Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2k8zxPCU0cM4wJLMwiL6cNGD7xo.roa
File: 2k8zxPCU0cM4wJLMwiL6cNGD7xo.roa (raw, json)
Hash identifier: JQgs8vnSJ5VmeiVdRDuU3aRQCgjtu1kSnJ+seu6i038=
Subject key identifier: DA:4F:33:C4:F0:94:D1:C3:38:C0:92:CC:C2:22:FA:70:D1:83:EF:1A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01915215173EA84879DE3303A36AAF2A6B00
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2k8zxPCU0cM4wJLMwiL6cNGD7xo.roa
Signing time: Wed 14 Aug 2024 18:09:59 +0000
ROA not before: Wed 14 Aug 2024 18:09:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
45.151.140.0/22 maxlen: 22
85.208.8.0/22 maxlen: 22
94.229.208.0/20 maxlen: 24
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.36.32.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:15:17:3e:a8:48:79:de:33:03:a3:6a:af:2a:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 14 18:09:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da4f33c4f094d1c338c092ccc222fa70d183ef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:24:93:45:ba:be:18:fe:82:0f:fc:0b:f3:0d:
a6:11:19:bb:13:2b:1d:ac:1c:6d:4b:39:cd:eb:73:
d4:a1:64:52:77:71:f4:fa:c1:1e:1a:6d:24:5d:ff:
2b:a4:74:d8:26:08:05:57:12:6f:a5:18:54:bc:6f:
3d:62:54:e1:84:aa:c6:90:4e:dd:f5:2c:92:b7:e2:
f7:1e:c3:35:f8:3d:6e:94:45:1d:72:db:d3:ac:8c:
e7:80:da:ae:be:47:1d:e1:ef:fa:3e:68:55:a0:fd:
90:ca:28:03:74:75:8b:aa:7e:0d:27:89:66:55:28:
dd:a6:e4:00:e3:58:b7:da:3e:37:93:29:2c:da:3e:
ed:00:ec:25:8c:de:1c:72:39:f7:d6:6b:07:c5:38:
f4:a1:57:f8:e8:64:d9:89:9a:6c:da:a4:80:07:54:
d7:df:7d:2b:32:f8:06:2d:98:c3:03:66:41:fe:fa:
3a:c6:e8:f8:eb:68:a4:28:9c:c6:29:e9:37:15:f4:
ae:0d:c5:b7:f6:2a:d6:0a:b5:f3:6d:f7:67:0a:6d:
00:8c:c4:de:be:05:e2:2b:72:77:0f:0c:e3:c5:2b:
ce:bb:f3:04:f8:7c:87:12:32:b7:ff:5e:99:54:7b:
f5:c5:f3:f7:ec:04:56:e4:94:d5:cf:d3:9e:e4:5b:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:33:C4:F0:94:D1:C3:38:C0:92:CC:C2:22:FA:70:D1:83:EF:1A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/2k8zxPCU0cM4wJLMwiL6cNGD7xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
45.151.140.0/22
85.208.8.0/22
94.229.208.0/20
103.41.44.0/22
103.63.28.0/22
103.71.61.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.36.32.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
3e:d5:fe:3b:75:c8:26:e7:6a:bd:1a:26:1b:b6:f4:8b:e4:5b:
75:24:21:43:98:0e:48:17:77:be:73:de:39:b2:8c:30:f1:cc:
d2:58:56:1a:d8:dd:1a:26:9d:18:2c:44:a8:6a:07:d3:ac:2e:
bc:05:f1:79:10:07:b3:07:e0:6e:a0:69:a8:19:51:2a:bb:3e:
0d:2c:06:64:a9:91:e1:14:5e:ff:8b:bb:d5:5a:d3:e1:60:ff:
9f:32:a0:e6:4e:75:28:6d:c9:47:76:88:20:fe:af:c2:ab:42:
dc:e8:e3:61:c8:a5:9f:2d:4f:e3:15:fe:0d:7b:75:a5:de:93:
27:a6:26:c4:4b:c7:6e:ce:9a:32:9a:a7:94:13:07:7b:9b:d5:
a5:e2:04:81:a0:19:81:08:fa:1f:a1:56:a0:b9:05:78:13:b8:
5b:34:fb:bd:05:47:ee:8f:96:38:48:ae:e5:9a:2b:e4:d3:61:
db:a8:4d:c9:2f:25:1f:35:15:8f:ae:7c:8b:f9:e4:f6:41:af:
ed:c9:92:42:e9:72:97:7c:00:7a:0c:4f:c8:f3:09:ec:80:54:
32:3e:87:6a:44:38:a4:b3:08:e5:d3:79:13:36:a8:79:14:f5:
cd:5e:a0:a8:93:21:48:3d:b5:00:ef:25:c0:0a:f9:66:c9:35:
de:47:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:39 2025 by rpki-client