Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/inePUN5PbPzThwjewnMxrjRMGys.roa
File: inePUN5PbPzThwjewnMxrjRMGys.roa (raw, json)
Hash identifier: rJLU2zuiWQEOLlBYTr9Nnfso+lJLIcOjI6wDRAopJTQ=
Subject key identifier: 8A:77:8F:50:DE:4F:6C:FC:D3:87:08:DE:C2:73:31:AE:34:4C:1B:2B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194A71B871712641C2602BEF75E22488193
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/inePUN5PbPzThwjewnMxrjRMGys.roa
Signing time: Mon 27 Jan 2025 09:33:06 +0000
ROA not before: Mon 27 Jan 2025 09:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.90.19.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.218.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:1b:87:17:12:64:1c:26:02:be:f7:5e:22:48:81:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 27 09:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a778f50de4f6cfcd38708dec27331ae344c1b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:5c:9a:59:d8:c5:52:f5:32:a1:80:c1:89:
24:e1:75:4f:b4:d8:da:08:6b:1f:1e:1a:fc:28:cc:
5a:de:cf:44:8b:6f:99:66:19:6c:44:b5:72:78:20:
61:22:4d:94:21:19:99:c5:73:44:39:60:06:21:12:
14:73:20:ac:c8:55:73:f4:b5:84:2a:3b:89:74:91:
05:79:21:7b:4a:6a:c3:0b:4d:f5:0f:77:2a:4d:0f:
90:3a:0d:22:5b:e9:2e:76:3c:16:b1:f4:4f:09:7d:
09:2d:d8:c2:63:17:18:fb:db:d4:ed:12:2a:01:70:
d0:ac:69:35:3c:52:c3:6e:56:fe:36:92:56:4d:bd:
75:ba:69:f8:74:0b:d4:c9:55:f9:74:0e:90:8b:4b:
37:eb:1e:5e:83:2f:91:47:62:23:ed:c2:84:63:a4:
05:97:96:6b:7c:46:ec:ce:7a:bf:f9:8f:1e:2b:63:
1b:75:cf:87:35:65:20:aa:ad:c6:6f:a9:5d:09:c1:
48:b9:63:23:51:a6:46:83:cb:3a:7b:b2:13:6e:e1:
a0:94:11:20:09:72:4e:ca:b6:bd:77:58:04:9b:0e:
c4:87:2c:33:b6:aa:e4:ad:41:4c:9f:38:4c:d9:e2:
67:3b:23:14:fc:04:68:0b:54:57:c0:ee:13:17:9a:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:8F:50:DE:4F:6C:FC:D3:87:08:DE:C2:73:31:AE:34:4C:1B:2B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/inePUN5PbPzThwjewnMxrjRMGys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.36.204.0/24
185.206.248.0/24
185.218.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6a:99:d7:b7:3c:33:cc:e0:b1:c9:3c:45:64:94:7a:63:c9:
73:30:c2:1b:08:2d:be:d2:df:67:9c:b2:b2:7e:85:b8:3f:27:
b0:6b:42:fd:90:78:54:22:fc:b6:ed:ec:96:61:2d:4c:c4:38:
33:27:56:a3:c6:db:a4:75:18:d9:20:8b:5e:86:e6:0f:78:e7:
6e:49:b4:f9:94:18:c3:9e:fb:e2:a6:ed:5a:e6:7f:be:7e:23:
5c:44:45:8f:84:de:5d:55:b2:b0:e5:81:44:71:74:f0:74:95:
2b:f2:00:a3:3d:79:2f:c5:f1:f9:88:64:9d:d5:94:25:48:ee:
2a:41:3d:f1:d8:9c:56:63:c7:01:2c:4d:37:6d:15:86:5c:78:
08:4b:a0:43:f5:3c:31:8c:a9:45:34:78:ec:d2:8e:90:48:e9:
3d:55:33:23:97:c5:ab:b5:2f:6d:17:81:cb:2b:66:6d:fe:23:
f3:5b:ad:7f:bd:f6:2a:f6:d9:6d:cf:28:96:40:75:92:b8:64:
2a:3e:75:1e:3f:0a:fa:31:fe:75:d5:b9:c6:33:94:8e:b8:85:
69:a8:a4:f3:7f:8b:31:28:d7:19:49:c5:ec:36:47:43:6d:37:
a4:f8:e9:b8:f5:99:bd:42:3d:0d:fa:41:04:dd:bd:ef:cf:31:
68:4d:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:12 2025 by rpki-client