Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/EgErgvQceBTPUKerrJQnynCvMcs.roa
File: EgErgvQceBTPUKerrJQnynCvMcs.roa (raw, json)
Hash identifier: AK/pqOvW1MwrV9sgUMMl9qeVp9qpYYL+yJw5+cnIWRs=
Subject key identifier: 12:01:2B:82:F4:1C:78:14:CF:50:A7:AB:AC:94:27:CA:70:AF:31:CB
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 01939688D50B72FDE75B3E7C4F18EE87370E
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/EgErgvQceBTPUKerrJQnynCvMcs.roa
Signing time: Thu 05 Dec 2024 11:16:10 +0000
ROA not before: Thu 05 Dec 2024 11:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6747
IP address blocks: 62.63.159.0/24 maxlen: 24
78.28.197.0/24 maxlen: 24
80.232.180.0/24 maxlen: 24
80.232.181.0/24 maxlen: 24
80.233.136.0/24 maxlen: 24
81.198.93.0/24 maxlen: 24
195.13.180.0/24 maxlen: 24
2a02:16d8:105:9::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:88:d5:0b:72:fd:e7:5b:3e:7c:4f:18:ee:87:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 5 11:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12012b82f41c7814cf50a7abac9427ca70af31cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:28:25:37:39:d8:4c:f2:85:64:f8:67:96:
42:56:84:20:c4:ae:b8:7d:7a:58:5a:1c:bd:22:b4:
22:48:0a:81:4f:1e:0e:c9:26:37:f2:a0:d6:8d:8c:
2c:b6:53:d9:84:2e:d8:02:6c:b9:67:77:50:44:57:
ab:81:57:f9:70:af:dc:35:da:02:e9:0f:66:3a:bb:
86:99:0b:92:08:ca:df:3c:b6:21:1d:1f:9b:c7:dc:
6c:56:5d:e3:84:f0:4a:35:76:e4:34:4c:ed:09:85:
ff:d1:58:7f:a3:7a:22:00:a9:38:ef:a5:55:f8:1c:
8c:9f:b9:4e:a0:6e:cf:00:40:4e:04:3c:d6:7e:d6:
82:a2:fd:01:10:4a:d7:a9:63:a6:f8:d7:78:06:8a:
77:a2:a9:9a:af:f7:e4:6e:06:ea:d6:c4:0b:02:97:
0c:7e:1e:ab:89:b3:a1:07:a3:1e:24:10:fe:0e:e9:
84:ec:24:3e:57:64:c7:cd:bb:b2:b2:f4:48:36:a9:
28:fb:7a:8e:f8:a5:6a:8e:ab:79:e2:56:15:32:81:
e8:8d:98:fe:4f:e5:aa:76:9d:93:84:d5:01:4a:03:
d0:f6:8b:0b:56:7f:30:f0:c2:3f:fb:9c:4a:36:dd:
15:77:d8:5b:da:06:20:eb:02:11:7f:24:a7:80:1e:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:01:2B:82:F4:1C:78:14:CF:50:A7:AB:AC:94:27:CA:70:AF:31:CB
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/EgErgvQceBTPUKerrJQnynCvMcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.159.0/24
78.28.197.0/24
80.232.180.0/23
80.233.136.0/24
81.198.93.0/24
195.13.180.0/24
IPv6:
2a02:16d8:105:9::/64
Signature Algorithm: sha256WithRSAEncryption
41:4b:66:90:7a:94:1e:75:b4:9d:26:c8:9e:29:4d:27:38:d2:
24:a9:83:0e:eb:49:25:61:93:c7:93:dd:de:eb:db:24:a0:23:
b3:f7:19:f6:8d:0e:cd:7c:2e:3f:43:46:98:91:0b:36:ec:a6:
f9:bc:ca:f0:11:7d:e9:65:06:ee:9b:3e:a4:f9:f5:67:ab:db:
c9:7a:2b:05:9a:5f:09:77:a5:83:6b:30:d3:4e:38:5b:b4:03:
94:d7:ea:83:2c:ed:cb:5d:d3:f1:ac:6d:a2:a1:af:5c:b3:d0:
a1:60:22:e2:e5:27:88:48:af:e4:c6:7b:46:7d:99:48:a3:17:
c5:75:32:27:f7:42:65:6e:21:fd:de:26:41:ff:fa:ac:e9:39:
41:f3:65:bb:bf:8a:6b:28:11:07:e9:92:85:5e:40:79:30:96:
8c:af:66:4b:be:c1:bf:77:32:5e:3e:5d:1c:ae:f7:0f:2f:61:
ad:0d:86:98:35:88:a1:7d:ef:e7:34:01:e6:78:9a:a2:33:bc:
0e:f0:7f:87:67:db:d5:7e:fd:c7:ce:c4:ec:7e:45:27:05:a0:
f3:f3:92:71:96:c4:fd:65:b4:ff:61:86:f2:16:d5:15:18:a6:
1e:b1:96:8b:54:63:46:ba:9a:d9:64:67:9d:33:7e:e1:17:5d:
33:9f:d2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:38 2024 by rpki-client on console.sobornost.net