Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa
File: IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa (raw, json)
Hash identifier: iPtJIKNsXTuFfreJtzzF7nkT3NPZDY2s1b/5234g/2Y=
Subject key identifier: 22:B8:CC:AD:BA:70:38:95:87:A5:CB:BE:CC:65:D0:0E:11:CF:C2:52
Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial: 019420D5AECF48636AC83006DE6F9E8F8F19
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209528
IP address blocks: 45.135.64.0/22 maxlen: 24
185.162.136.0/22 maxlen: 24
2a09:2bc0::/32 maxlen: 32
2a0e:8940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ae:cf:48:63:6a:c8:30:06:de:6f:9e:8f:8f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b8ccadba70389587a5cbbecc65d00e11cfc252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:9d:6b:86:73:ab:cb:83:3c:b4:06:fd:f2:
e0:84:d8:0f:8e:b2:d9:5f:8d:08:66:d4:d1:13:c9:
60:f3:ad:d0:c2:ef:44:08:20:7a:23:80:a9:c3:dc:
7a:53:8c:da:31:02:9c:3a:11:57:f8:ce:f0:3e:14:
d1:38:22:b3:29:d9:b7:e9:81:19:12:04:ae:75:bb:
3b:93:93:9a:25:7e:f5:46:c0:50:38:fb:ab:02:f0:
d9:f0:30:aa:29:a3:96:b5:9a:10:2b:c2:a3:62:76:
e6:3b:ec:94:e5:7f:bc:51:56:3d:57:b1:4d:df:40:
37:0e:29:8e:3b:cf:8d:22:b3:a1:26:92:b4:ea:4a:
77:a7:cf:bb:9e:af:5d:30:ba:50:51:fc:1d:c8:44:
44:ea:18:b5:82:ae:76:5e:2a:92:fb:51:9a:e0:1d:
05:0d:5d:85:ac:60:af:17:82:97:a8:fd:98:a9:03:
3d:f8:b4:e7:f1:ab:e4:1f:90:b4:dc:cc:4d:3a:f1:
d7:0c:23:cc:64:f8:e3:6b:52:3e:1a:12:27:90:94:
9f:26:df:a2:20:7a:ac:0b:85:16:eb:41:3e:0e:26:
8f:a2:00:53:d3:a4:64:81:42:8b:5c:5c:f6:2f:d5:
ce:25:81:66:fe:a9:8b:d0:68:e9:ad:19:e2:df:c6:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:CC:AD:BA:70:38:95:87:A5:CB:BE:CC:65:D0:0E:11:CF:C2:52
X509v3 Authority Key Identifier:
keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/IrjMrbpwOJWHpcu-zGXQDhHPwlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.64.0/22
185.162.136.0/22
IPv6:
2a09:2bc0::/32
2a0e:8940::/29
Signature Algorithm: sha256WithRSAEncryption
71:5f:03:cd:53:25:fe:24:fe:a9:08:0a:d1:0e:7e:96:bf:ab:
39:e7:39:d6:e0:7d:96:15:87:35:c5:fb:3a:ad:3c:15:3c:0e:
d5:81:17:dc:9e:6f:e6:ea:36:84:ee:3d:a7:e8:66:bc:f3:c4:
f9:93:87:00:bd:a2:8a:13:33:9a:07:7d:50:f6:a4:48:d0:d7:
e8:5e:f2:64:9f:f2:db:1a:20:33:07:bd:19:60:ca:81:57:97:
73:37:3d:74:4a:e4:96:8f:cc:9f:0b:a2:1b:5f:43:45:54:bd:
15:41:a1:c8:a7:5b:57:0a:46:15:d8:2f:e5:4c:47:cd:21:90:
df:b6:a5:c4:7c:75:87:f0:5b:ee:9a:fe:3d:64:2b:68:fb:0e:
03:9e:e3:8a:ce:28:19:3d:4b:f8:ac:80:30:30:37:05:95:ee:
47:0f:86:f4:78:26:0e:77:a9:bf:3b:48:40:29:84:2b:b3:a7:
4e:4b:57:17:2d:03:e9:87:49:c3:87:6d:ba:dd:9d:bf:d7:f6:
cd:18:2b:ae:ba:f2:5c:5e:f4:0b:73:72:64:fd:b0:a0:a1:b3:
19:88:7f:d4:a0:13:35:e8:b6:f8:df:01:8e:e2:3f:a3:3d:e0:
21:e9:fc:33:54:22:78:bb:5b:f4:96:9b:db:93:41:4a:a1:5e:
b9:7d:3d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:22 2025 by rpki-client