Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E2RCFG6SOM_63r-VtTo6F75bNG8.roa
File: E2RCFG6SOM_63r-VtTo6F75bNG8.roa (raw, json)
Hash identifier: cFsgd+N3q1ycELiv6oXc+if4k2ZQZsdgASmI2mBbQsA=
Subject key identifier: 13:64:42:14:6E:92:38:CF:FA:DE:BF:95:B5:3A:3A:17:BE:5B:34:6F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0184A0AB5E050C22A376DA3E521185864B69
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E2RCFG6SOM_63r-VtTo6F75bNG8.roa
Signing time: Tue 22 Nov 2022 18:48:16 +0000
ROA not before: Tue 22 Nov 2022 18:48:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21769
IP address blocks: 185.199.116.0/22 maxlen: 22
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
45.127.248.0/22 maxlen: 22
185.195.212.0/22 maxlen: 22
103.47.56.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
14.102.224.0/20 maxlen: 20
2a09:1e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a0:ab:5e:05:0c:22:a3:76:da:3e:52:11:85:86:4b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 22 18:48:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=136442146e9238cffadebf95b53a3a17be5b346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:f3:e1:e3:65:0c:6e:3d:c3:2f:02:7a:7d:
68:f6:25:b5:92:87:25:02:6f:60:c8:da:7f:04:b7:
15:a8:99:e3:57:ae:2c:ef:65:2b:98:27:3e:25:fd:
d5:de:0e:d2:52:76:ef:43:60:9f:78:32:a0:88:60:
46:17:c5:60:20:87:37:c9:60:c5:34:3b:26:b1:dc:
c0:05:9c:d5:18:c4:35:4e:44:82:26:4f:85:a6:7e:
e4:18:d9:cb:7a:d0:33:3e:9a:b6:67:a9:f0:7c:29:
9e:66:03:c6:61:db:8b:76:24:ad:a0:b4:6d:c8:f0:
1d:c6:cd:96:07:01:81:67:71:5d:7a:24:50:fd:4d:
13:45:41:fe:6a:a4:78:12:dd:76:3d:11:e7:bf:13:
3f:b1:87:8a:1b:83:88:ff:32:7a:b0:e1:5f:16:d1:
0a:db:0d:26:69:db:84:d3:3c:dd:d6:d1:f8:38:83:
0d:fe:d7:cd:a5:94:cd:7f:5b:fb:5c:e3:0f:f7:9d:
0e:81:cd:2c:6e:46:af:4b:98:4e:ca:c3:a6:c4:1e:
85:50:bb:b9:49:55:19:75:c4:9a:cc:54:3c:82:cf:
08:84:ec:ef:cc:e1:c6:ca:86:fd:6a:41:6f:42:de:
d3:01:61:88:96:f8:76:b5:9f:cf:00:7d:a8:a7:91:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:64:42:14:6E:92:38:CF:FA:DE:BF:95:B5:3A:3A:17:BE:5B:34:6F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E2RCFG6SOM_63r-VtTo6F75bNG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.224.0/20
45.127.248.0/22
103.41.44.0/22
103.47.56.0/22
103.63.28.0/22
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
1e:1a:0e:0d:01:b6:67:a5:8e:24:f0:91:3c:bc:05:36:e2:b1:
52:23:6c:1d:c5:95:10:00:0d:09:69:35:ce:f4:6c:a2:22:9b:
49:20:b4:b2:65:6b:f3:c9:f9:59:a2:ae:40:97:71:a4:1f:aa:
b0:18:ad:31:2b:9f:a9:ca:01:dc:5e:fd:99:14:90:ab:4c:3e:
b8:c2:81:30:be:b3:02:e2:c6:ad:3c:c6:bf:e2:a2:60:11:2c:
33:09:8f:f8:4b:47:62:c0:22:5a:cc:d8:79:22:09:48:80:79:
8a:35:a2:43:2d:e4:f8:23:4f:41:a5:5b:0e:28:04:21:71:1d:
e5:7a:f6:28:6a:55:ca:da:e9:b4:da:5b:a7:bd:fa:3a:05:92:
af:e6:9a:49:f5:a9:cb:cf:dd:f0:94:34:3e:6e:1c:47:4b:14:
6f:ee:a7:78:04:16:85:bd:9b:23:08:52:83:aa:ed:14:9f:63:
ca:96:5e:58:f8:a0:c4:fa:64:6a:4a:29:cc:f4:0f:a2:d5:ff:
a9:d9:95:91:f1:64:38:3c:30:66:16:bd:a2:5c:4b:0e:35:d6:
4f:b8:f0:6b:6d:0e:4c:cb:5d:dd:45:43:46:d3:17:6f:bf:32:
5c:98:54:02:53:16:d3:13:c8:35:fc:e6:f2:b5:88:57:22:1b:
03:c3:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:47 2025 by rpki-client