Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/0mKnnBxNDPUWW0TdKD82TEOVdS4.roa
File: 0mKnnBxNDPUWW0TdKD82TEOVdS4.roa (raw, json)
Hash identifier: Lo4k+eo1K7P5fia7s3jKfkvAW4fzukEV2ibTeSf86Xg=
Subject key identifier: D2:62:A7:9C:1C:4D:0C:F5:16:5B:44:DD:28:3F:36:4C:43:95:75:2E
Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial: 019424B3FF15959524B510AEAA3BD9B40F86
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/0mKnnBxNDPUWW0TdKD82TEOVdS4.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34779
IP address blocks: 46.248.64.0/19 maxlen: 19
84.255.192.0/18 maxlen: 18
84.255.209.0/24 maxlen: 24
84.255.210.0/24 maxlen: 24
89.212.0.0/18 maxlen: 18
89.212.23.160/27 maxlen: 27
89.212.64.0/18 maxlen: 18
89.212.128.0/18 maxlen: 18
89.212.192.0/18 maxlen: 18
89.233.112.0/20 maxlen: 20
91.246.224.0/19 maxlen: 19
93.103.0.0/19 maxlen: 19
93.103.32.0/19 maxlen: 19
93.103.64.0/19 maxlen: 19
93.103.96.0/19 maxlen: 19
93.103.128.0/19 maxlen: 19
93.103.160.0/19 maxlen: 19
93.103.192.0/19 maxlen: 19
93.103.224.0/19 maxlen: 19
119.12.128.0/20 maxlen: 20
185.49.116.0/22 maxlen: 22
185.179.48.0/22 maxlen: 22
188.159.224.0/19 maxlen: 19
188.230.128.0/19 maxlen: 19
188.230.160.0/19 maxlen: 19
188.230.192.0/19 maxlen: 19
188.230.224.0/19 maxlen: 19
193.138.32.0/19 maxlen: 24
194.28.108.0/22 maxlen: 22
2a01:260::/32 maxlen: 32
2a01:261::/32 maxlen: 32
2a01:262::/32 maxlen: 32
2a01:263::/32 maxlen: 32
2a01:264::/32 maxlen: 32
2a01:265::/32 maxlen: 32
2a01:266::/32 maxlen: 32
2a01:267::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ff:15:95:95:24:b5:10:ae:aa:3b:d9:b4:0f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d262a79c1c4d0cf5165b44dd283f364c4395752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:a3:50:45:b4:71:30:be:0e:7d:8c:ae:a8:
0c:29:01:3b:dc:ff:6a:5c:1a:dc:0e:77:ee:b8:ae:
e8:fe:06:ae:e1:af:b0:4c:70:a1:d0:6b:15:fe:96:
8e:36:e6:a6:7f:6b:86:12:78:6e:59:6a:4e:d9:a5:
91:4e:52:a3:5b:a7:3a:a7:01:31:a8:2e:7c:58:24:
01:33:70:ea:9c:ed:ca:5f:b4:b5:1d:49:cb:13:ef:
03:11:29:bc:92:48:0d:99:10:ca:1b:a4:be:41:78:
5f:6a:42:38:0a:3a:e8:f3:9b:1c:59:7e:47:6f:91:
ad:c4:ae:c5:4e:eb:3c:15:ce:cd:6c:cd:94:e8:eb:
32:b0:3c:37:4e:6c:5d:3e:91:9a:46:15:fe:df:c7:
93:15:5b:e0:23:7c:ed:eb:de:09:f4:b6:c1:d9:a6:
33:c9:ac:4c:42:37:d3:9d:cb:ee:7b:ba:ab:8e:24:
78:f6:e6:f6:0d:a4:f3:43:e4:63:69:78:ae:47:ba:
d5:cb:7a:a6:eb:27:31:75:24:d2:d4:fc:4d:1e:d0:
de:c0:99:c9:a2:0d:cd:13:88:85:b9:6b:65:26:61:
7d:7b:b5:92:c3:40:1a:e0:fb:fd:2b:d3:02:ab:c5:
64:3a:98:32:bf:77:8f:55:c3:d3:8c:75:55:13:03:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:62:A7:9C:1C:4D:0C:F5:16:5B:44:DD:28:3F:36:4C:43:95:75:2E
X509v3 Authority Key Identifier:
keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/0mKnnBxNDPUWW0TdKD82TEOVdS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.64.0/19
84.255.192.0/18
89.212.0.0/16
89.233.112.0/20
91.246.224.0/19
93.103.0.0/16
119.12.128.0/20
185.49.116.0/22
185.179.48.0/22
188.159.224.0/19
188.230.128.0/17
193.138.32.0/19
194.28.108.0/22
IPv6:
2a01:260::/29
Signature Algorithm: sha256WithRSAEncryption
05:16:36:4e:9e:a2:ef:fb:9c:a1:e5:d0:82:a6:db:4e:1f:f9:
a4:3c:20:43:6c:8f:62:8b:12:83:12:8b:4b:d8:e4:9c:df:2b:
35:75:74:19:d4:fc:e9:53:c9:6b:f7:de:b0:1c:1e:a8:4f:36:
17:4f:02:a7:c7:80:34:fb:f0:16:ac:fb:c9:6e:96:73:23:8c:
3d:92:df:83:ab:e9:8c:97:93:7d:46:22:59:53:ce:0a:cb:38:
67:96:11:b5:ab:09:21:5e:cf:b2:a7:01:33:d0:b7:f4:5d:07:
5f:56:cf:58:86:e8:ad:23:f0:53:4e:ac:2f:e8:40:f1:de:74:
e4:d7:4d:12:98:b3:c4:09:57:89:4d:67:6e:64:fb:99:45:29:
8c:50:19:9e:a2:4d:46:53:16:ca:aa:72:6b:48:46:9f:3b:29:
ad:88:c6:e4:23:85:85:2d:dc:d6:10:2a:19:ef:47:37:c4:0e:
55:12:f3:fe:d6:b8:c5:d5:d8:21:f1:ea:ac:99:36:80:5a:7f:
a7:3f:f7:33:cd:f9:f5:1e:f6:53:e4:30:f6:4a:fb:b0:16:fa:
12:02:5e:47:17:01:16:84:bd:a7:5a:ab:b3:8d:ca:90:52:05:
d5:02:14:94:70:ed:20:3e:87:53:70:f7:1a:08:9c:da:40:e7:
24:4d:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:41 2025 by rpki-client