Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bbd4c4-d2cd-41b7-9a4a-855169842eac/1/ixu7E_TFTVtbkz8Yu4AEHkFe8rY.roa
File: ixu7E_TFTVtbkz8Yu4AEHkFe8rY.roa (raw, json)
Hash identifier: +9tK/PqYpk1K0YJujTD+D+U3XUwIkI4/bQUPBbMtEL0=
Subject key identifier: 8B:1B:BB:13:F4:C5:4D:5B:5B:93:3F:18:BB:80:04:1E:41:5E:F2:B6
Certificate issuer: /CN=fde59773d5e03870c87d57090976fb33b03c685e
Certificate serial: 9EA105
Authority key identifier: FD:E5:97:73:D5:E0:38:70:C8:7D:57:09:09:76:FB:33:B0:3C:68:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eWXc9XgOHDIfVcJCXb7M7A8aF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bbd4c4-d2cd-41b7-9a4a-855169842eac/1/ixu7E_TFTVtbkz8Yu4AEHkFe8rY.roa
Signing time: Sat 01 Jan 2022 06:53:56 +0000
ROA not before: Sat 01 Jan 2022 06:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30889
IP address blocks: 195.214.240.0/21 maxlen: 24
45.145.124.0/22 maxlen: 24
185.172.16.0/22 maxlen: 24
194.177.32.0/19 maxlen: 24
185.95.120.0/22 maxlen: 24
185.196.248.0/22 maxlen: 24
185.15.128.0/22 maxlen: 24
193.27.194.0/23 maxlen: 24
185.149.8.0/22 maxlen: 24
2a01:6d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10395909 (0x9ea105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde59773d5e03870c87d57090976fb33b03c685e
Validity
Not Before: Jan 1 06:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b1bbb13f4c54d5b5b933f18bb80041e415ef2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:a4:38:05:af:16:de:46:dd:7a:a0:51:03:
ab:44:1b:20:e7:52:2b:d1:7b:cd:95:33:d1:b1:b1:
d7:c1:3f:07:3d:32:eb:42:6b:4a:d0:8d:18:f0:38:
7a:75:7a:fe:0a:49:3b:75:b7:e0:a9:3c:dd:30:c1:
97:5c:0a:e3:47:cd:51:50:da:70:bd:85:1f:be:4f:
b2:89:b4:36:54:5f:d5:67:09:66:58:5b:d9:5d:f9:
c2:2e:f4:7a:b0:5a:6c:28:4d:25:80:87:96:d3:9a:
be:f7:d9:91:f4:7e:f8:57:a2:2c:92:de:c1:03:22:
5d:aa:18:66:2c:10:10:6a:64:cb:09:5c:67:78:fa:
17:2e:29:4f:79:07:08:8c:6b:79:30:d5:3e:86:c0:
79:af:61:57:9a:32:0e:7c:73:34:8a:bc:85:39:8d:
c2:f8:71:da:f9:87:3b:24:cd:04:bd:34:ce:e2:e9:
de:ad:2f:54:fc:a3:66:66:74:3b:31:91:1b:df:35:
fe:bf:d5:ba:e2:df:97:19:47:76:5c:a8:6c:25:fe:
77:b3:7b:99:d8:fe:d5:88:15:4e:50:52:b1:1c:ce:
90:9f:b3:57:2f:76:9f:53:54:b6:2c:9e:9d:38:64:
e5:71:01:ea:02:ba:cf:4e:09:66:4f:29:7c:b0:90:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:BB:13:F4:C5:4D:5B:5B:93:3F:18:BB:80:04:1E:41:5E:F2:B6
X509v3 Authority Key Identifier:
keyid:FD:E5:97:73:D5:E0:38:70:C8:7D:57:09:09:76:FB:33:B0:3C:68:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eWXc9XgOHDIfVcJCXb7M7A8aF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bbd4c4-d2cd-41b7-9a4a-855169842eac/1/ixu7E_TFTVtbkz8Yu4AEHkFe8rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bbd4c4-d2cd-41b7-9a4a-855169842eac/1/_eWXc9XgOHDIfVcJCXb7M7A8aF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.124.0/22
185.15.128.0/22
185.95.120.0/22
185.149.8.0/22
185.172.16.0/22
185.196.248.0/22
193.27.194.0/23
194.177.32.0/19
195.214.240.0/21
IPv6:
2a01:6d8::/32
Signature Algorithm: sha256WithRSAEncryption
54:57:8c:49:18:3b:c7:bc:da:d4:90:93:11:fb:15:45:89:07:
5f:54:5d:9d:09:9c:f3:52:ba:b5:ce:3d:6f:a8:05:4e:59:83:
1d:8e:f0:5b:a9:30:95:cc:79:64:c9:8b:69:ab:3b:45:ca:a6:
ac:07:f9:f7:26:6e:9a:89:cd:28:bd:2f:c1:35:1b:e8:3e:33:
7e:b8:dc:d0:25:96:12:e3:96:2e:50:4f:8d:08:3c:d1:db:92:
05:e5:15:6c:ba:b7:cf:67:dd:0b:c7:c3:14:f3:57:ed:d4:8e:
e6:6c:ef:50:da:76:6d:4b:7b:da:59:cb:12:11:62:a9:3e:71:
a6:32:0a:d6:01:ff:38:43:e6:46:3e:0c:c2:af:14:d8:97:7a:
a5:45:41:03:c4:d3:9e:09:a7:2c:60:ba:c2:72:e7:32:b8:88:
df:e6:c8:55:4d:b7:9b:9e:f4:cd:14:22:83:70:ad:03:f7:27:
f9:c1:6c:3b:ef:c2:6e:cf:ec:09:5c:cf:b4:4a:84:55:a2:47:
53:1c:39:4c:ee:51:e3:04:a0:ed:95:9b:fd:83:5d:d6:f7:85:
ad:d1:06:97:65:f4:b1:fb:0d:9a:e7:22:79:9e:8e:c6:9a:fa:
63:15:2d:18:36:ac:17:79:dc:e0:f6:95:5a:7d:8c:26:fe:2c:
80:6b:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:02 2025 by rpki-client