Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/SCt2QF1ZyfGumaW10dxyBcs0tjI.roa
File: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (raw, json)
Hash identifier: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=
Subject key identifier: 48:2B:76:40:5D:59:C9:F1:AE:99:A5:B5:D1:DC:72:05:CB:34:B6:32
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 01941F8CA3776E569E6C4567025B69BC48F5
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/SCt2QF1ZyfGumaW10dxyBcs0tjI.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207187
IP address blocks: 45.130.248.0/22 maxlen: 22
185.163.180.0/22 maxlen: 24
213.194.212.0/22 maxlen: 22
213.194.216.0/21 maxlen: 21
213.194.224.0/19 maxlen: 19
2a0a:1c00::/29 maxlen: 29
2a0e:59c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a3:77:6e:56:9e:6c:45:67:02:5b:69:bc:48:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=482b76405d59c9f1ae99a5b5d1dc7205cb34b632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:8e:74:51:9e:c0:42:90:87:46:a1:85:77:
9f:90:75:75:b3:13:d0:06:45:02:e2:7e:ea:0b:2d:
05:e3:17:56:0b:a0:01:ca:46:9e:02:22:c3:79:c0:
77:35:9e:39:8c:29:cc:54:f1:bc:7e:99:29:0b:de:
3a:b3:54:2f:8d:3a:1e:4c:32:d9:37:c0:dc:3a:f8:
3c:42:d1:c1:6a:9f:80:f2:9f:07:f3:17:72:99:26:
e7:33:b0:5b:73:bd:05:f5:92:e3:86:16:45:ba:21:
b2:04:0f:9a:60:ba:10:dd:d9:5e:be:75:ba:ec:2f:
27:16:08:fc:93:9c:41:25:29:1a:73:b1:73:b7:2f:
9c:9a:80:20:db:35:d6:f3:66:a2:71:78:7e:02:89:
60:fb:d2:7b:17:3b:6d:6f:65:7d:03:cb:dc:ba:0b:
4e:63:da:3c:08:08:19:d5:e1:38:15:22:8e:53:73:
eb:ff:19:9c:97:10:b0:ef:47:e8:d4:83:e6:2b:8c:
9b:f7:3b:08:28:3a:e7:c6:b8:97:23:36:a5:2a:5e:
f6:d0:d3:f0:dd:db:fb:f1:ad:8f:eb:b5:f6:47:88:
fc:3f:e6:a2:ef:33:81:dc:98:59:12:e8:eb:23:de:
e8:a1:c4:8e:77:d5:63:11:f2:aa:b4:e7:50:e5:18:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2B:76:40:5D:59:C9:F1:AE:99:A5:B5:D1:DC:72:05:CB:34:B6:32
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/SCt2QF1ZyfGumaW10dxyBcs0tjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.248.0/22
185.163.180.0/22
213.194.212.0-213.194.255.255
IPv6:
2a0a:1c00::/29
2a0e:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:f8:86:05:df:75:db:76:38:66:e6:2e:d3:1a:87:a5:5b:49:
93:59:9f:fa:ed:f1:87:a9:97:cf:34:81:76:bd:28:44:94:03:
18:a3:04:bf:0a:53:62:cf:44:2d:c2:00:7e:f2:83:05:bf:6b:
e4:c5:b4:14:72:7c:d8:ed:84:4f:d7:18:c7:d1:81:dc:8e:1f:
db:1b:61:9d:98:3d:16:5e:58:41:af:47:25:fa:54:ae:bf:f1:
9e:0d:a2:b6:7b:21:c8:c9:9c:7c:1b:68:c7:09:28:bd:02:33:
67:2d:42:f8:b5:b2:f0:9d:66:12:16:d1:1f:9a:9b:6a:3a:65:
5d:31:c2:24:49:74:62:e2:39:24:48:16:8b:be:66:d8:e6:96:
af:c8:45:dd:6d:e4:52:af:fc:98:2f:7e:77:52:38:d3:0f:db:
15:51:64:b2:5e:67:68:cb:c1:d0:87:a7:75:67:b4:03:40:e9:
4b:17:29:0f:6e:b5:b1:76:a3:1c:18:74:80:a5:ee:52:e0:d7:
ed:ce:fb:8e:6b:1f:6b:ef:11:b9:86:76:11:03:71:cb:4a:45:
75:b0:9d:9a:3e:c4:24:73:70:cb:7a:ed:85:b4:c6:d9:c3:14:
0c:cb:32:6c:7a:66:65:9e:b4:1b:f7:76:6a:db:e9:2b:f9:a2:
5c:14:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:18 2025 by rpki-client