Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1Sn9zhEmXQkBdjv9HZaiy5tZJk4.roa
File: 1Sn9zhEmXQkBdjv9HZaiy5tZJk4.roa (raw, json)
Hash identifier: LBtW2GZc+Wr7sqBbBh5+QknysDZKPxvENeaap9toaJE=
Subject key identifier: D5:29:FD:CE:11:26:5D:09:01:76:3B:FD:1D:96:A2:CB:9B:59:26:4E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01949291A793386E8B28D46019FEDD13B819
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1Sn9zhEmXQkBdjv9HZaiy5tZJk4.roa
Signing time: Thu 23 Jan 2025 09:50:06 +0000
ROA not before: Thu 23 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:c782::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:bc01::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a10:67c1::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:91:a7:93:38:6e:8b:28:d4:60:19:fe:dd:13:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 23 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d529fdce11265d0901763bfd1d96a2cb9b59264e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:dd:fc:65:10:7e:4a:c4:c4:5b:94:96:32:
0c:96:4c:26:c6:86:ad:0a:fd:a8:8d:66:bb:c5:ff:
4d:58:4f:4e:24:b1:6f:dd:67:f9:40:e6:24:b8:39:
f5:ae:5d:38:b6:c8:10:a4:36:cc:0e:dc:5b:59:51:
13:23:b8:e1:dd:98:c1:20:e7:64:55:0a:27:19:16:
53:1b:4e:58:60:e7:15:57:02:b6:4e:01:fc:4a:84:
1d:cc:66:7e:38:c6:88:f3:64:74:dd:28:e2:3f:7a:
4b:ab:38:6b:61:fd:2c:e8:42:bf:a4:cd:0b:4d:76:
b0:f7:7f:5f:b5:5f:68:7c:99:d5:fe:40:4d:71:cd:
a5:03:5f:5f:79:34:cd:f5:da:32:16:22:24:46:27:
c4:76:30:9c:95:29:8d:b2:a7:6a:ff:f1:d0:62:8f:
0a:76:ef:b2:fa:0b:f3:a8:f4:39:d6:6b:9e:ec:09:
cc:73:02:e0:8b:0c:5b:83:3b:d2:21:4f:23:9f:61:
aa:b8:1c:76:00:c9:c9:fb:19:91:67:e3:17:4a:cb:
e7:d7:a7:a2:86:26:2d:84:e2:b1:0d:3f:af:cd:60:
24:b8:c1:8b:51:fb:be:e4:72:55:b4:40:1f:c2:36:
a0:81:6b:65:3e:52:ce:ee:45:5a:1b:3d:4e:61:0e:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:FD:CE:11:26:5D:09:01:76:3B:FD:1D:96:A2:CB:9B:59:26:4E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1Sn9zhEmXQkBdjv9HZaiy5tZJk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:c782::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:bc01::/32
2a0f:e1c6::/32
2a10:67c1::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
6f:d3:90:fc:b8:45:3b:ba:a3:46:1f:a3:32:29:33:ae:73:a7:
6f:3c:a5:03:59:08:2e:72:be:60:56:1e:7b:34:05:c1:24:1c:
7a:02:83:1f:1f:68:b5:6f:64:b8:06:11:3f:1f:0a:91:8d:77:
84:db:91:0c:05:2e:af:e4:4f:b7:bf:4d:78:be:56:b2:dc:11:
b9:e6:a8:cc:35:ea:7b:78:d5:e1:8b:37:31:ff:78:28:5f:ae:
01:f2:2b:37:ff:62:fb:04:bc:41:dc:ea:63:d4:ec:cb:e3:e5:
fb:7c:3f:96:bc:98:35:5c:68:bc:db:4e:99:91:d8:a6:95:d2:
8a:8f:02:e6:34:b4:9e:18:80:98:55:bb:bd:a8:b6:94:7c:90:
aa:82:9f:da:96:2b:23:0b:0c:1c:82:70:cc:3e:15:7d:4c:47:
b8:37:a3:ff:61:2b:fe:7a:15:7a:8e:13:4b:bc:8d:24:ab:ab:
65:ac:29:41:b2:c9:bb:a9:a8:09:47:53:f1:c1:b0:65:87:63:
68:c0:f7:6e:cb:21:a3:82:81:52:2f:77:a1:1a:d6:25:bf:db:
75:77:f6:2c:a3:65:98:19:7e:a1:86:06:18:00:0f:bd:71:41:
5f:89:8c:05:7b:97:a9:2b:be:9d:fe:43:b3:73:41:47:34:03:
a0:c8:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:38 2025 by rpki-client