Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/2xSdynJrR2lrRXow3DheycMEzkg.roa
File: 2xSdynJrR2lrRXow3DheycMEzkg.roa (raw, json)
Hash identifier: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=
Subject key identifier: DB:14:9D:CA:72:6B:47:69:6B:45:7A:30:DC:38:5E:C9:C3:04:CE:48
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 019427B5E224C973EE1922C422CE8C37F3C1
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/2xSdynJrR2lrRXow3DheycMEzkg.roa
Signing time: Thu 02 Jan 2025 15:50:18 +0000
ROA not before: Thu 02 Jan 2025 15:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205381
IP address blocks: 45.88.32.0/24 maxlen: 24
45.88.33.0/24 maxlen: 24
45.88.34.0/24 maxlen: 24
45.88.35.0/24 maxlen: 24
185.220.56.0/24 maxlen: 24
185.220.57.0/24 maxlen: 24
185.220.58.0/23 maxlen: 23
194.107.229.0/24 maxlen: 24
194.110.1.0/24 maxlen: 24
194.110.7.0/24 maxlen: 24
194.110.19.0/24 maxlen: 24
2a07:86c0::/29 maxlen: 29
2a0c:f587:fffd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e2:24:c9:73:ee:19:22:c4:22:ce:8c:37:f3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db149dca726b47696b457a30dc385ec9c304ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:a0:da:46:4a:49:b8:16:b7:5d:d9:dc:4a:
b6:a9:0d:4e:de:ba:5e:a7:b9:c6:23:83:e7:b0:28:
ba:23:90:4a:15:68:29:e6:78:e8:6e:ef:f6:fd:46:
bd:a5:22:3d:d4:8f:1c:c2:04:b5:cc:5c:31:cb:7e:
9c:13:05:23:25:a1:92:d8:83:c6:d3:14:fe:57:4e:
1b:21:13:45:87:28:38:2e:ba:81:13:c1:0f:a5:ef:
ad:05:01:6c:82:da:83:06:43:79:55:5b:95:e9:e4:
f6:48:a8:99:f9:bf:e1:32:f5:76:4e:b3:fd:e0:a9:
4e:49:50:d6:c8:9b:1a:8a:6b:c3:1e:86:c4:4a:ea:
b7:65:4a:0f:2a:1b:05:14:92:b6:fa:ba:dc:2f:3d:
78:22:0e:81:89:ec:a6:de:5a:fb:6b:c2:aa:81:31:
39:7e:a1:26:e0:33:29:e4:f9:2d:01:04:9e:5e:a1:
3d:0c:d5:db:ee:11:c1:68:ca:2d:83:a0:29:78:ea:
c1:95:74:8f:57:75:80:5d:9a:be:89:7d:3f:42:db:
5c:d5:ca:dd:5c:f5:98:40:89:15:0b:3f:6e:cb:78:
e6:ef:ea:3c:f1:bd:4b:d1:52:62:18:18:09:d0:d7:
aa:50:7f:0f:5b:61:79:e2:d5:ac:5e:08:b2:fe:73:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:9D:CA:72:6B:47:69:6B:45:7A:30:DC:38:5E:C9:C3:04:CE:48
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/2xSdynJrR2lrRXow3DheycMEzkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.32.0/22
185.220.56.0/22
194.107.229.0/24
194.110.1.0/24
194.110.7.0/24
194.110.19.0/24
IPv6:
2a07:86c0::/29
2a0c:f587:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
49:38:7a:85:59:08:b8:8d:d6:a4:37:ff:87:c5:8b:ed:7e:e4:
3c:1b:a7:b5:56:d4:53:e3:99:34:b8:a1:da:85:e6:c4:43:04:
b2:d5:fb:9f:e7:17:60:19:b4:48:4f:e3:a0:ed:2e:aa:ac:52:
0b:4e:cb:d2:29:61:58:06:df:37:1d:7e:44:8f:e2:e8:a4:26:
a4:63:63:02:0b:ac:55:31:15:bf:ab:78:c4:c9:70:cc:1f:92:
42:10:2f:f5:2f:7d:90:5e:e5:92:68:f9:d7:74:42:af:fd:f0:
e7:e0:55:d0:f1:4f:94:72:f4:b7:37:4e:d3:0d:d0:a2:4c:4f:
86:7d:5f:63:12:e6:42:3a:33:f8:dd:04:65:08:7e:08:64:27:
95:c2:7c:6e:08:01:7b:cc:a6:68:7f:19:2a:44:d8:5a:c3:76:
6b:90:e2:30:7e:61:50:f0:79:e3:48:27:24:d0:cf:b0:05:59:
9a:f4:7a:d6:7f:0a:3b:9b:7d:a3:59:97:ef:a4:33:5f:e4:6a:
a7:ef:6c:e8:02:10:89:0b:05:d5:fd:be:c1:07:1f:da:ae:f7:
57:3e:36:89:f8:ed:dc:7a:70:69:40:5c:7f:43:a0:b8:5b:7e:
fc:9a:42:6e:1f:cc:e4:d6:b1:c5:ab:da:3e:9a:43:ba:5f:4d:
b5:42:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:14 2025 by rpki-client