Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vT1voEOwb04DiaOm9Jx7DhXXRgg.roa
File: vT1voEOwb04DiaOm9Jx7DhXXRgg.roa (raw, json)
Hash identifier: fliGNC3E/hNfdIUGEHAIieARLJRJ8iJUW0bWk4hGllw=
Subject key identifier: BD:3D:6F:A0:43:B0:6F:4E:03:89:A3:A6:F4:9C:7B:0E:15:D7:46:08
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194A83004B6539E335F6D8DF03D7D702B42
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vT1voEOwb04DiaOm9Jx7DhXXRgg.roa
Signing time: Mon 27 Jan 2025 14:35:06 +0000
ROA not before: Mon 27 Jan 2025 14:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:30:04:b6:53:9e:33:5f:6d:8d:f0:3d:7d:70:2b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 27 14:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd3d6fa043b06f4e0389a3a6f49c7b0e15d74608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:a2:fb:36:94:c8:c5:4b:3c:1c:85:59:f6:
dc:31:a0:9a:05:c1:c0:58:1e:6d:c2:96:d8:42:f0:
f5:22:ae:ae:57:7a:05:2b:41:dc:9a:fd:e0:74:8e:
32:91:56:97:0a:fa:79:31:f7:b5:c7:70:71:d5:de:
be:64:98:55:54:a6:7a:86:ed:ec:5a:ce:28:f0:9a:
7a:68:47:a0:a0:35:f9:ef:ee:da:cc:6d:78:0f:40:
5e:a4:4e:bc:96:e5:c8:c0:7c:14:26:5b:a7:d2:d5:
49:48:65:d3:5e:d5:a3:64:04:8a:d3:cb:cd:82:cb:
92:62:1f:e8:2c:0d:dd:00:97:2b:a8:70:23:fd:d9:
33:3b:c2:13:dc:4b:91:19:d8:d5:4c:60:17:59:00:
fa:8a:73:bc:2e:f7:47:8d:69:5f:26:3a:fb:b1:8f:
23:cb:2a:fe:45:0d:86:8c:50:75:b2:78:5a:aa:59:
48:1f:a2:83:89:1d:58:f2:27:da:18:40:34:2b:ac:
08:db:c3:bd:c1:47:7a:77:b3:ab:87:26:c8:43:18:
6b:e0:aa:72:f0:bb:39:74:60:d5:a1:72:93:f2:66:
a6:f2:cf:ca:98:1e:a8:d9:f8:cd:c2:bf:a5:67:88:
36:9e:b4:41:20:c3:ca:66:22:48:89:2d:d5:4c:01:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:6F:A0:43:B0:6F:4E:03:89:A3:A6:F4:9C:7B:0E:15:D7:46:08
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vT1voEOwb04DiaOm9Jx7DhXXRgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.123.0/24
91.92.67.0/24
94.156.152.0/24
185.252.177.0/24
193.47.62.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3d:7b:ae:10:69:9f:0d:e1:78:9c:8f:dd:9d:6b:65:cb:e4:
e1:d3:31:4f:4a:89:bd:07:d2:81:b2:55:f5:36:f8:cd:78:46:
a7:eb:b7:47:a1:b8:86:6d:54:6e:b0:19:61:53:5b:dd:fe:a4:
c5:06:23:dc:e8:81:72:ea:2e:8a:5b:8e:36:61:a2:91:d7:e2:
cf:92:95:51:7d:9c:ee:07:72:b6:15:8f:89:ef:1b:b0:10:34:
b7:c5:cf:79:25:cf:89:3e:c6:78:08:7a:53:4b:cd:49:77:52:
61:91:bb:a3:d3:7f:c0:05:23:19:ca:cb:4e:b2:34:fb:84:9c:
21:fa:ee:f1:9f:36:24:74:fa:dc:b7:90:de:ac:27:ac:2c:c9:
95:9e:4b:d5:99:52:0b:db:26:24:a9:29:17:27:3a:c5:9f:ae:
4f:a9:15:11:30:41:df:9a:52:96:8e:23:86:f7:96:da:22:d1:
be:01:59:97:0b:ca:c5:91:fa:ff:7f:53:11:15:be:15:5e:c1:
2f:98:ef:0a:34:7a:a9:aa:82:aa:5e:be:0b:7e:3b:cb:a3:9f:
1b:df:e3:60:21:af:4e:dc:99:63:ad:b8:86:12:da:f4:c1:cb:
65:df:42:84:0b:c7:fd:1d:4e:4e:04:f2:02:14:05:d5:4f:33:
91:d4:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:00:38 2025 by rpki-client