Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/EgrdXaLN-vc8C2zZS8RN3DywvDo.roa
File: EgrdXaLN-vc8C2zZS8RN3DywvDo.roa (raw, json)
Hash identifier: hzm54PDUPW3onP/qtSLZRsQOvKv3wuQ4riGx7IRQcQA=
Subject key identifier: 12:0A:DD:5D:A2:CD:FA:F7:3C:0B:6C:D9:4B:C4:4D:DC:3C:B0:BC:3A
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 01941FFA4E1DC72023DB13133AFF4483B2FD
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/EgrdXaLN-vc8C2zZS8RN3DywvDo.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203172
IP address blocks: 45.129.144.0/22 maxlen: 24
185.249.41.0/24 maxlen: 24
185.249.42.0/24 maxlen: 24
2a0e:5b44::/30 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:1d:c7:20:23:db:13:13:3a:ff:44:83:b2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=120add5da2cdfaf73c0b6cd94bc44ddc3cb0bc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:e3:de:04:7e:39:45:c5:6c:7e:97:68:f0:
75:7f:0b:e1:e9:c9:53:5e:d4:cf:ad:d9:6c:cb:9d:
a8:4c:1e:b0:46:4d:b4:83:c6:99:cf:a9:e2:02:98:
eb:89:55:82:d4:67:61:64:84:4c:63:b9:5f:ca:a7:
77:da:da:20:15:88:fc:11:88:9d:3b:88:c7:bf:56:
8b:55:56:04:7e:67:22:e4:bc:79:ec:9c:15:59:87:
e0:de:23:3a:28:f6:87:e3:8b:3f:8f:d2:08:c8:dd:
96:a5:1f:93:40:cc:ba:52:fa:4f:fc:36:2e:7a:88:
3d:26:45:34:7f:af:7c:97:f1:a6:88:81:6a:c2:4e:
22:22:e9:7d:5d:74:04:fe:cb:32:ce:b7:91:92:23:
bf:c0:3c:15:64:75:9e:4d:b4:a2:0a:92:60:b2:f5:
54:ec:fd:91:58:f3:9c:5c:1e:04:42:92:4d:38:d4:
50:43:e6:12:d9:97:bf:1c:81:24:83:89:88:69:87:
98:77:3d:0a:0f:4e:65:87:3d:13:2f:6d:c2:f6:74:
b0:71:08:e9:1a:89:34:58:69:a0:df:ce:12:67:15:
57:98:c8:99:97:a3:93:51:0b:88:57:1a:1b:2e:19:
90:4b:89:2f:4c:52:06:84:f4:5e:1b:b7:95:31:60:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0A:DD:5D:A2:CD:FA:F7:3C:0B:6C:D9:4B:C4:4D:DC:3C:B0:BC:3A
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/EgrdXaLN-vc8C2zZS8RN3DywvDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.144.0/22
185.249.41.0-185.249.42.255
IPv6:
2a0e:5b44::/30
Signature Algorithm: sha256WithRSAEncryption
07:86:69:23:0e:3a:c8:8c:25:d0:80:5f:97:ff:4a:0d:20:dc:
8a:32:5f:dd:3f:21:33:05:7d:46:21:25:9b:88:08:a1:c6:53:
c2:75:53:8a:0a:c0:b4:5a:91:56:e2:31:bb:3b:1f:5f:4f:29:
e6:a1:cc:9b:42:fb:ad:29:15:87:a2:b8:70:6f:f6:1b:4e:b9:
ff:11:b6:3e:19:52:49:cc:0c:4c:56:8d:8a:4d:19:ba:33:75:
75:00:ce:1d:3d:5c:01:98:8c:92:d6:96:b1:de:4e:30:7b:1b:
4a:36:aa:92:50:82:69:08:41:d4:e2:ef:27:ed:e4:28:03:e0:
bb:3e:ae:8f:52:92:19:ff:4b:d7:93:a0:b7:7c:85:7d:08:6b:
0d:d3:dc:9b:25:f1:20:ab:8e:b7:12:b8:bd:01:4c:83:21:17:
07:a6:e9:05:de:49:3e:52:13:8c:3f:18:e8:60:84:7b:0a:16:
fc:94:42:98:5d:7f:41:ea:2b:79:f4:b5:ce:cc:24:94:e0:a8:
1e:25:c4:bb:58:c8:6c:a9:66:b7:a9:66:ed:0f:a3:7d:42:f0:
6e:a8:b3:6d:91:0a:d2:f7:fc:5c:73:ef:64:34:da:59:5c:d6:
56:39:8e:13:1f:87:68:e3:af:35:2a:e7:c3:b8:d7:f9:57:8e:
2d:9b:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:19:20 2025 by rpki-client