Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/vASHsaghbXrziZGVrZp3z_dQ0hY.roa
File: vASHsaghbXrziZGVrZp3z_dQ0hY.roa (raw, json)
Hash identifier: +D8Rri+Xk/SVSUJL6LzaxDMlSw5qtTcPP6AjI3TjSIo=
Subject key identifier: BC:04:87:B1:A8:21:6D:7A:F3:89:91:95:AD:9A:77:CF:F7:50:D2:16
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 0194228E06AC7AF00A61319A0CC263F9790D
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/vASHsaghbXrziZGVrZp3z_dQ0hY.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207054
IP address blocks: 45.10.12.0/22 maxlen: 22
45.15.92.0/22 maxlen: 22
185.167.112.0/22 maxlen: 22
185.231.192.0/22 maxlen: 22
194.58.24.0/22 maxlen: 22
2a0b:1a00::/29 maxlen: 29
2a0e:2680::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:06:ac:7a:f0:0a:61:31:9a:0c:c2:63:f9:79:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc0487b1a8216d7af3899195ad9a77cff750d216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:ef:cc:1a:18:a4:09:cb:33:1c:95:53:2e:
c8:51:ea:b1:5c:eb:e3:18:af:d8:e9:09:57:70:f2:
31:9d:1a:31:33:47:df:0a:cf:e9:33:95:60:93:76:
b4:ec:13:dd:4e:70:74:6a:c5:28:ec:61:00:2e:ad:
20:81:53:bf:9f:c6:5f:6a:3e:97:54:e9:e0:06:9a:
81:90:16:eb:f9:c6:6c:2d:4e:a9:3e:6d:bc:02:c0:
a3:ae:f5:35:5f:d2:df:e9:67:15:bc:37:2f:6a:15:
5c:80:32:1c:9e:be:10:d2:55:7f:0e:7c:fb:81:a1:
38:99:2c:0d:c0:06:88:fe:0a:b3:fd:31:6a:b5:4c:
2d:36:d4:bc:79:ed:de:b2:06:8e:27:1d:89:21:4e:
34:05:ca:c4:0b:c1:5c:0b:08:14:28:5c:e7:f9:09:
0b:1d:59:60:d5:9a:3f:dd:a5:ea:df:f1:5a:9c:0e:
88:7b:a7:0a:dc:62:a0:13:a0:b5:91:e9:f9:37:7a:
ba:a9:af:fc:06:f3:c1:49:77:27:c5:fb:3d:ab:05:
14:75:59:ff:13:64:10:db:0b:2e:c2:a7:e6:9d:03:
c7:7a:e6:9c:85:ad:15:fc:e6:3e:b3:5a:68:3f:86:
97:86:33:0b:8f:0b:da:f6:72:62:c2:01:99:be:27:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:04:87:B1:A8:21:6D:7A:F3:89:91:95:AD:9A:77:CF:F7:50:D2:16
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/vASHsaghbXrziZGVrZp3z_dQ0hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.12.0/22
45.15.92.0/22
185.167.112.0/22
185.231.192.0/22
194.58.24.0/22
IPv6:
2a0b:1a00::/29
2a0e:2680::/29
Signature Algorithm: sha256WithRSAEncryption
24:72:bd:7a:9d:98:40:f3:41:21:30:ed:48:c9:6e:c8:5a:10:
61:79:88:f6:10:8a:96:c4:01:88:e3:37:fd:5d:d0:27:bb:62:
24:08:63:6e:9d:99:c2:17:51:aa:74:53:8a:0f:bf:13:a8:5f:
ae:a1:3a:a1:fa:1f:e3:11:ac:08:60:1c:e5:32:de:ec:31:da:
59:70:4b:72:79:78:f6:53:25:de:97:50:50:ee:a9:72:8b:f0:
2b:93:df:ec:ee:48:19:c6:e9:e2:5c:b7:b3:cd:54:0d:42:d9:
40:1a:4e:a1:7c:16:2c:d7:1b:6d:23:3e:ca:3b:4d:5c:34:86:
60:d6:08:d0:c4:60:23:26:d7:f6:de:8e:2d:c9:43:a0:ea:53:
5e:c1:8b:5d:26:ef:ef:df:ad:62:7c:24:69:9d:9c:06:f7:e2:
b1:ce:be:36:37:1c:b2:5f:93:e2:74:60:ca:7b:43:7b:c7:96:
f4:25:14:da:15:08:34:0c:41:28:86:45:f9:55:59:12:6f:f9:
38:19:06:40:fd:d6:ad:de:cb:bf:2d:71:a1:94:41:d6:d1:04:
eb:a4:2b:e0:13:fd:f3:e6:bf:90:85:a1:ee:05:b4:a8:66:33:
89:53:03:fd:88:96:76:aa:7f:e9:cc:4c:f5:0e:33:bf:53:4f:
71:a8:15:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:32 2025 by rpki-client