Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VrdP5GYiSE7rlKxpZRBZ_rj8KaI.roa
File: VrdP5GYiSE7rlKxpZRBZ_rj8KaI.roa (raw, json)
Hash identifier: Cjk1bo7GWWPxH/N1PnTFaLRpfZH9VVaoT1lNfOm6n+Y=
Subject key identifier: 56:B7:4F:E4:66:22:48:4E:EB:94:AC:69:65:10:59:FE:B8:FC:29:A2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01919EE7E39BA117A725BDA33899B4231CBE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VrdP5GYiSE7rlKxpZRBZ_rj8KaI.roa
Signing time: Thu 29 Aug 2024 16:11:22 +0000
ROA not before: Thu 29 Aug 2024 16:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
45.151.140.0/22 maxlen: 22
77.111.96.0/20 maxlen: 20
85.208.8.0/22 maxlen: 22
94.229.208.0/20 maxlen: 24
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.36.32.0/22 maxlen: 24
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:e7:e3:9b:a1:17:a7:25:bd:a3:38:99:b4:23:1c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 29 16:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56b74fe46622484eeb94ac69651059feb8fc29a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:df:6a:91:62:ec:31:c6:29:5b:1a:e5:0a:
c8:bf:7b:26:62:c3:48:3e:9b:38:06:d9:7e:87:74:
4a:17:b2:7d:b9:f5:d5:e1:50:7d:21:8a:0c:ce:44:
db:64:49:0c:23:c5:02:c7:3c:7a:6e:f6:88:02:17:
be:46:ea:70:93:c7:71:4d:76:57:d5:02:41:29:6f:
48:3c:21:af:e7:98:40:d1:11:84:69:ef:ed:73:7f:
b9:d6:45:4c:53:2c:86:14:ff:b9:36:50:d7:e1:09:
c4:e1:02:e6:4e:00:b2:68:ea:78:b5:eb:06:a8:ef:
89:e7:86:f5:8d:4c:f0:34:a0:45:a0:df:b9:c3:97:
16:33:1d:1c:2d:c9:09:3a:bb:45:0d:d7:e0:e8:5f:
16:79:f1:aa:2c:87:2a:b7:49:5b:8a:1f:ed:e2:d3:
af:6b:f7:7e:30:82:4e:07:fb:4f:b1:e0:3e:fc:46:
81:10:3d:23:cb:b0:02:73:e3:88:c2:41:c0:ab:20:
8f:7b:9c:84:9f:2f:f3:d6:ca:d2:70:8e:f9:ad:e2:
d5:18:2d:24:d0:5f:4c:9e:2f:3a:1a:27:6c:8a:a6:
f3:ed:37:57:e3:46:3e:b4:ac:bb:85:cb:77:dd:87:
90:72:8b:00:aa:23:e9:88:09:75:7e:75:8f:dd:41:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:4F:E4:66:22:48:4E:EB:94:AC:69:65:10:59:FE:B8:FC:29:A2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VrdP5GYiSE7rlKxpZRBZ_rj8KaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
45.151.140.0/22
77.111.96.0/20
85.208.8.0/22
94.229.208.0/20
103.41.44.0/22
103.63.28.0/22
103.71.61.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.36.32.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
ac:d8:80:49:a8:0e:05:80:0b:9b:7f:e4:8c:e8:57:a2:27:b1:
bd:64:68:6c:2b:4c:84:ed:92:b1:df:bf:98:56:cf:50:d8:a5:
d9:52:62:45:cc:fe:0a:51:22:37:d4:f1:35:6e:f8:cf:6a:4f:
57:aa:4b:32:8b:88:12:38:4e:d9:91:3e:4c:c1:2e:dc:80:d2:
4e:4c:f8:e7:0c:b0:83:90:6e:13:e4:a2:b8:6c:1e:1a:5f:77:
86:04:f6:6a:08:39:ae:c3:51:a8:f3:59:e9:0f:0e:c3:29:14:
02:37:d9:d1:f3:2c:19:4a:9b:ce:1b:e7:47:7c:42:78:44:d1:
86:91:5f:c6:33:b5:55:87:0f:44:5d:1e:e9:7a:b6:a5:b2:6a:
a5:c3:fb:5d:53:fb:34:4a:b1:7f:d2:12:8c:cf:fc:d0:0c:55:
88:83:fa:5f:cb:2e:9d:72:a9:b4:9c:1a:c0:9a:58:94:be:d3:
fa:be:1e:2c:0f:01:bb:61:99:a3:fa:97:c9:87:65:49:ba:6d:
03:0d:1a:c4:36:87:5c:0d:2b:8f:7e:72:ee:8c:a4:a2:c7:a5:
a7:e0:b6:89:57:66:80:d7:51:9d:0a:d5:aa:48:08:48:3e:31:
89:23:3e:4b:db:36:6e:72:64:d8:61:5d:7a:00:83:b9:90:5c:
b5:0f:40:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:20 2025 by rpki-client