Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0dktVfXxfTsRHIjkRwJUbl2BX3I.roa
File: 0dktVfXxfTsRHIjkRwJUbl2BX3I.roa (raw, json)
Hash identifier: pMti4nf4UToAvffi3V+D7T1zrWKqEbigke27fCAdr9U=
Subject key identifier: D1:D9:2D:55:F5:F1:7D:3B:11:1C:88:E4:47:02:54:6E:5D:81:5F:72
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484D4409AFCF464340527B3DC6FE5D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0dktVfXxfTsRHIjkRwJUbl2BX3I.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212097
IP address blocks: 45.80.82.0/23 maxlen: 23
45.80.82.0/24 maxlen: 24
45.80.83.0/24 maxlen: 24
178.19.36.0/22 maxlen: 22
178.19.36.0/24 maxlen: 24
178.19.37.0/24 maxlen: 24
178.19.38.0/24 maxlen: 24
178.19.39.0/24 maxlen: 24
185.28.49.0/24 maxlen: 24
185.28.50.0/24 maxlen: 24
185.227.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4d:44:09:af:cf:46:43:40:52:7b:3d:c6:fe:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1d92d55f5f17d3b111c88e44702546e5d815f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:72:55:6c:22:d5:1a:8c:94:e7:64:3a:49:
8b:d9:c0:29:85:99:eb:15:11:9b:4e:4a:8d:83:22:
78:96:78:f1:01:9f:f1:ef:a0:4b:06:29:39:22:57:
57:a2:37:61:d9:97:8d:3d:e8:dc:43:82:ae:0c:b6:
dd:79:78:f6:41:f6:01:55:cf:79:5d:fc:02:c6:7a:
b7:35:f5:60:9d:91:ee:34:33:47:bf:c8:43:a0:96:
77:81:3a:28:de:5f:4f:11:cb:81:61:22:a3:ff:01:
9e:03:9e:d5:1b:3e:34:d4:be:2a:b0:b6:1a:09:44:
7d:2d:0d:6a:9c:a2:b3:87:8b:dd:73:2a:9e:6a:ef:
ec:80:8b:93:99:bb:f1:89:27:95:0c:03:90:b1:b2:
92:94:6d:38:ed:cf:31:c4:73:96:4a:ef:30:b7:5d:
cb:a6:77:bb:22:70:82:0b:49:be:36:fb:a6:c3:3b:
67:e3:25:37:1e:41:06:0d:e3:b8:76:c1:77:ff:ea:
1a:8f:e9:f2:7f:a4:49:b8:27:a4:09:98:24:37:0a:
2b:55:ae:10:de:7d:db:59:5a:da:43:43:44:88:6e:
c8:e3:6e:e3:d6:02:eb:f0:84:6d:de:6d:b6:fd:96:
b4:04:65:5b:a7:8c:f8:8c:50:fc:de:a9:92:6a:dc:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:2D:55:F5:F1:7D:3B:11:1C:88:E4:47:02:54:6E:5D:81:5F:72
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0dktVfXxfTsRHIjkRwJUbl2BX3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.82.0/23
178.19.36.0/22
185.28.49.0-185.28.50.255
185.227.102.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e5:e2:e5:8e:04:2f:3c:27:4d:ef:11:ac:a7:be:a1:11:09:
fb:7b:50:9d:e8:5b:67:31:01:92:3c:2d:d8:0d:df:d0:6d:47:
0b:16:93:2f:e3:f0:9e:3b:20:c3:d9:af:46:2f:e5:fe:51:f8:
b0:97:45:65:85:e1:3e:42:59:04:4a:eb:22:ce:54:f5:80:9c:
94:be:9e:d8:08:50:eb:af:1d:ff:f0:1e:54:9a:18:3a:78:b3:
ac:32:cf:1f:48:74:1a:5e:df:15:5b:92:c4:ee:fd:ee:7d:15:
7a:b7:4d:17:73:a8:d9:13:9b:99:3d:00:35:aa:40:41:be:c7:
11:6e:27:93:9a:2d:eb:a9:c8:a6:c6:4a:d4:a1:82:e2:0c:4d:
ed:a6:8b:d1:d8:d9:00:da:8b:45:c3:73:c9:c1:6f:94:b0:86:
24:ba:8e:f3:1c:83:3b:a2:cc:56:9e:6e:84:94:58:33:21:ee:
d3:10:86:23:b6:80:14:5b:7a:c9:9d:db:a6:66:be:e4:d2:ad:
c3:0d:c0:bb:78:78:0c:62:29:21:f0:00:f1:11:66:09:48:9d:
a8:14:64:4e:da:72:75:8e:4f:90:2d:61:38:85:4f:0c:2b:7e:
26:4c:5b:86:6c:1b:cc:32:5b:f2:13:c2:b5:58:7e:1c:1b:28:
22:3d:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:51 2025 by rpki-client