:e3:c0:2b:9a:a4:
80:fe:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:13:22 2025 by rpki-client