Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa
File: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (raw, json)
Hash identifier: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=
Subject key identifier: 15:47:03:05:C7:44:45:70:EF:A5:2A:55:56:D4:34:31:16:6A:D2:E0
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 0194228D8C229F5E2D4DC8591CF00E15AC62
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48886
IP address blocks: 45.91.68.0/22 maxlen: 22
45.91.68.0/24 maxlen: 24
45.91.69.0/24 maxlen: 24
194.69.16.0/20 maxlen: 20
194.69.16.0/24 maxlen: 24
194.69.18.0/24 maxlen: 24
194.69.19.0/24 maxlen: 24
194.69.20.0/24 maxlen: 24
194.69.22.0/24 maxlen: 24
194.69.24.0/24 maxlen: 24
194.69.26.0/24 maxlen: 24
194.69.27.0/24 maxlen: 24
194.69.28.0/24 maxlen: 24
194.69.29.0/24 maxlen: 24
194.69.30.0/24 maxlen: 24
194.69.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8c:22:9f:5e:2d:4d:c8:59:1c:f0:0e:15:ac:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15470305c7444570efa52a5556d43431166ad2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:0b:9f:a0:13:19:fb:9b:a6:80:29:5d:9d:
7b:77:0f:ca:6c:b6:2a:c1:fa:9c:7f:8c:63:c5:8c:
31:59:50:05:e2:85:6c:c6:be:ef:08:d0:d0:19:65:
70:65:eb:48:df:89:64:8f:e9:2f:eb:53:e4:bb:5c:
3f:05:18:42:d3:71:9c:b1:9e:f3:01:ed:44:23:01:
46:d7:92:eb:a1:df:0f:ee:b1:04:9c:f7:d7:04:99:
5e:45:bb:70:e0:e3:f1:5c:94:60:82:c7:44:08:fa:
17:9f:2e:e2:2a:a4:66:8b:c8:09:73:a5:b8:a6:a8:
e9:d1:72:10:65:07:5c:e4:d6:6b:c4:97:cc:07:69:
52:e9:79:c2:dc:ff:b6:87:ec:b1:19:50:82:c1:57:
84:ae:38:9d:3d:0a:9d:51:fd:14:f9:4f:79:b1:ae:
5f:d1:3f:4e:a5:8e:60:83:09:ab:df:1c:4c:4e:fc:
b3:50:b8:59:00:d7:37:6d:9c:42:09:f6:b5:51:14:
02:fb:95:fd:9f:5c:7d:79:04:3c:f5:43:40:94:e9:
01:ab:57:aa:61:36:83:8c:63:15:85:21:17:0d:a6:
32:08:c2:70:9e:b8:42:fc:70:5b:9c:57:38:92:b6:
b0:b2:03:d2:10:1b:9d:9a:ac:8f:e6:39:fa:4b:d1:
d4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:47:03:05:C7:44:45:70:EF:A5:2A:55:56:D4:34:31:16:6A:D2:E0
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.68.0/22
194.69.16.0/20
Signature Algorithm: sha256WithRSAEncryption
62:6e:cd:dc:03:20:94:76:25:29:37:79:91:0b:90:bf:05:3b:
fb:02:c1:1b:9e:5c:9e:67:73:ab:c6:a5:6e:bd:08:b8:9a:a8:
13:7a:98:ac:a6:1c:b2:3f:48:fa:22:3a:7d:13:7c:36:10:af:
70:e3:51:09:28:df:5c:d4:33:29:cd:27:0a:ab:6a:4f:ee:2e:
31:42:91:d7:cd:b4:ba:a9:6d:6b:f0:1c:10:b2:5b:65:19:44:
b5:38:03:54:1b:9e:3b:32:7c:f9:5a:1d:b4:18:fe:fa:16:23:
6f:4d:0f:27:55:d4:59:24:e1:02:9f:08:d5:4d:a7:a6:f7:d4:
1f:27:7e:cc:40:e5:b2:f7:47:9c:ae:c1:09:88:c3:57:dc:bf:
2b:05:41:cc:8f:03:a8:88:5f:23:72:f6:cf:32:db:07:19:b0:
ac:eb:69:44:52:ed:56:d7:19:ef:45:75:10:6d:95:02:ea:90:
d6:f8:54:89:47:64:96:90:d0:b7:cb:0c:26:a9:80:44:6b:f9:
76:39:34:06:1f:06:b5:29:b4:45:27:c2:09:10:ea:31:b7:01:
e1:14:7d:e8:36:14:b1:8c:72:c9:49:9f:39:1e:5a:89:46:ef:
85:15:dc:6a:67:05:26:f6:12:90:ca:84:6e:af:4c:80:50:65:
6d:01:7d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:11 2025 by rpki-client