Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/ru2syxCTFSkcHXzvmaT8k_sSwdE.roa
File: ru2syxCTFSkcHXzvmaT8k_sSwdE.roa (raw, json)
Hash identifier: cb/4JPWzlbHrciybJdWfxGFnExQb99fweCf16u1aJnY=
Subject key identifier: AE:ED:AC:CB:10:93:15:29:1C:1D:7C:EF:99:A4:FC:93:FB:12:C1:D1
Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial: 01942067DD2FD79DB088C3860B3093D4F9DA
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/ru2syxCTFSkcHXzvmaT8k_sSwdE.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34674
IP address blocks: 128.140.176.0/21 maxlen: 21
128.140.176.0/22 maxlen: 22
128.140.176.0/23 maxlen: 23
128.140.176.0/24 maxlen: 24
128.140.177.0/24 maxlen: 24
128.140.178.0/23 maxlen: 23
128.140.179.0/24 maxlen: 24
128.140.180.0/22 maxlen: 22
128.140.180.0/23 maxlen: 23
128.140.180.0/24 maxlen: 24
128.140.181.0/24 maxlen: 24
128.140.182.0/23 maxlen: 23
128.140.182.0/24 maxlen: 24
128.140.183.0/24 maxlen: 24
128.140.184.0/23 maxlen: 23
128.140.184.0/24 maxlen: 24
128.140.185.0/24 maxlen: 24
185.184.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dd:2f:d7:9d:b0:88:c3:86:0b:30:93:d4:f9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeedaccb109315291c1d7cef99a4fc93fb12c1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:cd:7e:49:59:98:77:4f:20:ac:5d:2f:08:
9b:e3:2c:b8:0b:8f:c8:ea:31:8e:5f:d3:4a:23:18:
16:04:4d:70:f6:cf:e9:3d:bf:90:b2:e4:53:b1:54:
87:2c:c9:36:81:e2:13:9b:e8:90:29:2c:2d:0f:ec:
1c:24:6b:ea:90:bd:87:95:3b:6f:fc:20:a0:54:59:
51:eb:ce:2e:f4:0a:29:eb:97:30:3e:77:7c:9b:6b:
d0:92:29:e9:14:b8:db:6c:62:6a:9a:24:43:b0:af:
13:2f:a3:30:14:8c:5a:47:58:e2:48:e2:2f:01:45:
6b:74:8e:8c:a3:74:a5:14:4a:f6:cf:c8:dd:04:3d:
a1:e6:b5:03:77:d3:15:eb:25:de:f8:5c:90:ac:a7:
db:54:c4:16:6e:31:43:6e:0a:9e:70:ba:dd:28:2e:
8a:46:c9:52:ca:0a:91:90:4c:fb:21:2a:f0:6b:f8:
1e:87:1b:83:aa:39:97:0d:8a:47:5a:49:d2:57:01:
9b:42:ec:f1:0a:58:fb:3a:13:1b:c2:04:a8:3c:8a:
ee:0c:5d:cc:d6:46:ba:fd:83:1d:b2:ff:8b:dc:9d:
10:68:db:9c:46:5c:04:bd:25:fa:c7:d5:e1:a7:50:
de:b0:f1:3f:c7:47:31:41:36:86:f7:34:29:a1:08:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:AC:CB:10:93:15:29:1C:1D:7C:EF:99:A4:FC:93:FB:12:C1:D1
X509v3 Authority Key Identifier:
keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/ru2syxCTFSkcHXzvmaT8k_sSwdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.176.0-128.140.185.255
185.184.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:15:49:4c:68:04:ba:1e:8b:95:48:bd:bf:c7:6e:c8:1e:ac:
31:22:7e:81:d7:e8:7a:96:a3:41:01:32:ed:c5:49:5d:d0:6d:
b3:cb:4d:40:fb:6b:27:ca:c2:70:6b:f6:57:ae:52:5e:a9:8c:
40:c3:d5:0f:d8:70:49:8b:37:23:87:09:a6:33:cb:52:04:be:
8f:e8:a4:ec:84:60:97:88:64:72:43:fc:74:cb:7f:b7:5c:c1:
43:08:5a:73:b6:31:12:3c:fa:ab:a7:70:92:c3:7e:50:66:ef:
ab:c2:15:d1:4d:62:9b:36:3c:5d:c7:be:e9:36:bc:cb:10:c3:
97:a0:92:ed:52:6a:60:f7:88:5e:eb:58:e9:fa:d1:6e:0e:8c:
33:7d:4b:03:64:e0:ce:11:cc:97:d7:9d:2c:17:28:ea:9c:2e:
d6:8d:a1:62:78:2d:7b:f8:f0:d2:ab:ad:2e:51:b0:2b:f5:80:
8d:1b:ae:14:fd:32:51:29:7a:92:31:10:b9:52:02:7b:a5:b8:
a9:7c:cb:f8:e9:bf:1f:af:52:48:b3:77:28:73:bd:fa:64:40:
e7:77:a3:99:25:2b:7f:bf:64:c1:97:5e:46:1e:57:af:2e:aa:
21:25:a7:29:cf:10:10:af:0f:18:9a:d0:ce:bc:d3:67:bc:fc:
17:52:0a:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:34 2025 by rpki-client