Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b8bvFn00dJ3WwiwqC0cDM1SZyJs.roa
File: b8bvFn00dJ3WwiwqC0cDM1SZyJs.roa (raw, json)
Hash identifier: A+b9XxMEq9cCiWJ66JGKzzTgvfUaQST0ZPsCpVlMvqg=
Subject key identifier: 6F:C6:EF:16:7D:34:74:9D:D6:C2:2C:2A:0B:47:03:33:54:99:C8:9B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194AC2F93A2DABF3E7956581FD2EF3824E7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b8bvFn00dJ3WwiwqC0cDM1SZyJs.roa
Signing time: Tue 28 Jan 2025 09:13:06 +0000
ROA not before: Tue 28 Jan 2025 09:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.87.243.0/24 maxlen: 24
193.58.108.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
2a09:17c0:1000::/48 maxlen: 48
2a0a:2d02::/32 maxlen: 48
2a0f:1586::/32 maxlen: 32
2a0f:3d80:123::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:2f:93:a2:da:bf:3e:79:56:58:1f:d2:ef:38:24:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 28 09:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fc6ef167d34749dd6c22c2a0b4703335499c89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:39:75:d5:7d:e7:7d:2b:bd:55:18:a0:d6:
bf:0c:ef:99:9b:09:24:dc:05:f0:02:a1:12:e1:b4:
bc:82:fe:89:51:9e:6f:80:3b:6e:c2:f1:42:b4:ac:
48:98:e9:ae:60:33:dd:d0:a1:0d:fa:f4:08:da:fc:
96:ea:a4:ca:ae:b5:99:93:98:e5:6e:62:b9:8a:4f:
98:15:77:4e:50:2b:68:83:c3:9a:66:3b:ba:12:7c:
1d:43:ac:8c:59:ac:66:53:98:97:0f:df:a9:9b:1c:
15:5d:b6:7f:8d:62:b6:d1:3d:21:e1:7c:9d:cb:17:
6a:b2:93:3a:e0:39:98:04:9a:a0:87:ca:a9:39:04:
f1:b9:03:08:ac:b8:4d:24:52:38:68:42:55:e4:fa:
8d:d6:89:c6:8e:ef:f3:f3:9d:fd:13:68:ff:71:c1:
21:9a:2a:dc:db:43:1d:89:9b:f9:ea:39:d5:42:01:
ca:7c:79:9b:3d:d0:f2:a2:45:f2:72:15:1e:97:2f:
c7:01:d0:82:27:92:fb:81:96:32:88:b8:ef:06:86:
f3:ff:57:83:bc:c7:eb:52:d9:c2:83:24:d0:3c:72:
f8:68:39:76:36:88:39:00:7e:96:44:0a:f3:e5:40:
3f:0f:9b:19:81:7e:2f:51:a0:18:9a:f8:c2:b9:99:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:EF:16:7D:34:74:9D:D6:C2:2C:2A:0B:47:03:33:54:99:C8:9B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b8bvFn00dJ3WwiwqC0cDM1SZyJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.243.0/24
193.58.108.0/24
195.66.24.0/24
IPv6:
2a09:17c0:1000::/48
2a0a:2d02::/32
2a0f:1586::/32
2a0f:3d80:123::/48
Signature Algorithm: sha256WithRSAEncryption
b7:d8:78:94:48:e2:f8:df:a9:bd:00:82:7f:f5:20:3b:7e:6c:
2e:09:54:0b:b7:64:21:fe:20:61:13:c6:14:f6:40:76:33:55:
86:ae:7a:e4:07:24:00:db:86:af:3e:6a:e0:22:d0:79:5e:3b:
73:87:4f:e6:12:a0:1d:59:d5:ce:6e:56:b2:66:a9:ac:6e:f0:
c0:cd:5d:92:62:1a:e7:3a:39:9c:04:98:f7:8c:07:70:f8:c9:
8e:db:65:bd:55:07:f0:e7:a2:36:c6:da:e5:b2:14:8e:ff:19:
97:c3:3e:1b:9d:20:fd:f5:91:28:6e:48:4b:b8:de:06:ca:59:
90:e7:20:27:5f:3a:6a:38:d8:f5:f0:24:4d:e7:e1:ff:ec:24:
a2:62:98:74:3d:e4:77:b4:1a:ed:14:3a:e2:35:82:dc:52:6f:
16:a0:64:39:cd:07:2e:48:47:e3:41:b3:fb:3d:e8:08:80:69:
81:8d:df:3a:57:43:15:7c:55:69:e3:60:15:bb:84:c3:1c:97:
10:30:b1:11:65:9b:72:14:a6:fe:ed:db:08:e8:93:0f:be:cd:
76:72:68:b9:01:38:50:62:1d:79:18:2b:c5:64:ff:14:0f:71:
e4:54:38:0f:0a:9a:7c:88:1f:4d:7e:64:13:43:6a:b1:06:43:
c5:cc:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:39 2025 by rpki-client