Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zPMuamLymSt_ejouSJ6sBxiRKP8.roa
File: zPMuamLymSt_ejouSJ6sBxiRKP8.roa (raw, json)
Hash identifier: o6jDK5879aLW4h06FM6LZU6Jmqdy0Oh2nHgRykTC/uc=
Subject key identifier: CC:F3:2E:6A:62:F2:99:2B:7F:7A:3A:2E:48:9E:AC:07:18:91:28:FF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422201548E14E58F9FCABD99F42788284
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zPMuamLymSt_ejouSJ6sBxiRKP8.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 45.151.143.0/24 maxlen: 24
85.208.11.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.214.0/24 maxlen: 24
94.229.215.0/24 maxlen: 24
94.229.216.0/24 maxlen: 24
94.229.217.0/24 maxlen: 24
94.229.218.0/24 maxlen: 24
94.229.219.0/24 maxlen: 24
194.36.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:15:48:e1:4e:58:f9:fc:ab:d9:9f:42:78:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccf32e6a62f2992b7f7a3a2e489eac07189128ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:d3:88:e9:93:f0:b3:f3:2a:06:10:53:5b:
e9:51:d9:ad:0f:ab:fa:de:a8:92:d5:da:a6:8c:d7:
18:e8:a7:09:cd:dc:63:fd:8b:60:90:01:57:8d:4d:
16:be:be:7f:a1:be:9e:8a:dc:b7:5a:34:7d:cc:03:
60:6e:85:ce:f3:db:fc:15:f0:86:f1:f6:e4:1f:53:
41:62:a2:48:08:05:68:7d:6a:97:01:db:60:10:da:
b9:03:f5:e3:07:32:6f:0d:95:d5:bf:67:df:49:07:
e4:90:a3:33:aa:84:ee:c4:c2:7c:ab:03:6a:1b:40:
82:01:70:12:ee:26:6c:97:0e:2f:62:6a:6b:53:fb:
93:d5:d9:f5:63:ea:b0:a1:ba:f4:16:c9:2b:4f:09:
7d:b4:cc:73:6e:f0:c1:46:5e:9c:ce:86:14:41:b1:
bf:e6:4a:e5:f5:2e:8e:ee:cc:62:b4:59:87:1f:d9:
e8:fe:37:64:09:e7:dc:78:28:cd:10:e9:65:bf:e9:
a0:19:ea:da:f5:cd:c2:0b:54:0a:87:01:99:2a:eb:
5b:6a:db:e5:3d:21:13:7e:cd:58:b2:cc:14:1e:72:
89:f8:ec:f8:e4:a4:3f:89:81:f3:1f:a1:9b:0e:c4:
69:91:cc:50:12:76:c3:5d:c3:9a:92:4a:88:69:61:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:2E:6A:62:F2:99:2B:7F:7A:3A:2E:48:9E:AC:07:18:91:28:FF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zPMuamLymSt_ejouSJ6sBxiRKP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.143.0/24
85.208.11.0/24
94.229.212.0/24
94.229.214.0-94.229.219.255
194.36.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:02:d9:09:c4:9a:ef:81:df:f9:9d:89:60:6c:4d:da:0e:15:
98:51:69:77:74:00:4c:dd:6b:c9:3a:f6:33:c4:c0:f4:c1:8e:
50:bc:30:5a:6a:b0:b4:af:2a:0c:c2:08:8f:3a:87:95:28:ea:
ed:22:45:c5:de:f6:08:37:0b:0b:27:88:54:f7:6b:f7:9b:fe:
5c:34:26:34:b8:b4:90:65:4c:e5:17:14:c3:f0:06:81:0e:9f:
2f:bb:1a:b6:a4:13:e4:1c:82:bc:dc:a9:30:4d:63:91:c2:13:
09:fd:bf:5b:7b:cf:82:11:f2:9e:f4:6a:0a:34:9f:9e:7d:69:
87:f0:60:5a:a6:11:7d:3c:d0:2d:0d:94:a2:06:0f:0d:e0:00:
9a:d6:d3:bc:a2:08:ad:e3:44:40:d0:32:95:e9:ce:e4:d4:3f:
36:84:84:4f:85:16:2a:da:8c:7b:e5:c0:1e:f6:37:da:68:26:
5b:9b:d4:55:ea:1d:93:ae:e7:3b:56:11:5f:53:d9:31:22:3d:
ea:6e:50:81:68:cd:a9:a3:fd:c4:ec:6f:39:ed:31:d3:26:9a:
2b:08:24:9a:a6:4c:c6:45:cb:fc:da:1d:42:18:36:71:c2:78:
20:59:7a:ba:9e:03:36:25:c1:93:62:6f:e5:5e:f2:f0:e1:a3:
61:c7:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:06 2025 by rpki-client