Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/jIxoBxvUdMCHFAPIgbpTv82jWLo.roa
File: jIxoBxvUdMCHFAPIgbpTv82jWLo.roa (raw, json)
Hash identifier: HrwO1TMjewTexEY6JfFnwLbtTAOtQU58BOb2eJzb5To=
Subject key identifier: 8C:8C:68:07:1B:D4:74:C0:87:14:03:C8:81:BA:53:BF:CD:A3:58:BA
Certificate issuer: /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial: 019420685879B2F28A08B9CC71FFE5C46585
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/jIxoBxvUdMCHFAPIgbpTv82jWLo.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34814
IP address blocks: 46.149.80.0/20 maxlen: 24
91.203.12.0/22 maxlen: 24
193.16.45.0/24 maxlen: 24
193.37.156.0/24 maxlen: 24
193.151.104.0/22 maxlen: 24
195.60.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:58:79:b2:f2:8a:08:b9:cc:71:ff:e5:c4:65:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c8c68071bd474c0871403c881ba53bfcda358ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:41:ca:9d:00:b9:4d:8e:be:b7:ae:66:f8:
0d:56:0e:43:dd:f6:ec:f7:89:b4:09:a8:95:b5:dd:
c9:45:ee:40:51:30:b8:78:08:5c:51:a5:25:64:d0:
3d:74:dd:82:55:66:47:90:ac:93:9e:86:89:91:1d:
8d:b5:bd:a1:3b:2f:2f:e7:d4:93:47:a2:d4:01:1e:
04:cc:c0:81:5a:89:bc:43:9a:98:a8:84:eb:2f:5e:
eb:09:c5:12:1a:46:56:f8:27:e1:46:6f:3a:f5:86:
6c:83:f9:b0:5b:d3:c0:66:1f:66:83:b7:57:b5:4c:
93:07:84:cd:ab:44:6a:45:e1:00:0d:9f:5c:e0:88:
5a:d4:bf:28:b1:dc:64:0d:cb:eb:e7:04:1e:4b:b4:
64:f7:7a:3f:54:65:27:0f:48:71:7e:d3:44:89:58:
09:94:57:67:a3:cd:66:27:33:7c:66:3c:b3:e0:84:
41:c7:47:db:4e:8c:08:da:c9:29:cb:12:cc:f6:c7:
78:90:96:e8:7d:e1:08:c8:6a:7c:8a:4b:4f:38:3b:
bb:53:85:5f:8f:86:8e:6d:60:b6:a1:9a:7d:b8:69:
40:5e:1b:1d:a6:82:7a:42:6c:21:53:da:17:25:c8:
fe:27:09:53:95:30:d8:e9:b7:fb:2e:d0:3f:37:27:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8C:68:07:1B:D4:74:C0:87:14:03:C8:81:BA:53:BF:CD:A3:58:BA
X509v3 Authority Key Identifier:
keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/jIxoBxvUdMCHFAPIgbpTv82jWLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.80.0/20
91.203.12.0/22
193.16.45.0/24
193.37.156.0/24
193.151.104.0/22
195.60.174.0/23
Signature Algorithm: sha256WithRSAEncryption
44:c7:7d:15:1d:f5:ca:a3:49:88:99:bb:d2:f1:eb:1f:02:42:
9d:1c:e3:40:97:05:f8:65:e6:8f:ba:46:7f:e1:13:ca:27:08:
b5:f1:78:32:8f:a4:61:6b:70:14:cd:13:ca:13:a7:14:71:ba:
ce:83:4c:d8:ed:83:63:8b:78:11:43:66:62:d9:05:08:6c:9f:
db:68:7d:93:2d:4d:1c:3c:90:84:c0:8b:11:30:b9:e3:4d:fb:
bb:bf:e2:58:f4:74:3f:e5:b9:41:bd:5e:3b:3c:61:04:83:0a:
ae:85:d7:d4:b6:01:2b:af:f3:cf:52:38:aa:a7:ce:f2:f5:da:
2d:03:60:28:f5:3e:8e:97:2d:cc:c2:33:60:73:a2:77:dc:90:
a2:f6:65:6f:2c:90:41:ae:46:ef:8c:ac:e3:be:80:af:d0:da:
f6:60:39:04:25:1c:af:e5:57:12:27:12:fb:d0:1e:75:9c:53:
f0:ae:17:3f:2e:12:39:93:09:c2:32:e0:ab:75:9c:ba:32:41:
f7:50:fe:52:c9:7f:b7:03:af:f2:f0:df:ee:90:1a:e7:6e:8a:
24:42:0e:a4:2e:11:34:6b:03:37:ea:12:e7:dd:63:2d:0a:96:
51:8b:21:a9:9d:b6:d5:0a:ca:0e:52:eb:12:55:25:cd:32:e0:
b9:9d:49:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:26 2025 by rpki-client