Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/fFywTXucRieRgQK-rFlig22-7Uo.roa
File: fFywTXucRieRgQK-rFlig22-7Uo.roa (raw, json)
Hash identifier: ggPixnLyMlBPlGzjyhzPVyODIw6dgwSYLKKsyn5aAkE=
Subject key identifier: 7C:5C:B0:4D:7B:9C:46:27:91:81:02:BE:AC:59:62:83:6D:BE:ED:4A
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C88A49F94C1D42A7CC9AB4E24D5CC
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/fFywTXucRieRgQK-rFlig22-7Uo.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200436
IP address blocks: 45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
89.42.44.0/24 maxlen: 24
89.42.45.0/24 maxlen: 24
89.42.46.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
188.240.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:88:a4:9f:94:c1:d4:2a:7c:c9:ab:4e:24:d5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c5cb04d7b9c4627918102beac5962836dbeed4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:4f:45:b0:b3:c2:9a:fd:ce:e1:1f:34:25:
12:3b:e6:a2:3c:c5:2a:81:60:ce:39:95:c6:cb:58:
db:79:d8:84:9d:17:d5:33:ca:f5:ab:ed:f2:48:87:
c8:c2:a9:d5:b1:a4:0e:f6:5b:79:0f:5d:e2:13:e1:
66:fe:05:88:29:1f:f3:a0:1d:aa:0f:24:0f:07:23:
d3:14:8d:db:a7:15:dd:b2:74:3e:91:d0:81:1a:8e:
a7:0b:6c:5c:77:02:0e:6b:bc:1e:10:fa:48:7b:08:
f6:41:97:9d:43:3c:95:18:c9:8c:73:f3:a6:99:81:
25:d2:f3:44:ad:c9:87:6b:07:1e:86:f0:0c:f8:d4:
2e:1d:2b:83:83:b4:7c:66:af:1a:2e:63:03:7f:c7:
bf:0e:f6:89:2a:f7:8c:04:36:93:ba:54:06:c9:ae:
71:b1:6f:7c:aa:7a:89:12:75:62:88:87:88:98:9b:
6a:73:3e:3f:05:08:e0:29:1e:8f:7c:4f:f6:26:c1:
da:31:c8:67:c9:a4:c3:85:e6:d8:65:37:2b:e0:a4:
61:e8:11:f4:c4:65:1a:70:ff:4b:73:37:4d:9b:aa:
95:2e:b1:eb:03:db:c6:5d:00:1f:d5:47:18:70:49:
c2:57:1e:d9:fb:16:80:7b:63:22:07:b9:e1:e6:68:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:B0:4D:7B:9C:46:27:91:81:02:BE:AC:59:62:83:6D:BE:ED:4A
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/fFywTXucRieRgQK-rFlig22-7Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/23
89.42.44.0-89.42.46.255
185.3.200.0/24
188.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e9:2d:b1:20:30:18:74:77:af:a1:f4:7b:cf:d0:a2:e6:b8:
7a:9b:86:75:3e:35:ab:a3:1f:9b:23:a6:d9:52:ce:23:29:08:
4d:e4:c9:bd:67:ae:3c:4e:64:7d:9f:e9:57:ac:fa:d1:ae:7f:
4c:d7:c1:ee:5b:2c:39:1c:c2:0f:fd:17:04:c9:b2:59:d6:15:
50:18:71:63:4f:ef:6e:bc:12:a9:34:6e:28:fd:fe:1d:57:79:
93:64:04:27:2a:cf:71:12:3c:3a:c7:87:3e:e5:37:b9:77:45:
ef:5a:0f:26:df:6b:81:16:f5:ad:83:2a:49:95:b1:71:3e:1a:
3d:11:99:76:39:66:57:a0:5b:ba:4b:14:c6:81:10:4a:78:85:
59:ea:e5:e6:a0:3f:41:a5:a1:94:4e:64:12:08:f4:40:6d:f8:
70:bd:6d:b4:1f:5f:4e:7a:dd:46:33:a1:e1:15:98:3b:d8:e6:
e8:0c:d6:93:6d:1c:2f:70:9b:fd:40:ef:96:95:0b:73:f0:d5:
bb:a4:9a:67:84:1c:46:06:08:c0:84:ac:81:ec:9d:e8:40:c2:
3d:63:f8:f7:f5:e1:1d:a8:45:c2:8e:ba:e3:55:fc:9c:05:8f:
51:37:0c:ce:2a:e9:b5:46:62:bf:34:76:39:db:08:ce:e0:66:
f7:26:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:39 2025 by rpki-client