Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PItQFXL63DxwLNX91Tfzs-4H7Go.roa
File: PItQFXL63DxwLNX91Tfzs-4H7Go.roa (raw, json)
Hash identifier: Z83wa/dVVn8ROqucsRRkSbA6SLA1xtRxPBRzXnT47wI=
Subject key identifier: 3C:8B:50:15:72:FA:DC:3C:70:2C:D5:FD:D5:37:F3:B3:EE:07:EC:6A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422200E3FA28175B12CBDE215CBF5E7B2
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PItQFXL63DxwLNX91Tfzs-4H7Go.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0e:3f:a2:81:75:b1:2c:bd:e2:15:cb:f5:e7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c8b501572fadc3c702cd5fdd537f3b3ee07ec6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:4e:16:00:1f:2e:2e:b7:12:10:ee:95:80:
f0:fa:33:fc:2a:80:f3:c3:69:f2:2e:f3:1d:41:25:
f0:93:26:5f:b1:14:8a:00:cd:f0:ba:8b:9f:4e:38:
e2:92:b6:db:0b:be:1e:89:76:49:0e:7c:c0:b8:3c:
80:eb:37:23:55:13:92:63:52:78:36:a0:e3:b8:d4:
f6:43:78:03:dd:00:e1:ae:88:87:5b:d4:9e:e1:af:
9a:b0:95:ff:2c:4b:19:bd:e6:82:dd:fb:8a:f9:ba:
24:3e:f6:f1:3a:2a:30:dc:df:99:ec:58:8b:07:e0:
5d:35:83:42:d9:00:56:a9:61:1c:c8:39:e5:d4:04:
23:41:ad:4e:3b:b7:87:5c:3c:58:5e:51:84:37:34:
19:e5:00:a6:fd:a5:ef:96:a6:90:d1:99:2c:35:09:
87:01:bc:20:96:bc:6a:c0:ce:3e:8f:92:58:5a:0f:
87:7d:5f:40:93:ff:c7:39:bb:22:58:da:15:aa:77:
54:ff:9e:4f:88:ab:70:7b:7c:d1:0c:6e:48:8a:78:
33:4f:e1:02:c6:ba:df:9f:1f:b6:fc:90:26:a0:90:
5c:34:26:b5:04:9c:eb:8d:24:0d:b0:ba:f7:13:90:
2f:b1:06:28:ea:a4:72:b8:a9:ec:ee:51:f5:1c:37:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:50:15:72:FA:DC:3C:70:2C:D5:FD:D5:37:F3:B3:EE:07:EC:6A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PItQFXL63DxwLNX91Tfzs-4H7Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
103.41.44.0/22
103.63.28.0/22
103.71.61.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
91:8f:c6:4d:db:27:03:a7:f7:68:23:a3:6f:91:ac:f7:33:d4:
4b:ff:51:d0:db:3b:fb:7d:03:27:6d:f5:26:73:90:dd:52:a2:
04:d7:97:2c:2a:a0:c9:0d:7a:70:db:c9:33:1f:a6:5d:ff:6a:
a0:62:fc:aa:39:31:80:61:11:da:3a:d0:f6:1f:e0:21:1b:11:
12:f3:86:05:80:b6:f0:61:88:a8:34:1e:41:c7:d7:60:11:d3:
4e:01:1e:f3:f6:78:6f:2b:e3:b3:ee:cb:2f:8f:68:da:6a:18:
1b:ba:5d:6e:1d:b4:e8:51:10:38:52:40:31:40:ba:e8:bb:cb:
29:7a:1b:a0:b8:d0:12:b8:f9:ad:f8:a1:44:9a:df:5d:e7:60:
5a:74:ff:09:24:e5:56:c8:ab:c6:37:d3:82:ff:9f:ee:50:e6:
61:63:bb:bc:ed:9f:a3:8c:2a:34:ea:13:f9:e4:32:50:07:87:
dd:c3:0d:da:99:c5:09:39:42:3f:72:f4:39:86:86:21:ce:17:
4e:e9:9d:ec:e0:e3:9f:fe:ff:d2:92:d4:d2:f5:6f:4b:0f:e2:
49:2c:b0:65:98:97:eb:37:4d:66:f6:7d:22:aa:c6:5f:88:08:
91:6d:ac:b3:db:d0:b7:ea:1a:ea:c4:57:79:b1:fb:3e:b6:4e:
ee:04:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:12 2025 by rpki-client