Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/1-POXxYDt7Dx_Xn--bakvl-9pseo.roa
File: 1-POXxYDt7Dx_Xn--bakvl-9pseo.roa (raw, json)
Hash identifier: dNDNUAiUbV+epjYiTNeffEC/Hr9nrD8OPyaHypk9Vrw=
Subject key identifier: F8:F3:97:C5:80:ED:EC:3C:7F:5E:7F:BE:6D:A9:2F:97:EF:69:B1:EA
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 01943867923AE2D2544CC3A14773FEA4CCC2
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/1-POXxYDt7Dx_Xn--bakvl-9pseo.roa
Signing time: Sun 05 Jan 2025 21:38:19 +0000
ROA not before: Sun 05 Jan 2025 21:38:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 45.12.32.0/24 maxlen: 24
45.12.33.0/24 maxlen: 24
45.142.0.0/24 maxlen: 24
45.142.3.0/24 maxlen: 24
185.224.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:67:92:3a:e2:d2:54:4c:c3:a1:47:73:fe:a4:cc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 5 21:38:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8f397c580edec3c7f5e7fbe6da92f97ef69b1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:ab:73:28:37:fa:30:9b:30:9d:04:a1:3b:
95:9b:7c:4a:92:0e:ce:c1:bb:cb:61:75:fa:f1:c3:
4c:92:0f:8e:f0:97:23:cc:7b:59:3b:10:6e:b7:fc:
ee:bb:0a:76:98:1b:16:80:69:6b:d3:48:cb:13:18:
02:83:45:e3:79:4b:87:6f:1f:78:98:64:44:99:1f:
93:78:e3:48:3b:a4:9c:c9:9d:2f:ea:1e:98:b2:45:
cd:85:5c:e8:af:2a:38:b8:2f:9c:98:96:89:09:f3:
d4:86:28:48:57:3d:1f:a3:c8:17:cc:7e:ee:16:9c:
30:e3:9b:1f:33:31:79:4d:b6:fc:a7:40:74:8c:76:
47:60:38:92:31:cb:91:ac:21:cb:53:75:35:a7:b4:
25:68:e8:c3:6b:1e:e7:2a:2f:23:3a:f1:15:a1:a1:
fe:c5:a8:ca:2e:b3:d4:57:9d:0e:a7:b9:c3:52:7f:
30:ff:46:e0:fb:bd:cc:30:db:2c:5e:7c:b8:a6:cd:
e0:0e:e0:65:9f:6e:a9:39:de:51:27:37:c7:23:4f:
82:44:b8:8d:4e:a2:c6:f6:84:17:f1:c2:f4:df:90:
ce:be:87:3e:db:80:d0:1f:df:92:0a:87:db:5d:e0:
82:97:0f:f4:83:a2:8f:15:52:b3:a9:83:5c:12:32:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F3:97:C5:80:ED:EC:3C:7F:5E:7F:BE:6D:A9:2F:97:EF:69:B1:EA
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/1-POXxYDt7Dx_Xn--bakvl-9pseo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.32.0/23
45.142.0.0/24
45.142.3.0/24
185.224.217.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4b:ce:76:7c:c2:02:5c:4f:e4:ec:99:38:b8:81:fa:fb:7f:
41:62:03:65:7e:41:7c:3b:95:37:1a:b2:96:6f:fb:84:bc:63:
38:5e:c2:77:18:9a:68:96:86:7d:c0:36:04:9a:bf:99:4c:0a:
40:e8:ab:cf:64:6e:02:98:02:df:20:51:1d:f7:c6:60:25:da:
ae:18:72:3b:e4:39:6d:33:a7:70:77:f0:81:82:b4:39:ab:7a:
8a:e9:a2:77:cd:61:f7:e9:d4:2a:e2:dd:7f:48:64:44:b7:f9:
d3:25:10:a6:3d:49:12:70:cc:e1:f1:60:6f:e7:f0:33:57:55:
23:75:9c:3f:e5:1d:40:ce:80:46:1f:4b:60:eb:9c:df:f5:ac:
5c:f8:0b:4c:c0:b8:02:6a:d3:5f:6a:8d:dc:69:a9:81:43:80:
98:30:16:5a:0d:3c:b1:0d:ed:89:3a:fa:fa:5f:87:d8:fd:a7:
20:f1:d4:32:ea:a7:97:45:94:50:ec:47:e8:f8:e8:6b:d1:9c:
36:de:ad:29:b7:68:ba:7f:b7:84:ca:17:53:04:77:58:1e:df:
6e:5f:f7:d5:6b:f7:5d:b7:a5:91:56:0a:fe:f5:69:d8:13:37:
df:92:05:4a:6f:35:51:ee:07:06:08:64:e9:62:f1:00:ce:36:
e9:f6:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:51 2025 by rpki-client