Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BB1d88UdxSrp_ilqEfquHVqCw0A.roa
File: BB1d88UdxSrp_ilqEfquHVqCw0A.roa (raw, json)
Hash identifier: Q29wfGwTuxZ3fcRtHyn3WR2uYETuNSECxOC/ST7z6BE=
Subject key identifier: 04:1D:5D:F3:C5:1D:C5:2A:E9:FE:29:6A:11:FA:AE:1D:5A:82:C3:40
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194363BD7A623D782D01709FB888C01C265
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BB1d88UdxSrp_ilqEfquHVqCw0A.roa
Signing time: Sun 05 Jan 2025 11:31:19 +0000
ROA not before: Sun 05 Jan 2025 11:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.12.61.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.141.178.0/24 maxlen: 24
93.190.246.0/24 maxlen: 24
2a0f:7d03::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:36:3b:d7:a6:23:d7:82:d0:17:09:fb:88:8c:01:c2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 5 11:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=041d5df3c51dc52ae9fe296a11faae1d5a82c340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:77:0a:86:23:ac:3d:44:fa:37:d1:49:7a:
a6:dc:a7:4a:49:1b:a7:1f:b7:4b:24:67:95:4a:8d:
a8:5b:cb:8f:4c:9b:8d:d4:17:49:75:0a:3a:81:15:
a3:01:5e:73:f9:42:ad:0a:a9:80:5e:e4:d7:89:52:
0a:c9:0d:51:cb:18:c2:33:ac:3f:c9:8b:86:6d:04:
ed:a4:6c:4a:df:15:13:5f:0b:1b:6f:29:8f:6a:91:
9b:73:ee:d4:da:1e:97:94:fd:dc:0d:92:34:ec:2a:
30:b6:13:e2:53:21:d2:e0:23:aa:fd:22:60:70:f0:
02:80:63:16:32:96:3a:2c:9c:19:ff:88:59:17:93:
4c:11:a3:ff:49:e3:fc:08:2b:7c:49:e0:74:89:92:
49:a2:8e:9b:70:1d:e2:74:ea:c7:53:fe:73:28:1d:
df:26:ff:dc:67:99:87:a3:d9:d7:e3:c4:d1:aa:88:
e0:56:09:37:58:fb:fc:ca:cd:e8:a4:51:95:29:25:
37:e5:3c:94:68:aa:91:5c:44:ca:98:12:ab:af:91:
64:18:46:41:7f:21:9d:ec:b2:89:bb:f2:0d:f0:9a:
78:7a:b5:f1:a6:0a:9a:a7:59:ef:07:3f:c3:5f:79:
a9:d6:a2:ef:e2:90:64:4c:b9:7d:da:58:e9:ac:92:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1D:5D:F3:C5:1D:C5:2A:E9:FE:29:6A:11:FA:AE:1D:5A:82:C3:40
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BB1d88UdxSrp_ilqEfquHVqCw0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.61.0/24
45.128.79.0/24
45.141.178.0/24
93.190.246.0/24
IPv6:
2a0f:7d03::/32
Signature Algorithm: sha256WithRSAEncryption
07:b8:f6:2f:10:04:60:d1:db:ef:e9:d1:cc:50:66:f6:ce:d4:
aa:ef:a1:e0:72:20:0e:11:3c:e3:a4:d2:81:0b:79:53:54:e9:
6e:c5:fb:a9:b1:dc:78:07:e2:b5:68:a4:05:fc:91:6f:7f:cb:
f4:b9:a8:f8:b0:33:ff:41:b4:42:a6:76:8d:ae:5d:37:8c:36:
9c:3e:e8:90:bd:ae:18:43:55:62:ed:2b:5f:7d:0d:fc:11:11:
fd:bb:b6:c2:c9:8b:65:6f:6f:aa:23:6c:88:17:42:b2:9d:65:
91:fc:b7:51:a9:92:f3:e4:2f:c3:c0:4f:7f:9d:da:cc:0e:31:
5a:01:59:11:cb:16:39:bf:60:ef:90:74:30:5e:2c:cc:d0:43:
da:34:32:1a:8a:09:96:e9:32:3c:fe:fb:70:68:0f:6e:8c:68:
71:66:af:a0:e1:74:01:5b:02:9a:6e:b5:03:30:1e:07:28:85:
e7:ac:7b:07:bc:44:05:26:18:a0:5b:f3:84:1f:f6:79:50:7a:
ce:4d:9b:2a:a1:88:47:81:db:22:55:dd:a4:93:3d:31:c9:ee:
10:4f:01:bd:ba:42:3a:8f:30:ce:6e:b2:d4:d8:3d:0b:45:9e:
c2:3c:21:20:ff:be:6c:19:83:bf:84:e0:21:1b:ad:17:05:25:
32:91:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:03 2025 by rpki-client