Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa
File: e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa (raw, json)
Hash identifier: lsA08XTxVJOQQYnez6W7EOdFIkHihRjO9Y7qKfekirQ=
Subject key identifier: 7B:DA:E7:E9:BC:52:B1:49:AD:BD:1A:3B:B0:9E:25:12:D2:BA:4B:64
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 0194244558A6610A4F7374301D41BB87D5B1
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39116
IP address blocks: 46.254.192.0/21 maxlen: 21
46.254.192.0/23 maxlen: 23
46.254.194.0/23 maxlen: 23
46.254.196.0/23 maxlen: 23
46.254.198.0/23 maxlen: 23
85.90.32.0/19 maxlen: 19
85.90.32.0/21 maxlen: 21
85.90.40.0/22 maxlen: 22
85.90.44.0/23 maxlen: 23
85.90.48.0/22 maxlen: 22
85.90.52.0/22 maxlen: 22
85.90.56.0/22 maxlen: 22
85.90.60.0/22 maxlen: 22
212.31.128.0/19 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:58:a6:61:0a:4f:73:74:30:1d:41:bb:87:d5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bdae7e9bc52b149adbd1a3bb09e2512d2ba4b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:56:6a:3e:bf:44:12:03:8a:9b:09:78:76:
a3:73:fa:d0:ec:bb:62:e2:ce:08:2f:52:c8:ea:11:
74:ed:c8:83:38:c1:12:ef:4a:d8:85:57:f8:8d:64:
db:74:4a:d5:5d:82:f4:eb:fe:8a:e6:b0:10:c0:8f:
ce:81:13:51:2f:ab:a8:3b:a5:91:b1:14:00:01:e1:
3f:3c:5b:7f:51:00:7c:4e:cc:56:89:48:43:b6:1f:
c0:a9:18:12:d8:34:27:8d:bb:6a:63:5c:23:b3:cc:
b9:5a:29:66:68:b4:61:81:ad:29:77:05:88:50:35:
19:d6:11:db:99:18:a7:bf:d1:d3:ea:35:89:2a:2b:
a4:ce:95:eb:74:ce:ae:e4:ce:af:f5:fe:c0:06:6a:
26:5e:a8:2e:18:c2:8b:05:98:42:36:43:be:2b:06:
cb:b4:c1:3c:a0:1b:7a:84:54:7b:00:b7:9e:fb:28:
1a:2b:2d:c0:22:1c:0a:00:a8:a8:58:e0:fb:2a:14:
71:99:6a:bf:0e:4d:6d:d9:2e:ce:19:21:f9:04:9a:
86:dd:a3:2d:e3:27:14:4a:7c:e8:8a:09:8a:6d:51:
16:b1:d5:f3:a6:b9:53:c4:a7:e2:0d:3a:75:7f:ad:
74:e8:36:19:99:37:5a:41:70:02:6c:21:31:8a:73:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DA:E7:E9:BC:52:B1:49:AD:BD:1A:3B:B0:9E:25:12:D2:BA:4B:64
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.192.0/21
85.90.32.0/19
212.31.128.0/19
Signature Algorithm: sha256WithRSAEncryption
65:d0:0c:4f:42:8c:50:73:85:79:d1:4c:2a:29:be:e7:cf:56:
64:d8:8b:15:48:cc:ad:46:aa:3e:84:99:1b:37:47:d0:8f:6c:
3e:55:60:0f:a0:50:67:28:07:5b:e8:57:d1:cd:23:d4:70:e1:
5d:62:21:f4:ad:cd:8d:c2:5b:3e:04:0b:c2:ea:eb:90:ac:31:
68:6f:7e:e2:c7:a9:e5:28:83:eb:2c:98:1f:59:81:53:a9:1c:
74:23:eb:d3:a7:5c:5b:3c:ac:8f:5d:fd:d2:d7:aa:76:7d:56:
56:7c:fc:e0:42:df:ef:a9:a1:64:6e:f5:b5:ac:e1:f9:90:28:
63:7f:07:32:5d:23:42:50:e8:e6:0d:b8:88:f2:90:31:ce:54:
89:6d:ef:23:5b:37:45:2b:4c:fa:f2:7e:b8:7e:24:06:8d:71:
82:91:26:c8:66:1e:53:e0:c0:a7:95:7a:13:17:cc:d6:c2:27:
89:c7:ac:ee:7b:97:19:b9:65:f3:1a:43:dd:9c:26:93:68:40:
29:4e:47:c9:79:8f:be:fa:27:80:c6:2a:90:25:86:95:2d:90:
cb:7f:85:a2:01:75:84:16:36:f6:73:f6:c2:ee:20:3d:2a:1c:
fd:49:89:b1:e2:18:6c:f5:39:08:ff:d4:50:75:cb:1f:a5:df:
b8:3b:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:03 2025 by rpki-client