Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/7mSFLMU3pbLGF1eJYN7bCpXwo10.roa
File: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (raw, json)
Hash identifier: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=
Subject key identifier: EE:64:85:2C:C5:37:A5:B2:C6:17:57:89:60:DE:DB:0A:95:F0:A3:5D
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 019425222413F6B67FD4687C9538357977D6
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/7mSFLMU3pbLGF1eJYN7bCpXwo10.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202591
IP address blocks: 45.154.164.0/22 maxlen: 22
92.119.28.0/22 maxlen: 22
185.150.184.0/22 maxlen: 22
2a07:7280::/29 maxlen: 29
2a09:b340::/29 maxlen: 29
2a0f:bd00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:24:13:f6:b6:7f:d4:68:7c:95:38:35:79:77:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee64852cc537a5b2c617578960dedb0a95f0a35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:a5:29:c0:b4:c6:f6:b8:09:09:ba:e2:05:
98:90:ff:8c:f7:4a:20:30:d7:db:c5:fe:76:8d:c0:
9d:e2:83:67:5e:52:8f:95:4e:1c:24:db:1c:c2:ac:
64:76:3e:ee:1a:50:4f:50:bf:22:fd:0c:99:ee:ff:
25:35:96:85:41:cb:eb:b1:e2:59:87:57:11:64:7c:
af:74:9e:09:2d:68:7c:e0:95:08:d0:35:b1:c0:a8:
06:dc:cf:1d:a4:71:9b:c0:3f:55:47:e0:bf:7c:a3:
a3:19:2d:3d:da:5e:8b:07:28:fe:f4:c4:7f:6b:b8:
ed:fe:5e:a1:46:d6:6c:a9:8b:cc:60:66:e7:52:ca:
a7:8f:52:40:3d:d4:00:44:21:e8:99:b6:b4:9f:bc:
be:1c:0b:c0:67:f1:06:9d:bc:4f:76:89:61:b1:19:
4d:c7:ec:47:23:1e:46:72:98:51:03:74:57:dd:98:
57:b5:59:66:5b:92:34:64:c1:95:3e:47:9c:67:39:
8b:ef:b4:38:2c:da:a6:9c:bf:8a:80:28:19:c6:c5:
08:41:b8:44:fa:e3:05:b6:31:36:29:0d:16:1c:1d:
8d:3a:53:43:1b:78:3f:5a:68:29:e3:cf:b9:4c:a3:
72:ec:fa:c6:87:55:d3:e2:f1:87:7d:47:23:41:b6:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:64:85:2C:C5:37:A5:B2:C6:17:57:89:60:DE:DB:0A:95:F0:A3:5D
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/7mSFLMU3pbLGF1eJYN7bCpXwo10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.164.0/22
92.119.28.0/22
185.150.184.0/22
IPv6:
2a07:7280::/29
2a09:b340::/29
2a0f:bd00::/29
Signature Algorithm: sha256WithRSAEncryption
60:09:48:57:51:3e:31:30:3c:9e:4c:94:3b:16:db:9b:79:3b:
16:d1:39:20:8c:f4:0d:f3:33:3f:59:1a:fb:6f:38:1d:fa:0f:
2c:d2:0d:13:34:39:be:a8:d7:26:63:40:58:98:8f:1b:8e:a3:
bc:ab:78:85:1a:89:4f:69:75:cd:5e:22:48:4f:9d:df:83:94:
20:0c:44:6d:0b:b8:da:2d:d2:22:dd:fd:b3:0f:a4:1e:cc:f4:
85:97:49:1e:df:b5:2d:a8:b5:e5:1f:22:16:b5:00:79:35:1f:
2d:d4:84:66:4f:db:7f:a0:1a:b1:a9:b7:29:92:f1:74:16:a8:
66:f1:21:9f:86:79:1a:32:9a:ef:08:5f:78:56:d8:61:1d:af:
78:a6:96:da:7a:ab:b9:64:41:28:01:5a:00:98:18:c2:a7:4e:
f0:66:69:35:59:ac:08:05:8f:2d:23:85:30:f6:ed:b9:b4:a6:
88:46:2d:07:75:45:b9:2b:a0:3f:f8:3e:f6:d9:f8:ef:04:d2:
07:b5:4c:21:06:8b:7e:a9:7f:3d:fa:80:83:cf:83:a5:1b:77:
0e:3a:2f:8c:2a:e6:7e:9d:1c:ac:9a:b2:5f:fa:0e:cf:e9:77:
33:d0:77:1d:5d:3f:4e:35:c7:6d:63:17:f3:51:9f:c2:9c:39:
63:7d:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:41 2025 by rpki-client