Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tzT1pF52-ETBeE4CxOv4Wj09KoQ.roa
File: tzT1pF52-ETBeE4CxOv4Wj09KoQ.roa (raw, json)
Hash identifier: RG4Yb/UhUy6nYitZiUCbCUIaKV0lRMnx/9lX2j83AF0=
Subject key identifier: B7:34:F5:A4:5E:76:F8:44:C1:78:4E:02:C4:EB:F8:5A:3D:3D:2A:84
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0191C8C0D6CA187FB30DC416F3DCFC468D71
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tzT1pF52-ETBeE4CxOv4Wj09KoQ.roa
Signing time: Fri 06 Sep 2024 19:12:46 +0000
ROA not before: Fri 06 Sep 2024 19:12:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c8:c0:d6:ca:18:7f:b3:0d:c4:16:f3:dc:fc:46:8d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 6 19:12:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b734f5a45e76f844c1784e02c4ebf85a3d3d2a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:f7:7f:30:85:b5:b7:ef:ab:46:47:ca:e6:
de:3a:69:17:38:11:62:ce:2e:0f:bb:42:f1:75:25:
72:5a:bc:88:6b:76:11:7b:af:5f:3e:5f:b8:16:b6:
5c:c2:3b:01:cb:96:cf:33:cd:f2:73:2e:0c:19:b3:
20:d7:d6:a3:ed:c8:ee:ce:de:59:f8:66:d6:8c:f4:
8a:8c:2a:56:fb:d5:e4:d0:4c:67:e3:f8:87:27:d9:
b9:a6:07:e3:d1:a7:f7:f1:95:94:e2:b4:4e:57:bb:
86:9e:13:62:fd:97:3f:71:a2:b8:4c:f4:49:ab:73:
ba:c3:2c:4c:fd:41:e4:d0:bc:3f:98:5d:6d:56:5c:
8f:c8:ef:96:4b:da:31:f5:05:e3:8e:c6:60:9a:31:
51:83:e1:0e:c6:48:ce:16:5d:15:64:cf:53:be:4d:
8f:84:cf:dd:6f:f1:e0:c4:06:11:7c:d4:35:13:f2:
c3:ca:9e:17:38:ed:d7:b4:79:9a:27:75:51:87:ee:
1a:fb:fa:2d:b5:3b:22:4e:8c:0f:a3:e7:a7:49:97:
70:dd:3b:1d:c8:0d:19:bf:39:67:bd:87:97:e5:b4:
9b:4a:bd:ca:21:07:ec:b5:bd:30:ed:5f:38:d5:bc:
f3:cf:73:56:d9:3b:b0:bb:8d:2b:bf:eb:79:3d:3b:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:34:F5:A4:5E:76:F8:44:C1:78:4E:02:C4:EB:F8:5A:3D:3D:2A:84
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tzT1pF52-ETBeE4CxOv4Wj09KoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
103.41.44.0/22
103.63.28.0/22
103.71.61.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
65:4b:ab:6e:a5:c8:a6:20:2a:fa:2f:1e:26:fb:b3:59:68:b4:
99:5a:58:33:bd:6f:6e:e5:25:3a:48:e2:06:e9:43:22:a6:16:
2f:96:e4:06:96:60:f9:80:75:72:55:99:58:6e:62:db:7d:ff:
11:75:b0:d3:5a:83:79:1f:ac:89:b7:70:f1:91:cb:db:d1:43:
c9:e3:ec:af:d3:c8:86:85:73:13:1b:84:db:28:8b:8c:60:11:
b1:a3:5a:17:b8:19:6b:bb:59:26:e8:e0:ce:10:07:98:be:e1:
d5:2c:6f:b3:3e:c7:fe:4d:82:0a:f5:4c:c9:7a:61:b6:c8:49:
2d:f0:75:39:af:a9:bf:c5:01:c7:75:32:a1:d1:fb:2e:cc:32:
a6:ea:4e:90:61:fd:b4:2d:a5:e3:c8:54:7d:3a:a4:34:ac:b1:
a9:a6:4b:94:57:68:5d:9c:7c:a7:ee:7a:42:cf:57:fa:0e:5a:
8f:87:d5:8c:2b:7c:ca:4c:1a:ef:85:b0:de:e1:46:81:e9:08:
52:93:06:8d:9f:14:e7:72:14:fd:81:8c:50:c0:cc:94:9d:21:
53:f6:2d:a5:76:1f:14:4d:88:5b:db:8b:b9:bc:3a:3d:86:63:
87:fa:43:02:cb:93:84:f7:02:cb:63:67:32:26:22:d3:d0:2c:
43:7a:db:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:58 2025 by rpki-client