Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yD2EAHhhP8hq4VfBKVVVwQXGm8g.roa
File: yD2EAHhhP8hq4VfBKVVVwQXGm8g.roa (raw, json)
Hash identifier: fqkI7jEwCktKLRqg81PTNjutJnwaIjHZG9rVSFusY9o=
Subject key identifier: C8:3D:84:00:78:61:3F:C8:6A:E1:57:C1:29:55:55:C1:05:C6:9B:C8
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0195A0B2335B4F626E8FD7F4EDF4FBEA4F81
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yD2EAHhhP8hq4VfBKVVVwQXGm8g.roa
Signing time: Sun 16 Mar 2025 20:43:07 +0000
ROA not before: Sun 16 Mar 2025 20:43:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
213.220.58.0/24 maxlen: 24
213.220.59.0/24 maxlen: 24
213.220.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a0:b2:33:5b:4f:62:6e:8f:d7:f4:ed:f4:fb:ea:4f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 16 20:43:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c83d840078613fc86ae157c1295555c105c69bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:7f:64:a5:9b:f2:75:62:28:5f:f9:7d:37:
bd:da:1e:2e:90:90:ce:28:f8:aa:14:a4:71:28:97:
df:87:99:f8:46:ae:be:ce:3f:bc:e3:6a:db:36:15:
d7:0a:64:26:08:8a:9e:99:27:af:04:d9:23:48:19:
00:22:36:00:4f:8e:cf:b1:13:c9:4b:fb:5d:4e:6b:
19:df:b1:e7:9c:9e:88:eb:6c:21:d8:ca:16:4b:21:
0d:e3:89:12:ed:1b:02:ca:3d:a1:42:1e:35:29:2f:
a3:6c:f4:41:7b:f4:b5:37:7d:9a:3f:60:39:4d:b1:
7c:e3:4c:fd:14:14:a0:f7:ca:fc:5a:24:bc:82:b3:
e6:b1:af:7f:7c:54:5d:0e:14:53:a7:73:07:81:54:
1a:a1:79:66:29:08:4d:61:3e:f2:af:1e:a7:3d:54:
78:5c:1c:66:67:a9:00:b3:83:8d:70:89:c1:51:23:
ac:e4:11:43:51:ea:9b:d7:fb:7a:5b:b5:09:8d:0c:
c5:d4:67:cd:4d:9a:55:d6:de:72:1f:ee:0a:21:da:
94:14:4b:05:69:ed:cd:63:2b:ac:e3:6b:5a:45:ce:
c4:b9:90:e6:22:18:0c:4b:0a:4f:9c:f7:b8:16:17:
5f:8c:f0:51:cc:09:2a:17:19:ac:e4:6e:b2:74:1b:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3D:84:00:78:61:3F:C8:6A:E1:57:C1:29:55:55:C1:05:C6:9B:C8
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yD2EAHhhP8hq4VfBKVVVwQXGm8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/24
45.155.242.0/24
194.143.205.0-194.143.207.255
194.143.217.0/24
194.143.221.0/24
195.114.192.0/24
195.114.195.0/24
195.114.197.0-195.114.198.255
213.220.19.0/24
213.220.58.0-213.220.60.255
Signature Algorithm: sha256WithRSAEncryption
34:9f:e1:e2:86:86:40:91:9d:55:10:5d:30:20:43:b5:26:47:
97:d3:eb:6c:5a:e0:c0:43:03:f7:7a:d0:4d:28:ab:28:5f:7f:
62:88:a9:a5:af:4f:70:d7:bc:e4:74:98:33:b5:34:f7:14:86:
bf:2e:99:5d:49:e0:80:5d:2c:4d:dc:50:4d:83:54:d4:f4:7d:
8a:dc:59:0e:d3:bc:46:18:63:91:7e:90:18:24:c3:72:99:66:
8e:e9:7f:5c:04:9e:9b:5b:39:a7:a5:d0:c1:2b:85:a3:8f:17:
b0:37:ab:1f:9f:c2:cb:8b:b3:cc:b0:ef:66:4d:73:31:8c:40:
cf:62:56:09:95:74:aa:39:4e:63:d6:a0:b5:ed:d6:af:f6:e2:
a2:bd:20:2d:36:4f:89:b3:38:ac:8b:e9:33:6a:63:79:5d:44:
49:ff:19:d5:b3:59:ff:42:f2:85:8a:82:60:6e:e2:5b:82:9d:
15:a4:ac:1a:13:89:6c:11:b6:5f:da:35:fc:b4:c0:88:b8:38:
cd:47:62:7d:37:f4:56:b5:24:7e:c0:1d:0f:cb:e5:d1:0e:66:
58:ab:04:d0:d7:87:27:9f:0a:60:53:93:96:f5:4e:38:22:4c:
84:0e:c7:6e:d6:d0:e2:45:bb:c6:8b:df:da:c7:1b:a3:5e:42:
f0:31:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:48:25 2025 by rpki-client