Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LRzlR-Qta1s1jbM_HUbw0UUWRKc.roa
File: LRzlR-Qta1s1jbM_HUbw0UUWRKc.roa (raw, json)
Hash identifier: f8PZsA2KPK7vRDj0Thf9IB55ZQpivlArfrll1dq5R2M=
Subject key identifier: 2D:1C:E5:47:E4:2D:6B:5B:35:8D:B3:3F:1D:46:F0:D1:45:16:44:A7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0191C812858844C8C662AC4A9F138440B6EE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LRzlR-Qta1s1jbM_HUbw0UUWRKc.roa
Signing time: Fri 06 Sep 2024 16:02:22 +0000
ROA not before: Fri 06 Sep 2024 16:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
85.208.8.0/22 maxlen: 22
94.229.208.0/20 maxlen: 20
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.36.32.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c8:12:85:88:44:c8:c6:62:ac:4a:9f:13:84:40:b6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 6 16:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d1ce547e42d6b5b358db33f1d46f0d1451644a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:ea:5f:72:5f:47:ee:90:8f:84:99:8e:df:
3d:fc:99:a3:94:36:cc:e4:0c:c9:ad:e9:fc:58:b9:
9f:03:a3:8d:9f:b8:db:c2:07:3f:00:f7:81:4a:35:
ec:e7:96:94:5b:6a:98:8c:6a:41:ed:81:08:5e:62:
34:6b:03:07:e0:92:73:75:29:25:a8:a5:bc:ae:45:
7e:91:2f:40:8c:84:3f:a4:65:82:01:e6:8f:b7:83:
d6:6f:a3:a1:01:46:a0:89:e7:bd:ad:c0:0b:b8:1a:
b6:e9:72:80:93:1d:0c:94:91:07:47:31:d3:f5:1c:
b0:19:84:9b:10:3c:e4:49:7c:92:e0:8c:64:9f:df:
e6:a0:d2:6b:94:72:12:7b:f9:5c:1c:ce:ea:f7:1c:
b5:54:1a:56:93:22:ed:80:eb:64:9f:72:b7:90:d5:
79:34:5a:e3:63:9b:5f:97:4f:41:67:9e:fa:f9:0b:
bb:f0:a8:36:53:16:99:6d:77:54:5c:a4:8d:bc:a0:
9c:60:d9:30:c4:ed:c0:dd:49:9f:b3:c2:f1:b4:99:
64:71:02:2c:f3:36:28:e3:6b:4a:d4:a9:a3:9f:79:
5a:4b:4f:c2:4a:79:eb:5f:1c:b7:11:80:44:9c:68:
77:71:90:26:ae:0f:69:7f:7a:47:21:37:45:5c:91:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1C:E5:47:E4:2D:6B:5B:35:8D:B3:3F:1D:46:F0:D1:45:16:44:A7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/LRzlR-Qta1s1jbM_HUbw0UUWRKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
85.208.8.0/22
94.229.208.0/20
103.41.44.0/22
103.63.28.0/22
103.71.61.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.36.32.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
16:f6:fb:53:fe:59:cb:8a:9a:93:42:e0:23:57:1c:36:02:e5:
ea:ec:64:0a:64:db:b7:c4:82:69:b4:f3:4d:2e:1f:96:2c:7d:
8d:5f:1e:a7:14:79:0b:1a:49:34:0b:64:25:ea:5d:77:1a:23:
35:6e:13:85:bd:c3:84:f4:ab:ca:83:22:b6:ce:07:cd:3e:7c:
6d:ca:eb:ea:48:11:b3:df:d7:c3:a3:67:01:e1:0f:33:25:f5:
be:ee:fe:13:c0:1b:48:24:e7:57:e5:8d:9a:eb:41:ef:a0:29:
7c:1c:07:25:3c:0e:ff:b4:57:d0:6a:16:4e:2a:f1:f3:29:87:
56:68:c6:82:97:41:50:ca:59:37:cc:28:fd:19:e0:af:24:bd:
8c:65:c5:09:3e:8e:8f:4f:8f:77:62:38:f1:89:2c:ea:04:7f:
c6:cf:a1:30:81:e7:31:b2:b6:96:52:c8:60:4d:60:bf:8d:61:
1d:1d:1d:f1:d0:d6:42:1c:3e:31:1e:35:10:50:14:d7:fa:95:
bd:bb:15:c6:2d:08:46:5b:88:86:9e:23:2f:08:ba:2e:10:1d:
40:5d:ef:83:52:49:3f:bf:f9:4c:ab:7e:44:e8:e9:b1:42:72:
b9:26:cf:ec:b5:db:4a:d7:ad:dc:6d:fe:4b:5a:94:dd:70:8f:
54:f5:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:55 2025 by rpki-client