Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/1bEC89myvydEqo_ZPjw-OQX0Qi0.roa
File: 1bEC89myvydEqo_ZPjw-OQX0Qi0.roa (raw, json)
Hash identifier: ZmacESfVCLkopUwGADnqjPbJ5MKyVKen61NApT+t8VM=
Subject key identifier: D5:B1:02:F3:D9:B2:BF:27:44:AA:8F:D9:3E:3C:3E:39:05:F4:42:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019421B244C8B28660D8F94615A43837164F
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/1bEC89myvydEqo_ZPjw-OQX0Qi0.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42929
IP address blocks: 2.56.80.0/22 maxlen: 22
45.156.244.0/22 maxlen: 22
185.142.136.0/22 maxlen: 22
193.33.222.0/23 maxlen: 23
193.36.182.0/24 maxlen: 24
193.104.36.0/24 maxlen: 24
195.8.62.0/24 maxlen: 24
2a07:2d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:44:c8:b2:86:60:d8:f9:46:15:a4:38:37:16:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5b102f3d9b2bf2744aa8fd93e3c3e3905f4422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:c9:61:c9:13:dd:62:94:b8:ce:3a:e5:60:
19:35:ae:37:10:05:4f:36:19:a3:4d:4e:f7:14:c9:
f9:a7:72:b3:a9:48:66:18:dd:64:00:c3:05:17:68:
5d:b5:69:81:3b:7c:8c:06:1c:75:5c:77:51:97:f1:
7f:f5:d3:9c:1a:b3:13:4b:24:5b:d3:a6:f7:5a:4b:
20:79:ff:3c:ef:15:92:34:32:a8:ef:d0:6f:3a:9d:
04:10:09:2a:fe:5a:61:35:2f:4e:1e:59:1a:df:c9:
ab:20:b4:54:2d:1c:d1:a1:5b:f5:78:01:98:26:d2:
66:ce:f5:97:f6:5e:00:c7:af:50:98:8c:e2:6d:e0:
88:21:05:56:58:b9:42:ba:b9:2c:12:ff:60:c2:76:
ce:1c:84:7c:58:2a:1b:6e:5d:95:f6:11:ca:22:41:
26:0f:42:64:af:20:a1:14:80:5a:70:01:56:3d:b6:
3f:b2:14:66:f4:ca:09:98:4a:45:10:55:96:d3:c7:
4a:1c:5c:4f:ae:8a:4d:c8:d6:df:24:a0:e8:a2:f8:
49:0c:10:0a:97:f5:94:c2:63:4e:b9:df:57:63:14:
a3:6e:f8:2b:10:e0:9b:eb:ee:ed:5d:6c:83:d8:0b:
bb:0d:55:4c:e0:a2:e2:9b:c3:9e:e8:1a:3f:6d:83:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:02:F3:D9:B2:BF:27:44:AA:8F:D9:3E:3C:3E:39:05:F4:42:2D
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/1bEC89myvydEqo_ZPjw-OQX0Qi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.80.0/22
45.156.244.0/22
185.142.136.0/22
193.33.222.0/23
193.36.182.0/24
193.104.36.0/24
195.8.62.0/24
IPv6:
2a07:2d80::/29
Signature Algorithm: sha256WithRSAEncryption
7e:a2:e6:82:7a:22:cf:61:7a:2d:cd:b5:95:d2:de:2d:2d:1a:
c4:85:7a:59:35:5d:97:d3:64:b0:a2:76:56:67:0f:91:9b:03:
85:41:0a:5a:c2:05:ee:67:97:7d:8d:79:10:78:d5:be:61:ec:
df:7e:eb:36:6d:48:cc:17:4e:cb:02:2b:a9:1d:13:da:9c:fa:
89:ef:d7:d4:a8:b8:10:34:7f:14:c0:b2:d6:47:9e:b1:4d:9d:
f1:a0:e0:94:ab:52:ef:c8:4b:44:47:2b:6d:bf:e2:81:df:3e:
ca:58:90:c7:b1:a8:bd:41:2c:99:4f:ad:1e:5c:4f:2d:58:88:
91:11:52:98:ca:17:86:48:77:58:20:9c:c4:62:29:19:5c:e8:
bc:a8:3e:21:8e:f5:a3:1b:ac:05:a0:f6:97:63:07:fd:7e:f8:
6c:db:5c:97:0e:d2:62:2e:d1:28:6a:31:bb:b7:01:37:98:0a:
3e:8d:92:01:46:4f:3c:0b:1f:e9:81:df:3e:97:d1:81:2e:21:
ac:99:d6:d9:3b:68:b3:9d:82:23:cf:a2:7e:dc:e4:01:91:f4:
e2:a1:6a:d2:8d:52:2e:6d:8b:09:7a:55:1e:86:c8:28:0d:0d:
df:77:6f:e4:24:a8:28:67:ff:47:f2:c1:70:3c:e0:f2:ff:fb:
41:22:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:51 2025 by rpki-client