Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/eGmXgVFvwsBk7SAoM1kGvWoQI10.roa
File: eGmXgVFvwsBk7SAoM1kGvWoQI10.roa (raw, json)
Hash identifier: R9dD1c159jJx/6+Rzi7HOjyRtb051S/5UvakT/GYWxo=
Subject key identifier: 78:69:97:81:51:6F:C2:C0:64:ED:20:28:33:59:06:BD:6A:10:23:5D
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FAEAB059EADC01EA363F2A0DED381
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/eGmXgVFvwsBk7SAoM1kGvWoQI10.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.132.80.0/22 maxlen: 24
91.238.92.0/24 maxlen: 24
91.239.149.0/24 maxlen: 24
91.244.198.0/24 maxlen: 24
176.105.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ae:ab:05:9e:ad:c0:1e:a3:63:f2:a0:de:d3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78699781516fc2c064ed2028335906bd6a10235d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:4b:de:9f:b1:ec:f4:8e:c3:57:cb:bf:32:
3d:df:bc:36:86:e3:38:69:4f:af:f5:5f:79:7c:09:
9e:d8:3d:f1:ce:88:1e:06:a5:30:70:59:a9:4b:24:
45:f3:19:b6:d7:df:38:95:da:52:6f:61:73:1b:b4:
5e:d8:b9:cd:f5:76:3c:d6:4d:4f:f9:dc:6b:42:05:
b5:6e:83:82:7b:6c:e9:c2:17:d6:f5:b4:a4:e7:41:
c2:17:5f:f5:f8:4f:3e:95:70:ae:ad:5c:a1:32:03:
90:44:01:fa:ff:f4:f6:29:e9:ba:9f:ff:7e:d9:eb:
04:42:6a:67:a5:84:9a:e7:82:b8:f2:08:38:76:78:
84:95:82:9f:76:af:1d:be:b1:6d:a1:6c:ea:d4:15:
63:54:04:d5:6a:63:c8:30:d7:bb:c3:6c:7b:3d:74:
6a:df:8d:76:e4:d8:ba:3b:fc:11:78:b0:02:69:d8:
61:80:53:0f:69:71:12:a7:ac:b2:b6:a9:f5:94:6b:
2a:ff:6d:eb:36:bb:90:cb:b1:64:bc:fb:37:61:7c:
ec:aa:e1:b5:d6:cc:5f:95:5e:27:68:84:bb:a8:66:
ec:06:7d:c2:2e:6d:e5:b2:ee:74:b1:56:29:7a:c7:
47:31:e8:e3:f3:14:98:29:b4:82:88:45:31:f2:6e:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:69:97:81:51:6F:C2:C0:64:ED:20:28:33:59:06:BD:6A:10:23:5D
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/eGmXgVFvwsBk7SAoM1kGvWoQI10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
91.238.92.0/24
91.239.149.0/24
91.244.198.0/24
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:ee:a9:ad:10:3d:f7:2a:d9:5c:a3:99:df:1c:4a:4e:46:6a:
22:9b:5f:60:da:8b:54:cb:38:62:1d:b4:db:2c:92:1f:db:c0:
f5:65:8c:0c:af:6d:41:5d:7a:1e:be:31:a7:c7:34:0b:dd:7d:
a8:87:24:b9:07:d2:5a:1a:c9:e7:e1:19:c0:2c:ef:7e:06:69:
01:50:b2:92:4f:69:90:92:ab:4c:b4:43:87:0e:45:a5:34:97:
0c:02:53:ab:c0:69:97:1a:f5:5f:24:1f:0d:e3:11:40:8c:00:
f4:22:9f:76:c4:4f:20:d2:bf:57:fc:fc:cb:0e:d2:1b:68:25:
85:55:7a:c3:08:bf:6e:58:0c:7d:44:9f:9d:83:c1:18:67:8f:
ef:4f:80:e0:5d:09:5e:e5:94:e0:49:9a:c8:9e:02:67:c0:3a:
96:0e:93:05:97:6c:12:62:c6:84:77:a1:c0:e9:61:56:21:8a:
fe:e1:b6:db:f4:ef:b1:b8:bc:7a:c1:f1:42:e1:8d:bc:cd:be:
11:f1:0c:de:be:72:b3:79:cb:02:91:dd:73:25:70:f5:6f:90:
9c:94:3c:17:8e:d6:cd:8d:11:03:e0:bc:68:02:dc:71:8d:7a:
dc:4d:7d:7d:4f:23:2f:c8:53:c5:52:36:17:4d:a1:7e:e0:98:
62:48:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:57:02 2025 by rpki-client