Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/ETntAp8qWJdvAD1JKZJVCJAE9wA.roa
File: ETntAp8qWJdvAD1JKZJVCJAE9wA.roa (raw, json)
Hash identifier: hfJtS+VPVR6qaIkwB60e9Ssm1Fsvf2mGWUvaOy9P8yY=
Subject key identifier: 11:39:ED:02:9F:2A:58:97:6F:00:3D:49:29:92:55:08:90:04:F7:00
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 019421B17A9241C5485B60FAC14573D48336
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/ETntAp8qWJdvAD1JKZJVCJAE9wA.roa
Signing time: Wed 01 Jan 2025 11:47:46 +0000
ROA not before: Wed 01 Jan 2025 11:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43180
IP address blocks: 45.11.57.0/24 maxlen: 24
45.12.0.0/24 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
176.97.112.0/23 maxlen: 23
176.97.116.0/22 maxlen: 22
176.119.31.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
194.42.204.0/24 maxlen: 24
195.66.210.0/24 maxlen: 24
195.128.248.0/23 maxlen: 24
2a09:2dc2::/32 maxlen: 32
2a09:2dc3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:7a:92:41:c5:48:5b:60:fa:c1:45:73:d4:83:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jan 1 11:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1139ed029f2a58976f003d49299255089004f700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:f1:a9:31:6b:53:5a:72:24:6a:8b:33:92:
12:a1:3d:81:3a:84:36:eb:b9:a8:0c:ce:27:d7:06:
b2:82:23:ff:aa:5b:11:42:5e:aa:33:98:2c:73:92:
74:5c:c1:25:6f:44:50:db:49:cd:c4:8d:5e:50:f5:
09:3a:cd:6e:80:d2:70:19:68:18:b6:31:0c:fc:31:
fa:1b:dd:ca:bb:9d:fb:52:d7:79:0b:1e:3f:53:98:
74:37:86:5f:54:35:80:28:3a:78:5f:e7:00:aa:ab:
79:a1:9d:6c:40:21:ab:2b:da:d0:17:de:b9:90:83:
ad:40:29:4f:9e:a6:87:24:cc:81:89:91:d8:35:99:
28:ff:f2:85:01:34:38:4b:29:27:9a:3a:b7:a3:d3:
d6:ec:ad:ac:90:1a:4b:85:a9:e1:e3:60:bf:03:d8:
28:77:f6:d3:9e:42:65:75:ec:0c:7c:a4:b5:7b:67:
fe:fa:cc:22:54:e5:92:28:ff:e0:54:d7:dc:c9:58:
25:24:8e:9f:6a:57:84:ca:c3:08:8b:0d:f9:19:a9:
5d:bd:6a:a4:f7:c8:df:41:8a:65:e7:d7:99:4d:81:
99:cf:1e:76:b8:65:91:99:98:c1:cd:ba:01:8e:d8:
8a:3e:b1:c3:44:fc:1d:d4:e5:da:08:52:08:f0:97:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:39:ED:02:9F:2A:58:97:6F:00:3D:49:29:92:55:08:90:04:F7:00
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/ETntAp8qWJdvAD1JKZJVCJAE9wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.57.0/24
45.12.0.0/23
45.12.3.0/24
91.208.115.0/24
176.97.112.0/23
176.97.116.0/22
176.119.31.0/24
185.254.199.0/24
194.42.204.0/24
195.66.210.0/24
195.128.248.0/23
IPv6:
2a09:2dc2::/31
Signature Algorithm: sha256WithRSAEncryption
90:82:57:a3:01:7f:33:d9:2b:2d:72:55:e7:ac:09:22:3c:77:
f8:f7:12:50:8f:e9:3b:6e:43:c6:48:0e:68:e4:32:11:af:89:
1b:0d:58:2c:cf:1d:6c:b9:06:8f:b4:09:6d:f5:a1:e6:90:28:
e0:65:7f:cc:6a:8e:90:b5:69:a6:9f:35:b5:b7:c1:f6:ed:d2:
00:70:bf:7f:39:c5:c6:45:95:7b:a8:a7:32:19:2c:98:eb:eb:
57:95:ca:dd:c9:d2:62:a5:c7:8b:57:50:fd:fe:52:f2:3b:8f:
f8:c5:1d:e5:a4:24:81:31:71:a2:7d:0f:9f:3f:5f:9e:6a:08:
de:70:1e:48:ee:5c:cc:77:46:f5:1e:55:be:80:35:4b:c1:f7:
b2:32:de:4b:95:07:8a:30:49:44:19:11:62:39:2b:b2:2e:e5:
35:d1:30:fa:8b:5a:06:39:cd:b7:7c:9c:d5:68:f1:5c:c0:61:
cd:ef:54:72:38:b4:d8:8f:09:dc:1b:4a:5a:ff:66:4f:69:ea:
84:b5:85:c8:35:bc:3b:06:04:fd:cf:65:c5:82:8a:69:2a:38:
29:23:9d:5e:68:b9:bc:42:a3:c3:34:8e:92:5e:bc:d6:63:a0:
16:64:a7:cb:31:3c:13:6e:f7:52:71:13:14:b8:15:c6:b0:7a:
4b:f2:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:01 2025 by rpki-client