Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa
File: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (raw, json)
Hash identifier: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=
Subject key identifier: 77:18:31:77:AF:B1:3F:D2:64:C2:06:54:9D:4C:29:7F:E5:98:F8:AC
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 0194228D3808CC895E6CC5587D798F54ECBA
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207944
IP address blocks: 45.151.176.0/22 maxlen: 22
45.151.176.0/24 maxlen: 24
45.151.177.0/24 maxlen: 24
45.151.178.0/24 maxlen: 24
45.151.179.0/24 maxlen: 24
185.230.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:38:08:cc:89:5e:6c:c5:58:7d:79:8f:54:ec:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77183177afb13fd264c206549d4c297fe598f8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:c1:24:ba:12:5c:08:14:60:d2:38:79:36:
dd:37:f6:6c:31:89:7a:e4:74:f0:bd:79:98:55:69:
8c:cc:d3:2c:f9:0c:d0:34:bb:89:ad:23:c5:21:17:
b2:02:2c:71:bb:40:35:5f:6a:f1:40:4b:3d:6a:41:
61:0b:7d:76:a0:7e:0e:f3:f0:31:75:e7:b4:01:4f:
39:a5:8f:e3:72:7f:79:99:d9:4a:c9:15:b5:5a:0f:
6b:1b:80:b8:81:f8:84:87:03:82:22:50:03:b2:95:
05:1d:3a:d0:40:09:3f:a1:b5:b1:28:69:e4:1e:87:
aa:eb:1c:00:75:40:d8:2a:b3:09:64:9b:d5:1b:8c:
34:41:dd:19:72:e6:d6:6d:f9:80:93:45:59:b0:76:
59:de:7b:ad:5a:a6:81:f2:b9:64:16:e7:e0:ab:0c:
ae:c4:0a:d9:4f:ad:69:d0:70:50:4b:1f:0c:d2:87:
f4:66:45:d8:99:91:66:10:c6:37:19:1e:4d:c6:29:
8f:db:f4:82:89:3b:71:82:3b:8e:24:5b:bf:c9:03:
0f:a7:9b:20:ae:84:4a:87:1d:c3:12:d6:65:02:20:
68:bb:91:a9:12:2f:ce:36:bc:aa:44:33:19:3f:19:
3d:fb:de:37:ca:9a:3a:3a:c7:c0:04:ee:35:fe:3e:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:31:77:AF:B1:3F:D2:64:C2:06:54:9D:4C:29:7F:E5:98:F8:AC
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.176.0/22
185.230.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ac:53:44:a8:41:0b:72:f4:f4:73:29:b0:2e:eb:e8:27:99:
de:8f:c7:c1:78:79:1d:78:dd:be:5c:88:ff:b1:8e:64:6e:19:
02:cc:cf:15:08:d0:fb:9a:c2:c9:80:d8:66:fe:65:bf:9d:58:
a8:75:3b:d8:66:86:03:2e:6b:0d:d2:d5:e4:ce:4c:45:5d:39:
ac:12:f2:08:a6:f3:d6:70:ff:2b:a8:e4:fc:e5:29:b9:9b:64:
07:1d:68:c7:4f:d8:98:39:e8:2c:ae:1a:60:fa:1f:0a:61:5e:
67:83:16:52:8f:3a:13:a1:b4:3a:7b:2d:54:aa:2e:c8:6e:05:
17:02:64:3b:ce:00:52:82:45:e0:62:97:7c:16:ea:df:54:85:
f4:78:21:f5:86:88:81:fa:09:97:b6:07:35:b9:6e:86:81:d1:
ca:3f:59:6e:87:c2:30:8d:3f:77:f9:b7:76:55:91:4a:e0:17:
15:c5:6a:3c:3c:e9:14:d2:bf:ea:0c:88:e4:4a:06:c3:cb:69:
d2:18:21:67:39:f6:48:ef:8f:60:dd:70:73:9b:1e:ed:ba:a7:
12:dc:e9:d0:f5:a4:07:31:c1:09:a4:42:6b:f8:20:e6:fc:51:
56:e6:8b:f5:63:4c:6c:1d:fa:69:e9:dc:03:2c:b2:05:78:b2:
0e:0a:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:16 2025 by rpki-client