Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/ELYZJGHcWhKUiY7ABJ-PY-iSroQ.roa
File: ELYZJGHcWhKUiY7ABJ-PY-iSroQ.roa (raw, json)
Hash identifier: XKv64QH5ODk1+MXzK56Lue/Lun/NuUmKCWEmKamL9J8=
Subject key identifier: 10:B6:19:24:61:DC:5A:12:94:89:8E:C0:04:9F:8F:63:E8:92:AE:84
Certificate issuer: /CN=fad7e14a262560191c66576998e9c69b89c3c136
Certificate serial: 019420683959B2EA4550B4241E674736CE1F
Authority key identifier: FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/ELYZJGHcWhKUiY7ABJ-PY-iSroQ.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200735
IP address blocks: 145.255.48.0/24 maxlen: 24
145.255.49.0/24 maxlen: 24
145.255.50.0/24 maxlen: 24
145.255.51.0/24 maxlen: 24
145.255.52.0/24 maxlen: 24
145.255.53.0/24 maxlen: 24
145.255.54.0/24 maxlen: 24
145.255.55.0/24 maxlen: 24
185.55.72.0/24 maxlen: 24
185.55.73.0/24 maxlen: 24
185.55.74.0/24 maxlen: 24
185.55.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:39:59:b2:ea:45:50:b4:24:1e:67:47:36:ce:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7e14a262560191c66576998e9c69b89c3c136
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b6192461dc5a1294898ec0049f8f63e892ae84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:4b:bd:93:81:6a:08:cd:1b:50:3a:70:68:
7d:34:d2:66:0e:75:d6:d0:85:61:83:2b:81:7d:2a:
d7:c7:af:b6:d4:62:6d:5b:89:6e:26:67:f1:a7:6b:
05:8b:39:1e:07:05:9c:60:ba:b6:d0:8b:0e:ba:69:
7c:3b:d6:4f:ec:39:5b:f0:13:77:52:ea:37:f2:2e:
6d:27:a1:c5:eb:47:b7:8b:6c:6c:dc:43:2b:d7:c4:
7b:e2:f5:27:bd:62:79:e2:00:4c:f5:1c:30:55:49:
0c:a8:a3:4d:ef:fd:56:71:66:23:a0:71:57:c6:a5:
62:6e:f8:89:85:0a:92:87:cd:1c:ad:f6:2b:45:de:
c0:57:cd:c8:0b:d9:6f:15:df:e0:29:21:f0:8c:f3:
31:65:bb:c4:50:33:94:89:5a:07:89:0e:8a:9b:2a:
3c:b8:97:d8:4d:bd:43:6d:cb:46:56:16:7a:ff:c4:
61:08:0a:9f:de:07:d6:f9:74:f7:51:5c:6b:72:90:
4f:aa:ae:7f:1c:7f:5b:2f:e1:f4:8e:e3:03:7e:4f:
cc:58:5b:08:db:5e:1a:44:83:1d:00:a3:be:ab:89:
60:d6:b2:93:50:21:1e:9a:47:47:01:a7:20:ad:ff:
81:f9:4d:fb:53:28:e3:0b:75:a1:d7:a5:1f:72:83:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B6:19:24:61:DC:5A:12:94:89:8E:C0:04:9F:8F:63:E8:92:AE:84
X509v3 Authority Key Identifier:
keyid:FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/ELYZJGHcWhKUiY7ABJ-PY-iSroQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.255.48.0/21
185.55.72.0/22
Signature Algorithm: sha256WithRSAEncryption
e0:aa:1b:98:4b:50:68:f7:65:b5:29:39:8a:14:91:ff:a0:30:
7f:41:f5:71:64:5f:66:e0:80:c2:23:7f:2c:3e:b2:55:e6:2e:
a8:66:1d:55:df:74:b8:cf:1e:9c:b6:94:8f:21:2a:52:76:f6:
e1:f2:37:a3:b4:6e:66:65:d3:48:34:f2:7a:f3:23:2a:bf:f9:
2f:88:3d:e4:8a:fc:84:c9:1b:e7:a3:15:41:b0:2c:b3:07:ff:
1b:1c:74:47:c1:ab:1c:10:d0:67:24:29:4f:4d:03:a1:db:b8:
76:5c:11:54:cd:13:24:3c:ae:7a:26:e7:5b:d2:08:60:96:96:
40:99:2e:cf:98:89:a8:03:67:b0:91:43:4e:3e:73:ca:54:ea:
ef:f5:f4:74:65:4f:28:40:ba:7c:54:32:3f:e7:31:b3:ee:bb:
51:35:2b:2e:7f:25:65:79:5b:d5:10:7b:09:cc:0f:09:3e:87:
2e:c9:72:62:85:ec:23:10:db:30:1b:75:45:4a:28:5c:be:cd:
33:14:a2:e7:a1:6c:47:34:1c:0b:40:c0:34:7c:66:d5:43:aa:
91:aa:d0:f1:e4:ec:54:17:4b:75:ca:9f:f6:08:0e:6a:1f:c1:
f9:0d:a9:e6:53:88:ab:63:f6:91:62:48:8e:31:91:fe:61:7a:
3d:4e:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:38:09 2025 by rpki-client