Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/ECD7apX3eHOOfrh7KlF7PFjYZG4.roa
File: ECD7apX3eHOOfrh7KlF7PFjYZG4.roa (raw, json)
Hash identifier: 71V9g38SO7JBAaQym2ThymDLgJtxxyPJi6oj0bVn0zY=
Subject key identifier: 10:20:FB:6A:95:F7:78:73:8E:7E:B8:7B:2A:51:7B:3C:58:D8:64:6E
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 019425FD992A5E287B343B5B5BABEB57D51A
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/ECD7apX3eHOOfrh7KlF7PFjYZG4.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59869
IP address blocks: 45.84.132.0/22 maxlen: 22
81.22.176.0/20 maxlen: 20
178.22.224.0/21 maxlen: 21
2a07:ed80::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:99:2a:5e:28:7b:34:3b:5b:5b:ab:eb:57:d5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1020fb6a95f778738e7eb87b2a517b3c58d8646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:23:80:9b:ac:da:bb:e3:4b:de:48:d4:65:
6a:86:60:6c:cf:3f:b2:a7:47:01:14:a1:9e:24:50:
ee:d1:86:20:75:a8:99:c9:64:a7:8d:2c:1a:50:02:
af:12:36:2b:56:05:56:1b:7f:63:fa:c8:7f:0b:50:
41:20:73:0a:f2:e4:fb:58:45:46:1a:34:22:96:09:
e0:91:59:11:ca:a8:be:a2:c2:c4:1c:47:78:73:83:
7d:00:74:fe:5e:aa:4e:ad:a9:0b:2d:6e:c3:b8:cf:
68:e2:e3:6f:73:8e:bd:00:9e:e5:67:a5:cc:a6:b3:
62:a0:25:4e:05:0a:e1:9f:fd:52:94:84:f2:ea:b6:
d6:90:e8:b9:f0:b5:7d:ee:1d:34:24:9a:c5:f4:4f:
53:84:5f:c0:16:36:07:5b:70:b0:a8:7e:ac:67:b3:
39:15:7f:8e:44:ab:25:41:13:7b:bd:bf:76:5a:ad:
71:79:cf:c0:7f:48:4b:fe:ee:95:87:3d:99:dc:24:
27:fd:65:0d:83:67:1e:c6:7a:ac:dd:b2:c9:fd:22:
96:46:b3:e5:8a:08:0a:a1:ea:75:eb:74:24:56:60:
05:fd:86:1f:2e:6c:16:e6:d2:d6:58:7a:ad:a0:f5:
a7:d5:d6:86:d1:b1:ac:cb:9f:54:27:0d:b8:d9:f2:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:FB:6A:95:F7:78:73:8E:7E:B8:7B:2A:51:7B:3C:58:D8:64:6E
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/ECD7apX3eHOOfrh7KlF7PFjYZG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.132.0/22
81.22.176.0/20
178.22.224.0/21
IPv6:
2a07:ed80::/32
Signature Algorithm: sha256WithRSAEncryption
78:8d:67:1d:52:c4:de:85:09:98:e1:73:63:9a:13:a5:47:61:
71:ed:5a:19:dc:e5:2a:12:92:3a:f8:d7:1c:06:13:a3:79:fa:
90:e4:40:7d:75:89:a0:84:c4:c3:56:48:67:d2:55:39:35:1c:
f6:99:03:da:86:64:d2:f5:97:a5:3d:e0:82:b5:cc:ef:41:82:
95:ec:05:66:ec:68:65:a6:fd:f3:43:e9:62:57:32:00:f2:7a:
1f:54:4c:0a:85:f8:d0:2a:a2:08:c1:a7:f1:d4:aa:56:de:af:
8d:2c:75:24:f6:59:1d:e7:89:dc:e3:1f:b7:04:90:e6:dc:68:
ec:c1:1e:c3:c3:17:6d:2f:67:d3:cb:f9:0c:6d:2d:2f:cd:18:
bc:ab:99:2a:9c:77:ee:32:82:7b:0a:ef:57:44:68:27:a3:78:
b7:0d:11:07:dc:f5:65:69:27:9b:e9:bc:25:72:de:86:18:86:
05:a7:51:0e:b2:9f:2a:54:a2:a5:23:31:dc:1c:68:39:74:a7:
8f:ca:ba:af:8b:57:e4:16:67:82:c9:4c:89:4e:c7:18:c2:d7:
35:fc:b6:70:c9:bc:48:cf:91:bc:58:2b:39:06:a4:8f:56:31:
ff:3d:79:50:73:09:de:b4:e3:4c:d8:75:56:aa:a4:5e:6f:1c:
ab:3e:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:29:36 2025 by rpki-client