Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa
File: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (raw, json)
Hash identifier: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=
Subject key identifier: 13:9C:45:0C:AF:7F:4B:98:89:18:FE:2C:15:E2:7D:A2:86:68:B0:72
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 01942747559FA35ECEEF19C0AA2EC57FDA48
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa
Signing time: Thu 02 Jan 2025 13:49:33 +0000
ROA not before: Thu 02 Jan 2025 13:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35542
IP address blocks: 80.92.128.0/20 maxlen: 20
185.128.0.0/22 maxlen: 24
185.128.2.0/24 maxlen: 24
185.128.3.0/24 maxlen: 24
193.222.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:55:9f:a3:5e:ce:ef:19:c0:aa:2e:c5:7f:da:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Jan 2 13:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=139c450caf7f4b988918fe2c15e27da28668b072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2a:cc:c0:8d:27:76:60:c1:c4:5f:17:d7:a4:
f1:77:14:7e:61:9e:9a:26:f5:1f:62:1a:30:da:d0:
f1:79:33:23:21:24:54:35:38:02:0f:86:6d:b5:1a:
c2:07:df:7a:b1:0f:a6:b9:61:bc:01:8f:84:43:5f:
8e:63:2f:0a:1f:0c:fb:98:d8:66:9d:35:49:e0:a3:
29:08:ed:fa:a9:27:d7:1c:77:ab:64:81:2b:d7:6a:
28:49:e0:31:5f:ee:27:a9:15:3d:5f:78:c6:7e:33:
67:fb:41:0b:00:90:cc:f8:c2:dc:c2:02:c6:0c:2d:
27:0b:fa:75:48:29:7f:04:74:67:5a:c5:f2:20:b5:
f2:fa:7b:81:8b:77:73:00:66:a0:1e:ce:7c:01:08:
94:58:a2:a3:25:17:1f:f9:2e:96:58:2f:75:4f:a4:
7a:f3:6b:84:d3:bb:11:c2:d3:e7:59:ac:43:0f:60:
a3:c2:4e:3a:de:89:e8:f1:29:6b:c7:a0:35:c5:86:
38:51:88:3c:06:2c:6f:32:12:27:2e:9e:fd:50:8a:
ef:c5:cd:8a:7c:71:26:c8:28:db:0b:aa:ec:54:b9:
00:52:cf:b9:74:a8:3f:30:14:5f:b9:45:3d:bc:dc:
2b:d2:04:9b:6c:3c:4f:fa:8a:57:09:f8:e9:e7:88:
f6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:45:0C:AF:7F:4B:98:89:18:FE:2C:15:E2:7D:A2:86:68:B0:72
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.128.0/20
185.128.0.0/22
193.222.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d9:e6:6e:ee:e5:e5:53:2e:b3:fa:a3:71:f2:12:10:07:9e:
2f:17:b0:37:24:0a:d7:b8:ce:3f:b4:f5:39:1a:de:8b:01:ee:
ef:2d:bb:f1:7f:35:87:74:78:16:d0:42:65:9d:34:ec:e8:f6:
e8:2e:ae:a6:38:ae:fd:c0:6d:76:40:e6:11:8f:ed:de:c8:6c:
00:56:64:b5:51:64:41:b0:5e:85:60:8a:90:e3:39:d7:df:77:
81:cc:69:4f:ac:9e:63:2e:26:ea:4e:bc:14:fa:05:d4:95:11:
fc:4d:36:4c:01:e1:b4:21:30:9d:fa:b3:27:35:e7:70:61:c7:
47:63:74:62:6f:d5:bc:36:69:06:43:da:00:18:8d:d0:11:9d:
3c:ba:87:07:42:27:96:16:a7:5e:3c:fe:78:90:22:27:cf:fa:
27:2e:73:eb:cc:2a:51:6b:91:88:b3:5f:b1:82:fe:f0:8a:ae:
8a:22:90:fc:94:21:23:0b:a7:65:08:e9:ef:50:29:2d:e2:ee:
9b:0f:92:b6:ba:38:66:c0:02:cb:89:2e:20:4b:82:8a:94:e0:
c9:d4:96:bb:82:ae:b4:59:f3:bd:47:ed:a6:fe:85:ad:35:8a:
78:7f:d7:9b:1f:a8:e9:00:a8:49:0a:8f:ee:c4:b6:81:b5:3d:
bf:13:8f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net