Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/_0Ovr-P6Apyo_tveovy4IKn6bqU.roa
File: _0Ovr-P6Apyo_tveovy4IKn6bqU.roa (raw, json)
Hash identifier: ocYJ6sP+UnlpINi5qB4yLeRqouA2cf9W4NHegtvwt7s=
Subject key identifier: FF:43:AF:AF:E3:FA:02:9C:A8:FE:DB:DE:A2:FC:B8:20:A9:FA:6E:A5
Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial: 0194282372916762C5A8C1CD5EC67C85E6C8
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/_0Ovr-P6Apyo_tveovy4IKn6bqU.roa
Signing time: Thu 02 Jan 2025 17:49:58 +0000
ROA not before: Thu 02 Jan 2025 17:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203434
IP address blocks: 45.66.232.0/22 maxlen: 24
185.134.164.0/22 maxlen: 24
2a00:b0a0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:72:91:67:62:c5:a8:c1:cd:5e:c6:7c:85:e6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Validity
Not Before: Jan 2 17:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff43afafe3fa029ca8fedbdea2fcb820a9fa6ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:a9:8e:7b:21:37:86:1a:97:d5:fa:2b:da:
d9:20:e4:db:db:e9:35:92:ec:3b:e8:e7:e0:7a:1f:
7f:13:46:3c:2b:62:27:df:41:e9:ae:f5:1e:49:2f:
c5:d2:ed:af:df:03:38:b0:8b:6d:7e:81:e1:05:a0:
6f:f7:bf:86:e5:7b:dc:1e:60:9c:87:ca:ae:51:d9:
79:a3:54:79:6a:05:2b:26:d1:7b:da:ea:60:62:4c:
35:99:19:c3:6b:6b:41:70:e7:dc:95:27:a6:82:7d:
82:7f:57:1f:17:3b:ec:0f:c3:ae:7f:79:84:16:63:
c6:b7:ec:95:cf:c9:bb:cf:03:f3:8f:fe:b4:61:a1:
a6:41:5e:81:cb:7e:f9:a7:26:9d:3e:98:4d:8d:a9:
32:1e:cf:c1:a5:b6:8d:95:09:63:15:3e:91:20:1e:
2f:69:00:50:0a:b1:44:21:28:d1:12:38:bf:ac:9b:
d1:6b:87:db:98:12:20:37:a5:61:f2:12:fd:b6:5d:
64:31:46:5f:dc:37:0e:04:e9:53:2a:e5:89:64:19:
68:7c:07:f6:92:a9:d8:a0:30:35:7e:05:04:01:f9:
8d:22:43:a7:60:b4:d6:82:ec:57:1e:2e:9c:a8:43:
35:f7:3a:dc:38:0d:cb:38:d1:69:71:7b:bb:b4:79:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:AF:AF:E3:FA:02:9C:A8:FE:DB:DE:A2:FC:B8:20:A9:FA:6E:A5
X509v3 Authority Key Identifier:
keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/_0Ovr-P6Apyo_tveovy4IKn6bqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.232.0/22
185.134.164.0/22
IPv6:
2a00:b0a0::/29
Signature Algorithm: sha256WithRSAEncryption
50:49:a2:f6:c9:1d:c2:1d:bd:87:de:20:39:4c:9a:06:4b:86:
72:80:d1:e3:24:48:9d:28:d3:53:ad:70:1b:77:d0:5d:11:84:
96:e3:1b:d8:ab:9c:2c:5b:a1:34:93:59:55:c2:71:4f:53:61:
15:27:c8:dc:1e:c1:b5:96:21:fe:2a:92:19:b7:ac:27:38:0b:
be:03:26:2f:05:26:88:5f:dc:b6:08:89:c9:66:6b:39:43:1b:
5a:c6:a2:6b:a3:25:12:80:76:42:07:f7:24:44:01:23:86:ea:
19:3c:3b:2e:29:0f:6a:9f:13:b0:3e:cd:cd:9a:29:cc:b2:3e:
65:f0:ed:18:f1:46:d3:4b:32:9c:b2:98:cd:ee:49:88:09:b9:
19:05:e0:a8:04:f3:6f:2c:2a:fb:f0:88:ea:08:7e:8e:84:71:
07:6e:4f:fd:c3:ae:64:a1:c1:bd:3c:69:fe:cf:11:7e:48:13:
05:42:26:5b:47:d9:12:ab:d6:ff:38:21:70:bd:93:5e:b1:a2:
d5:ae:ad:8f:2e:78:15:a8:8c:df:26:52:31:5a:8a:a3:dd:57:
74:f8:25:72:76:ee:cd:dd:20:c3:d1:84:31:dd:c8:f3:b2:2c:
b0:43:ad:2d:58:3e:a7:80:7b:06:ad:f5:81:d2:e8:cc:47:7b:
72:73:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:06 2025 by rpki-client