Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/7iAJoeFP9OP9X3cOfKZlc4fML0Q.roa
File: 7iAJoeFP9OP9X3cOfKZlc4fML0Q.roa (raw, json)
Hash identifier: 09U5lQZ5X9Dwunam/5ld7wb/WzixEq8Z296KY8xUGrM=
Subject key identifier: EE:20:09:A1:E1:4F:F4:E3:FD:5F:77:0E:7C:A6:65:73:87:CC:2F:44
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FF9FEF866918A6F137E56FBD2BA9F6A
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/7iAJoeFP9OP9X3cOfKZlc4fML0Q.roa
Signing time: Wed 01 Jan 2025 03:47:44 +0000
ROA not before: Wed 01 Jan 2025 03:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 45.10.40.0/22 maxlen: 24
88.218.168.0/22 maxlen: 24
93.183.80.0/22 maxlen: 24
185.197.75.0/24 maxlen: 24
193.188.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f9:fe:f8:66:91:8a:6f:13:7e:56:fb:d2:ba:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee2009a1e14ff4e3fd5f770e7ca6657387cc2f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:ff:29:7d:69:8e:96:84:cf:1a:87:fb:b0:
d0:5f:a5:15:cf:2b:e0:a3:00:0a:f4:49:9f:0a:77:
9e:64:d6:ff:21:f7:9f:35:9a:78:3d:e5:d9:ed:00:
ac:4c:40:8b:39:c8:00:19:70:44:eb:99:12:52:3f:
e7:94:5e:c5:e0:83:c3:9b:3f:fa:6c:98:e9:52:48:
6d:3b:13:5c:86:b8:20:3a:fa:2f:9f:43:cd:4a:fd:
2b:4e:9e:23:cc:fa:03:53:d4:85:7f:1c:ef:cd:ec:
f1:6a:dd:82:d1:77:60:5e:1c:47:28:c8:12:7f:5e:
27:bb:c4:2e:96:f4:23:5d:f7:e0:51:53:af:39:57:
72:85:f5:2a:7f:dd:ae:08:b1:6a:e8:b5:57:ab:f8:
70:23:6a:f1:c5:d1:a0:67:a9:a7:3a:ee:5b:fd:6e:
75:53:bb:e3:cb:2a:6b:6b:21:d2:f7:e7:9e:13:18:
84:90:11:5c:6b:f5:81:93:11:b8:7e:63:07:21:f1:
d2:dc:c9:dd:cf:85:af:09:8c:c5:25:3d:89:bf:0e:
51:e8:18:a6:37:7c:b0:05:4f:6f:59:37:4f:c1:2c:
91:9a:d7:63:e9:f1:67:82:56:5b:d4:2f:9b:e9:cf:
b4:10:d2:f3:d6:f3:ee:80:72:1c:3e:61:6c:6f:59:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:20:09:A1:E1:4F:F4:E3:FD:5F:77:0E:7C:A6:65:73:87:CC:2F:44
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/7iAJoeFP9OP9X3cOfKZlc4fML0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.40.0/22
88.218.168.0/22
93.183.80.0/22
185.197.75.0/24
193.188.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ec:03:57:07:26:53:b0:6d:a0:07:aa:13:78:04:b7:d3:ae:
51:37:04:25:50:26:0d:3c:d2:06:8e:ae:e3:d2:ea:b5:84:99:
05:2d:55:f6:a4:af:72:ed:04:fc:a6:0f:c2:37:b8:7e:49:1b:
05:b1:b9:a7:ae:53:ae:6f:7f:43:65:b8:d3:fc:f9:14:88:fa:
cc:c6:46:b9:3d:2b:cf:3e:74:1b:82:ba:22:58:1f:14:00:c1:
95:cc:7e:d1:04:b1:c9:13:1c:4b:6a:78:1d:e4:81:da:0a:98:
fb:54:2d:ee:ba:d1:82:83:f0:31:be:c8:88:fe:87:7f:44:10:
9c:54:f1:ca:d0:08:62:bc:90:4d:c9:2e:9d:62:07:be:1e:2f:
02:32:e7:a7:0d:80:6e:8b:ea:d7:02:aa:97:e2:10:cd:a2:8e:
b2:3f:67:91:9a:13:9c:f5:9a:da:28:8d:c5:2f:f5:5f:ed:61:
05:88:6e:06:ab:3b:e7:31:19:00:9d:30:45:e8:00:71:f0:1b:
2c:0b:3a:53:e9:b2:1d:15:05:45:a0:a6:96:cc:69:82:59:87:
8e:59:5c:37:dd:2c:ea:54:e5:58:f4:1f:6c:ac:f9:48:43:e9:
5f:a1:c4:44:7a:82:1c:b7:17:d5:35:42:eb:7d:2e:a9:34:99:
d4:af:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:04:48 2025 by rpki-client