Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/lin8JZNkawhqPQLq4l5oDz7p9_Q.roa
File: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (raw, json)
Hash identifier: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=
Subject key identifier: 96:29:FC:25:93:64:6B:08:6A:3D:02:EA:E2:5E:68:0F:3E:E9:F7:F4
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0194236A504B240F78E90FAE1B42B8682E91
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/lin8JZNkawhqPQLq4l5oDz7p9_Q.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29650
IP address blocks: 45.139.240.0/22 maxlen: 22
79.140.128.0/20 maxlen: 20
82.195.128.0/19 maxlen: 19
84.51.224.0/21 maxlen: 21
84.51.236.0/22 maxlen: 22
84.51.240.0/20 maxlen: 20
212.78.224.0/20 maxlen: 20
212.78.240.0/23 maxlen: 23
212.78.252.0/22 maxlen: 22
212.84.40.0/21 maxlen: 21
2001:1bd8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:50:4b:24:0f:78:e9:0f:ae:1b:42:b8:68:2e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9629fc2593646b086a3d02eae25e680f3ee9f7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:f4:24:e6:26:49:61:34:2c:2e:0d:81:34:
76:3d:d1:78:e6:76:f5:84:4e:12:cd:26:68:d3:40:
88:d1:b7:0f:9b:ef:f9:2a:be:7a:79:29:92:d7:a6:
d2:5c:28:c2:cf:03:98:2e:d8:0e:90:3f:49:a5:d1:
50:26:02:0e:ec:69:fa:70:c4:59:7f:1f:c3:57:e6:
ae:cb:15:2c:86:ba:32:04:89:ea:4f:c8:67:f2:8a:
84:8e:d7:a0:9f:a9:67:c9:23:a9:23:ec:6a:fe:e5:
10:1b:12:a5:c6:58:eb:04:16:4f:90:19:6e:3e:cd:
1f:eb:f8:9c:8f:a4:a8:68:1f:9a:1b:53:9f:6f:e5:
cb:73:93:bd:55:23:10:21:4a:68:45:ad:8a:73:34:
19:a3:eb:da:ec:ae:19:28:27:61:62:93:19:c3:39:
9d:56:24:fb:56:08:0e:59:f3:0a:9d:9d:8c:0e:10:
be:52:08:86:4f:d0:cb:8b:dd:90:1f:bb:87:6c:45:
5b:cc:d4:6b:9f:3b:bb:a7:38:f2:2f:e5:44:7b:3e:
16:ff:48:f5:ce:31:bc:fe:6c:a5:88:84:14:78:47:
6a:f6:91:6d:2f:3e:dd:4c:bf:57:68:e5:e9:1c:7d:
22:a4:54:32:1a:c7:ed:8a:08:16:ed:8d:80:81:02:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:29:FC:25:93:64:6B:08:6A:3D:02:EA:E2:5E:68:0F:3E:E9:F7:F4
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/lin8JZNkawhqPQLq4l5oDz7p9_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.240.0/22
79.140.128.0/20
82.195.128.0/19
84.51.224.0/21
84.51.236.0-84.51.255.255
212.78.224.0-212.78.241.255
212.78.252.0/22
212.84.40.0/21
IPv6:
2001:1bd8::/32
Signature Algorithm: sha256WithRSAEncryption
56:25:ec:87:54:7b:93:7e:05:8e:81:cb:ca:f8:2e:5d:b4:f9:
a5:3c:24:a3:f7:18:9a:73:e7:7b:d7:35:4f:5e:53:e2:ea:65:
65:55:60:21:d5:ae:8a:6c:76:4e:22:dd:f3:2b:3b:61:69:98:
62:81:d5:71:63:26:ea:2b:dd:52:d3:2f:7e:50:de:61:0d:6f:
c9:a5:59:ee:b1:c9:e3:ac:50:e8:d3:c2:31:21:c2:1a:5a:2f:
66:fb:2c:1c:43:85:a3:3a:85:47:c6:58:d9:06:9d:3d:26:39:
7a:10:1c:86:75:60:56:96:4c:41:7f:66:5e:e1:66:53:df:b4:
eb:dd:20:e9:d8:c7:39:86:d7:4d:45:4d:6e:be:c4:35:d8:88:
cc:eb:f2:cd:bf:4f:f9:39:08:cb:11:90:d5:98:36:35:e8:93:
48:32:ea:04:3c:b3:08:53:48:cd:79:b0:95:a7:55:19:9e:07:
0c:fc:b5:3c:ec:bf:5b:9b:ba:f6:45:17:e8:e6:b1:16:61:52:
c9:44:81:82:30:38:ec:15:6b:65:f1:6e:2d:ea:80:f3:a0:0b:
bc:2e:ea:c5:dc:4e:f8:0d:78:89:72:6f:57:c2:13:5e:cd:ea:
2a:63:81:32:b6:2e:5e:da:e7:40:f9:57:46:14:01:ef:c2:9d:
77:1b:8f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:23 2025 by rpki-client