Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/dxHid3kRbASAECEnh9d4Ij9Pjn8.roa
File: dxHid3kRbASAECEnh9d4Ij9Pjn8.roa (raw, json)
Hash identifier: hA/qbCozLwOdZinJWqHaoW+MiySJtIFZ65wKSnBBsUs=
Subject key identifier: 77:11:E2:77:79:11:6C:04:80:10:21:27:87:D7:78:22:3F:4F:8E:7F
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 0193F370A0FC44B88D1DEBCB6BC966ED51B5
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/dxHid3kRbASAECEnh9d4Ij9Pjn8.roa
Signing time: Mon 23 Dec 2024 12:14:24 +0000
ROA not before: Mon 23 Dec 2024 12:14:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8529
IP address blocks: 82.178.32.0/24 maxlen: 24
82.178.33.0/24 maxlen: 24
82.178.158.0/23 maxlen: 23
82.178.158.0/24 maxlen: 24
82.178.159.0/24 maxlen: 24
134.0.216.0/22 maxlen: 24
134.0.220.0/22 maxlen: 24
151.248.96.0/20 maxlen: 24
185.200.124.0/24 maxlen: 24
185.200.125.0/24 maxlen: 24
185.201.192.0/22 maxlen: 24
213.202.0.0/21 maxlen: 24
2a02:f040::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:70:a0:fc:44:b8:8d:1d:eb:cb:6b:c9:66:ed:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Dec 23 12:14:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7711e27779116c048010212787d778223f4f8e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:33:57:78:26:0f:06:ef:d8:16:f8:df:59:
63:eb:07:36:2e:4b:38:3f:7a:14:a8:46:bd:fc:83:
dd:03:d1:ce:80:e9:c1:74:0c:ad:57:8c:08:cb:ef:
25:dd:f0:07:e5:ac:b6:51:19:19:e4:55:d0:b4:5a:
ac:29:7f:b6:1f:2e:b0:ca:a3:88:16:08:7b:33:94:
8b:4c:c9:c6:1d:3f:8f:06:37:71:d1:36:0f:37:9f:
33:22:3e:ff:5d:31:78:fd:b1:5f:c5:44:5a:f5:de:
86:0d:8f:be:63:8d:4e:25:f6:7c:8e:d5:80:db:c2:
2d:2e:ca:b6:0b:d4:ee:fc:35:1e:1c:18:a4:12:55:
55:2a:57:bc:cc:15:ea:47:a9:5a:44:dc:c8:45:ef:
31:b2:d3:1f:d2:fb:54:13:5d:92:37:3d:e0:d0:13:
98:b5:3f:9e:7b:b1:78:0f:9a:ca:85:8c:29:2c:9f:
f5:5d:a6:b4:f9:21:03:46:6d:8b:dd:1d:dc:7d:2f:
59:c5:bf:d7:41:89:9f:22:5b:aa:b2:1a:08:37:80:
98:57:fb:13:73:50:65:e8:f9:06:31:4e:ab:19:f8:
52:fd:70:78:dc:2c:96:e7:30:32:74:f3:a3:7c:fc:
8c:2f:15:24:ac:88:03:78:d9:48:33:30:f0:7b:b9:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:E2:77:79:11:6C:04:80:10:21:27:87:D7:78:22:3F:4F:8E:7F
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/dxHid3kRbASAECEnh9d4Ij9Pjn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.178.32.0/23
82.178.158.0/23
134.0.216.0/21
151.248.96.0/20
185.200.124.0/23
185.201.192.0/22
213.202.0.0/21
IPv6:
2a02:f040::/29
Signature Algorithm: sha256WithRSAEncryption
20:e7:df:7c:17:6f:af:41:a7:f0:b2:02:fd:04:b3:c7:e0:0b:
08:ac:f4:ac:c7:56:58:d6:d3:38:5e:d9:51:3a:ec:0c:45:f3:
bf:8c:a2:f6:5e:c0:0f:2d:9c:41:3b:5e:2c:d1:78:a3:9e:19:
65:56:e6:03:b0:9a:0f:27:f7:e3:c2:9b:65:ef:84:70:0b:e5:
7a:d6:11:de:f9:87:45:14:9e:4c:46:1d:01:45:bc:d0:e0:87:
b4:83:f3:4e:d0:54:e6:82:45:7b:cd:fe:59:c3:ee:2e:ab:f9:
0c:dc:b7:46:b2:fc:7b:f5:b9:69:14:57:c2:1c:e1:80:6f:f9:
f8:08:2e:c3:25:91:e0:50:57:cd:ff:73:19:ae:05:93:6a:67:
53:5e:30:79:6c:dd:9d:70:da:04:7c:8a:58:72:bb:3d:55:65:
78:28:9b:73:0f:9e:3a:cb:f0:6a:35:24:c4:8c:d0:90:43:c3:
10:e1:89:b7:77:f4:5c:a5:c1:d1:2a:16:13:8f:7f:6b:b9:8d:
50:16:c6:0f:09:41:31:48:9b:04:74:f4:b5:c1:ed:c9:3b:92:
2b:d4:ef:e8:4a:78:32:7a:26:eb:18:ae:8a:6d:33:c1:ca:c0:
0b:80:f3:70:8a:b7:38:bb:c8:c3:b2:17:29:26:0f:e9:2b:a7:
5b:8b:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:05:37 2025 by rpki-client