Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa
File: 7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa (raw, json)
Hash identifier: +YzcMttJR4cOnsIWs0CBLy1v8W7l7gh7eA5Qk1ZfF+0=
Subject key identifier: EE:B1:A1:5F:30:9F:98:E0:10:B4:57:42:14:CB:4D:C1:06:42:1B:32
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 019425FC1B77C5FF804E114DA3897497766E
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa
Signing time: Thu 02 Jan 2025 07:47:46 +0000
ROA not before: Thu 02 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51616
IP address blocks: 45.9.224.0/22 maxlen: 22
185.61.180.0/22 maxlen: 22
185.149.32.0/22 maxlen: 22
185.149.32.0/23 maxlen: 23
185.149.34.0/24 maxlen: 24
195.95.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1b:77:c5:ff:80:4e:11:4d:a3:89:74:97:76:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeb1a15f309f98e010b4574214cb4dc106421b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:ae:50:e1:3c:24:5d:e5:51:e4:06:18:71:
d0:2a:53:60:2b:08:03:14:5b:7e:1f:1b:b7:4d:b1:
ae:64:32:5d:3a:7e:9f:dd:50:27:4c:e6:c3:57:f3:
26:82:e9:93:20:83:f6:f0:ed:1e:45:49:bd:c6:53:
09:d3:ec:0c:81:1a:8a:e3:04:d8:c0:92:cc:bf:31:
de:b7:7b:2b:c4:00:7b:58:76:15:01:10:9d:c1:75:
bc:5a:96:24:4f:0f:6d:56:c9:84:37:41:34:ad:d7:
9c:41:03:9c:10:6c:b6:c8:75:14:ca:b7:aa:c1:6d:
40:f5:19:01:3c:07:a7:55:65:2b:b4:29:4d:8f:dc:
0c:53:ff:86:c5:e9:07:81:e1:0e:42:37:37:c3:28:
ac:a4:de:8f:02:6b:2d:1e:81:c4:7b:84:8e:7a:39:
6e:b8:6a:6f:21:66:a1:16:56:bd:1a:06:84:ed:b6:
3a:65:a2:98:84:bb:4e:a0:19:8a:29:fe:e5:74:16:
39:90:b2:26:e1:a2:10:bb:50:ef:3d:3f:f7:85:16:
5f:fe:f0:35:68:9a:cd:b2:ec:6b:bb:45:82:81:59:
aa:f4:76:ae:b9:d5:ff:95:19:4f:1f:09:2e:ef:94:
8e:62:c1:9d:3f:41:a0:6c:2c:1f:7e:11:57:f7:a2:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B1:A1:5F:30:9F:98:E0:10:B4:57:42:14:CB:4D:C1:06:42:1B:32
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.224.0/22
185.61.180.0/22
185.149.32.0/22
195.95.230.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:96:99:29:8a:d4:18:5a:d3:a0:e3:01:89:8a:f6:c5:b0:81:
da:bb:d4:fc:38:15:9f:d1:55:77:10:90:30:ba:69:bc:99:89:
7b:7a:eb:38:a9:c3:11:d1:80:83:79:82:46:c5:e4:1a:6e:95:
20:68:a6:74:81:02:7a:37:6a:d8:cd:c3:09:da:a0:86:ab:d1:
b0:fd:37:be:30:7c:28:ca:54:b1:9c:f6:d1:45:13:63:66:d8:
3f:63:37:f9:51:bc:b6:3e:1a:99:9b:53:2f:f4:66:73:06:ea:
e3:99:1b:3c:47:e5:d5:0d:12:be:a2:cd:a3:f4:82:7b:72:4e:
53:fa:e1:95:10:a9:97:4f:d4:fa:f8:e1:ed:7a:0d:42:4d:9a:
9d:5d:11:f2:bd:48:39:fd:c3:df:fb:f2:da:8f:1d:5c:ec:0c:
92:e5:32:5c:df:45:65:77:ed:00:b1:33:ed:3a:1b:6a:7f:82:
ac:b7:f2:80:49:9d:ec:57:08:d8:51:74:01:e5:50:20:1e:8e:
29:cb:cd:18:d4:ad:84:24:41:9b:09:fa:23:5a:e0:be:45:50:
ad:40:ec:a2:a7:9e:eb:5c:b1:61:2b:c0:fc:06:48:7f:12:09:
92:01:57:a3:d0:df:cf:b6:24:a9:f5:53:02:fe:c2:d8:47:65:
9a:a7:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net