Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa
File: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (raw, json)
Hash identifier: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=
Subject key identifier: 12:B7:03:7B:45:ED:2D:87:7A:77:BB:95:EA:9F:44:2B:37:66:E2:79
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019425FDB5224537194536E24357C7F523A4
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205981
IP address blocks: 45.9.132.0/22 maxlen: 22
45.137.72.0/22 maxlen: 22
185.194.108.0/22 maxlen: 22
185.248.124.0/22 maxlen: 22
212.63.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b5:22:45:37:19:45:36:e2:43:57:c7:f5:23:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12b7037b45ed2d877a77bb95ea9f442b3766e279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:dc:0c:b0:da:b1:c5:cc:26:47:f7:0c:ed:
25:44:fb:e0:ed:56:dc:9c:97:32:76:54:9e:19:b6:
82:e5:a0:10:04:40:37:18:84:58:fe:bc:b0:7b:0a:
30:34:7a:41:d7:59:b5:22:6c:00:b1:2c:04:05:b6:
72:89:22:88:a9:ba:03:44:39:b0:50:d9:1b:52:a8:
b7:49:e4:03:0f:21:56:91:25:29:9c:bd:d9:e1:78:
6c:66:e0:41:74:90:38:15:e1:07:40:13:b9:d2:a8:
88:19:d7:f5:76:2e:c7:ac:60:ac:7d:77:2e:4e:b8:
09:15:98:00:32:ae:a1:1c:19:54:90:43:f7:b0:7c:
b6:cd:ed:77:2a:39:0c:6b:f3:eb:39:c6:85:55:40:
0a:c3:6e:f1:c5:24:53:45:dc:c2:30:c6:a7:c6:b8:
ed:d7:b2:02:89:f3:a8:bc:8b:06:67:dc:c2:62:6f:
29:2a:38:5d:f8:9a:e4:20:7a:d4:36:ed:7a:af:f4:
8e:b6:17:8e:4b:50:a8:40:c5:89:70:58:87:ad:6b:
d4:6e:ad:59:7f:35:cf:17:88:67:ac:09:44:a9:04:
14:05:2d:70:bd:35:d3:ac:8f:8a:72:01:98:6f:45:
d8:0e:67:3b:24:6d:12:1f:70:ce:8c:e2:e9:f8:f3:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B7:03:7B:45:ED:2D:87:7A:77:BB:95:EA:9F:44:2B:37:66:E2:79
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.132.0/22
45.137.72.0/22
185.194.108.0/22
185.248.124.0/22
212.63.104.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:07:07:e1:a8:d2:ac:70:a6:e4:0d:b4:02:98:e5:dc:87:2c:
5b:d7:2e:82:2a:51:fc:76:ed:a6:6d:f0:cc:6d:b5:2f:cc:c2:
9f:f0:1d:3c:e2:f0:97:b4:d6:bb:30:ef:22:a3:0a:46:0c:9f:
78:34:f6:51:2d:4c:88:82:ab:7f:fb:cc:60:90:d4:02:5d:d6:
fd:f1:50:e3:ca:eb:59:67:b7:54:72:28:5f:88:2d:6f:52:61:
5c:b2:9a:ca:df:e7:94:b5:b8:3b:34:c7:30:b9:1c:13:71:1c:
0f:be:21:14:29:ca:30:1d:4d:2c:99:1a:8a:c0:28:e5:18:d1:
c3:2d:ec:f6:4b:56:34:b5:0d:13:b6:5a:52:33:1d:da:e1:05:
b6:59:96:4f:d2:60:1d:46:40:f1:4e:a8:30:d9:13:86:df:21:
8b:6e:33:7f:78:47:df:b6:37:c2:ce:fa:9e:5a:c0:64:eb:0a:
41:e0:f5:77:f6:91:70:34:a5:7f:f8:70:8c:ea:f0:48:76:49:
96:e4:0c:20:51:1c:5d:49:d9:34:9f:34:a6:ec:e6:85:d1:49:
04:b5:f5:55:0f:b1:83:7f:ee:79:1f:44:61:a3:06:77:26:ae:
4b:b0:08:79:c9:79:9a:20:19:9f:a2:2c:1f:9f:95:5b:21:31:
0d:0d:93:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:20:41 2025 by rpki-client