Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/gCey_v2UCZeSxOY5c95rc1vs_VM.roa
File: gCey_v2UCZeSxOY5c95rc1vs_VM.roa (raw, json)
Hash identifier: qDfZds90990ij9oArpvS16pRyb3ErQ8TGoD1UM2ShEY=
Subject key identifier: 80:27:B2:FE:FD:94:09:97:92:C4:E6:39:73:DE:6B:73:5B:EC:FD:53
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D13C08ED742AC50A867498C28259
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/gCey_v2UCZeSxOY5c95rc1vs_VM.roa
Signing time: Wed 01 Jan 2025 19:48:44 +0000
ROA not before: Wed 01 Jan 2025 19:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 45.8.89.0/24 maxlen: 24
45.15.75.0/24 maxlen: 24
45.153.49.0/24 maxlen: 24
77.83.95.0/24 maxlen: 24
92.119.128.0/24 maxlen: 24
92.119.130.0/24 maxlen: 24
93.157.105.0/24 maxlen: 24
194.93.3.0/24 maxlen: 24
194.169.161.0/24 maxlen: 24
194.169.162.0/24 maxlen: 24
213.139.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d1:3c:08:ed:74:2a:c5:0a:86:74:98:c2:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8027b2fefd94099792c4e63973de6b735becfd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:1e:3e:5c:bc:ee:7e:d3:ad:fd:10:a7:f5:
9e:8b:6e:4c:76:f5:29:ff:b2:e4:58:ea:bc:e2:57:
d0:9e:13:16:74:d3:56:19:44:72:f8:67:4f:be:2d:
67:b0:e9:b0:1c:4b:2f:7c:01:b3:ba:a3:ac:62:5a:
65:c0:1e:69:36:47:af:b0:9d:a2:eb:75:1d:5b:95:
4b:26:0a:c6:d4:b9:e5:1a:0d:fa:43:25:9b:09:6c:
c1:c5:cf:dc:18:48:61:e5:71:40:f8:19:c4:f8:a0:
8d:ee:2d:52:2e:6f:98:9f:a7:9a:c5:fd:f9:ab:46:
74:9b:8e:a7:72:4d:a2:28:e6:7a:c9:64:84:7a:1d:
41:82:a2:b5:08:ba:23:c3:5f:de:b5:a8:23:36:f3:
bc:fc:a1:64:b4:87:98:37:66:62:bb:3e:95:2c:7d:
5f:c5:4c:cc:7d:4b:69:0a:df:15:91:f4:7e:ce:28:
b6:da:24:6b:16:37:10:ef:53:99:32:17:75:ff:21:
f7:1c:ec:64:b9:54:30:c9:43:91:c8:3f:a0:ad:87:
71:c5:06:78:aa:68:7c:df:84:24:96:f2:38:4c:ab:
68:fa:81:86:18:f3:16:76:eb:fb:ee:be:0a:70:c5:
d5:b0:62:58:c3:78:ca:1d:16:57:21:27:37:3d:73:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:27:B2:FE:FD:94:09:97:92:C4:E6:39:73:DE:6B:73:5B:EC:FD:53
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/gCey_v2UCZeSxOY5c95rc1vs_VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.89.0/24
45.15.75.0/24
45.153.49.0/24
77.83.95.0/24
92.119.128.0/24
92.119.130.0/24
93.157.105.0/24
194.93.3.0/24
194.169.161.0-194.169.162.255
213.139.203.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c9:81:a3:62:10:46:63:41:22:b9:3a:29:d1:cf:55:db:d9:
95:03:14:79:99:b9:23:78:ed:08:e2:0d:84:6d:16:7c:4e:9a:
72:8f:65:ed:1f:5b:9d:10:1a:2a:69:b8:fa:1c:50:92:1e:5b:
58:4f:cd:9a:f3:b6:eb:3d:74:08:01:c7:e0:28:3c:06:cd:dd:
02:43:2f:4e:5b:5d:20:6f:79:a5:38:a3:95:50:d3:ab:66:97:
ac:28:43:a5:8b:43:da:bb:b7:c0:83:cd:ad:9b:48:12:b2:55:
73:25:21:5c:fc:bd:ba:22:41:55:72:29:5d:3c:35:90:a4:d2:
d9:cc:43:1d:05:36:b0:b3:42:e3:32:c9:84:b5:16:e0:d4:20:
85:89:23:ce:35:2a:09:e8:8c:62:8a:dd:67:2b:6a:37:cd:92:
5c:84:88:23:33:cb:6b:b1:30:ac:85:d4:c9:a5:66:10:ce:9b:
7a:40:2c:50:4f:05:8a:9b:43:ee:00:37:93:86:b7:93:ec:00:
cb:1c:93:43:46:3b:2d:01:68:16:e3:cf:dd:a9:dc:5d:43:89:
4c:65:8f:a7:a0:61:00:d8:e4:be:f4:2f:7d:38:b0:04:22:33:
2d:46:70:e1:15:5e:1c:ca:58:52:87:e1:cd:1a:83:6a:13:45:
87:63:d2:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:30 2025 by rpki-client