Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vr45IMUD0JmrX4XTs_6fbWrZni8.roa
File: vr45IMUD0JmrX4XTs_6fbWrZni8.roa (raw, json)
Hash identifier: iu2d7e2Q2PQQRdL5Ma5Xzd2Ui0J/rBnV2PsHQE95H1Y=
Subject key identifier: BE:BE:39:20:C5:03:D0:99:AB:5F:85:D3:B3:FE:9F:6D:6A:D9:9E:2F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01949920BAE65D43156F49CDF9FCCCADCC3B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vr45IMUD0JmrX4XTs_6fbWrZni8.roa
Signing time: Fri 24 Jan 2025 16:24:06 +0000
ROA not before: Fri 24 Jan 2025 16:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214927
IP address blocks: 45.9.117.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.131.215.0/24 maxlen: 24
45.137.81.0/24 maxlen: 24
45.141.177.0/24 maxlen: 24
45.152.208.0/24 maxlen: 24
85.209.128.0/24 maxlen: 24
103.114.43.0/24 maxlen: 24
185.122.171.0/24 maxlen: 24
185.126.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:20:ba:e6:5d:43:15:6f:49:cd:f9:fc:cc:ad:cc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 24 16:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bebe3920c503d099ab5f85d3b3fe9f6d6ad99e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:69:bb:7d:1c:87:05:f4:fd:b9:32:4b:b2:
7c:3e:5f:64:42:8f:a3:a2:6b:5c:a8:7e:dc:e7:42:
0d:a5:42:86:82:59:6b:b4:44:c3:8f:f9:65:72:00:
fd:7b:ec:01:45:ad:6a:91:6e:c1:bf:c5:f1:19:e5:
8e:34:52:a5:f1:b5:e4:57:85:9f:49:87:d7:42:32:
0a:19:55:18:1f:46:6c:3e:72:0a:07:f3:47:75:22:
c5:19:a2:27:16:e0:89:9e:aa:0d:16:f6:3a:6e:f5:
4c:d2:73:a8:0b:da:27:8c:6c:8a:db:02:0f:3a:09:
ae:36:48:03:c6:ee:d5:39:18:04:d8:2a:28:0d:4f:
df:1d:15:2a:f9:97:e6:25:fb:15:81:e7:ca:b2:f6:
38:41:4d:df:35:b7:d5:46:be:d8:7f:e0:c1:bc:06:
d8:08:d4:f3:3c:c5:f7:97:fb:79:bf:69:81:fe:8d:
b5:ae:d4:d1:4e:98:0b:c2:35:06:fc:55:8d:22:df:
91:b0:99:f2:a9:32:a8:a1:b0:7a:4c:d7:e6:0a:cb:
15:c1:a0:04:45:22:b7:0d:0d:74:2f:eb:25:35:cb:
d2:8d:9e:29:f5:42:13:18:c4:20:c1:44:90:21:c4:
96:55:aa:75:37:81:f2:ca:09:d8:9b:bb:79:01:1d:
74:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:39:20:C5:03:D0:99:AB:5F:85:D3:B3:FE:9F:6D:6A:D9:9E:2F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vr45IMUD0JmrX4XTs_6fbWrZni8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.117.0/24
45.118.248.0/24
45.131.215.0/24
45.137.81.0/24
45.141.177.0/24
45.152.208.0/24
85.209.128.0/24
103.114.43.0/24
185.122.171.0/24
185.126.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:dd:ab:fe:64:69:27:a6:f4:54:f1:92:fa:29:dd:0b:6a:45:
20:f7:49:c7:d4:a0:41:79:6e:dd:27:04:5e:ce:ab:9e:3c:08:
66:c9:6f:64:23:ad:05:aa:2a:4b:82:58:1e:b8:89:89:ba:3c:
33:1e:ed:01:27:0d:fd:e7:76:97:46:15:81:4e:3e:bc:5d:87:
f5:e4:fa:b9:a0:72:82:e5:5d:b7:04:c1:39:30:ce:68:77:ab:
65:59:8c:4a:03:eb:0f:a5:c8:eb:35:16:ca:38:c8:f9:2e:e1:
59:33:d7:ad:0a:4c:ca:6c:4c:3c:d8:ea:7d:07:8a:4f:ee:35:
2a:ce:a0:91:cb:cd:64:bf:df:16:88:a0:21:08:21:3a:7d:cd:
66:f9:ad:e7:db:f5:3e:85:1f:a0:6d:74:7d:a5:ad:ca:06:eb:
15:03:c6:1f:a1:c5:38:c3:21:eb:b3:f0:fe:55:2d:72:a4:44:
51:4b:64:f1:ce:f0:ba:39:e1:28:78:0f:ce:1d:42:a3:2e:f8:
f5:21:f9:f1:e5:50:d8:a3:5c:3f:07:e4:e4:7f:20:0a:4d:72:
60:0a:b7:85:1a:06:d8:d1:f6:2c:f3:94:f0:6b:58:bc:5b:ac:
3a:56:05:ba:d2:5f:b9:80:39:d2:f0:74:3d:21:9c:14:ef:2a:
d9:dd:85:e0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZSZILrmXUMVb0nN+fzMrcw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTI0MTYyNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWJlMzkyMGM1MDNkMDk5YWI1Zjg1ZDNiM2ZlOWY2ZDZhZDk5ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IVpu30chwX0/bkyS7J8Pl9kQo+j
omtcqH7c50INpUKGgllrtETDj/llcgD9e+wBRa1qkW7Bv8XxGeWONFKl8bXkV4Wf
SYfXQjIKGVUYH0ZsPnIKB/NHdSLFGaInFuCJnqoNFvY6bvVM0nOoC9onjGyK2wIP
OgmuNkgDxu7VORgE2CooDU/fHRUq+ZfmJfsVgefKsvY4QU3fNbfVRr7Yf+DBvAbY
CNTzPMX3l/t5v2mB/o21rtTRTpgLwjUG/FWNIt+RsJnyqTKoobB6TNfmCssVwaAE
RSK3DQ10L+slNcvSjZ4p9UITGMQgwUSQIcSWVap1N4HyygnYm7t5AR105QIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFL6+OSDFA9CZq1+F07P+n21q2Z4vMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvdnI0NUlNVUQwSm1yWDRYVHNfNmZiV3Jabmk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALQl1AwQA
LXb4AwQALYPXAwQALYlRAwQALY2xAwQALZjQAwQAVdGAAwQAZ3IrAwQAuXqrAwQA
uX5AMA0GCSqGSIb3DQEBCwUAA4IBAQAv3av+ZGknpvRU8ZL6Kd0LakUg90nH1KBB
eW7dJwRezquePAhmyW9kI60FqipLglgeuImJujwzHu0BJw3953aXRhWBTj68XYf1
5Pq5oHKC5V23BME5MM5od6tlWYxKA+sPpcjrNRbKOMj5LuFZM9etCkzKbEw82Op9
B4pP7jUqzqCRy81kv98WiKAhCCE6fc1m+a3n2/U+hR+gbXR9pa3KBusVA8YfocU4
wyHrs/D+VS1ypERRS2TxzvC6OeEoeA/OHUKjLvj1Ifnx5VDYo1w/B+TkfyAKTXJg
CreFGgbY0fYs85Twa1i8W6w6VgW60l+5gDnS8HQ9IZwU7yrZ3YXg
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:06 2025 by rpki-client