Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AVoIcBVSIsEGYpvfENpJQBYpzvg.roa
File: AVoIcBVSIsEGYpvfENpJQBYpzvg.roa (raw, json)
Hash identifier: dA6I5Eq3//Zl1QEKWwxApvB06Tvr2eAA705kGvzn9cA=
Subject key identifier: 01:5A:08:70:15:52:22:C1:06:62:9B:DF:10:DA:49:40:16:29:CE:F8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274822064E129BD1EA436B08B7EB9652
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AVoIcBVSIsEGYpvfENpJQBYpzvg.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 45.13.184.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
84.21.189.0/24 maxlen: 24
84.21.190.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:22:06:4e:12:9b:d1:ea:43:6b:08:b7:eb:96:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=015a0870155222c106629bdf10da49401629cef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:c2:c5:2c:67:a8:f8:ff:ef:fc:dc:75:58:
88:ab:5c:1e:d4:88:0d:dd:c1:62:6a:5f:87:1c:99:
16:dc:4e:cd:86:2a:b5:d0:10:7e:bc:0a:36:da:22:
53:0f:92:78:1d:4c:5b:06:e8:2a:79:99:d5:56:8b:
60:f6:94:f5:ff:45:12:d3:69:2a:c8:78:46:0d:b4:
db:1b:84:8f:fc:10:99:36:40:a1:46:6b:19:51:49:
ad:50:d2:8c:9d:c4:94:82:e9:61:54:4c:7c:6e:4b:
19:57:43:1c:19:ec:0e:92:13:8c:37:25:36:27:17:
bd:c2:66:56:27:e0:ba:92:c6:5e:c0:fa:97:66:b6:
6b:ea:ed:79:04:7b:ae:79:42:b3:ca:eb:14:2f:20:
18:3d:89:92:6e:f9:cc:c5:4b:49:b1:e3:10:a5:29:
5c:54:a0:0f:91:06:ff:44:a9:bb:6d:42:a9:e8:a1:
39:2c:59:ad:a4:b9:f3:86:cc:b7:9a:37:db:c5:e1:
93:10:6c:41:d8:37:78:09:7a:b1:64:a8:dc:6f:32:
08:5a:94:bf:fb:db:53:4f:1a:7c:14:d2:4a:3e:f7:
06:24:0c:ed:a2:57:2c:5d:59:7b:3b:5a:32:56:c5:
e1:b1:3a:3d:fa:ae:b1:c3:7b:7b:8f:5a:b8:3c:a5:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5A:08:70:15:52:22:C1:06:62:9B:DF:10:DA:49:40:16:29:CE:F8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AVoIcBVSIsEGYpvfENpJQBYpzvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.184.0/24
45.128.77.0/24
84.21.189.0-84.21.190.255
185.136.204.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ef:54:58:aa:d1:c3:17:2f:c9:e2:cc:e8:0a:b4:f4:5a:a2:
15:f4:b9:10:04:a1:9d:26:42:3d:78:5a:aa:73:57:28:2d:96:
80:e3:6b:20:99:58:9f:3b:20:12:f8:94:d0:45:7b:49:d8:14:
dd:9b:11:3b:e6:e5:fd:49:71:ce:8f:0b:2b:2f:e5:28:85:cc:
d3:d1:25:aa:ee:e7:9d:cc:2c:b3:d4:df:97:99:eb:70:1c:ea:
dc:cd:82:7c:0d:d2:f3:fc:9d:c9:e8:42:94:63:1b:d6:3c:00:
08:88:d8:03:08:e8:4b:27:a5:76:72:82:51:e7:e9:3e:56:3d:
e7:3a:15:89:9a:86:22:0e:64:f5:15:0d:72:44:8c:7f:2d:33:
c5:07:76:ac:b0:29:de:2f:83:52:09:d9:17:e4:46:e2:9b:01:
b2:e0:99:f1:71:37:0f:0e:86:65:3f:cb:a3:62:17:27:9d:ef:
eb:d7:4d:c5:ce:4b:47:2e:73:7f:a1:95:87:90:df:bc:64:c3:
48:44:db:b1:22:eb:6d:3f:7d:e3:b7:a6:cf:bd:9a:19:4b:bb:
22:09:75:7c:e7:1a:2b:2d:54:b7:c3:55:b8:33:69:41:28:63:
9f:60:2a:3e:36:03:d7:bd:4b:8c:b4:68:51:10:f8:75:95:86:
cd:73:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:55 2025 by rpki-client