Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/BdUxSj1scZ7xrBUlbLx8jP7rnTM.roa
File: BdUxSj1scZ7xrBUlbLx8jP7rnTM.roa (raw, json)
Hash identifier: rR7uUs4jDWXTF6oSqlXhX6fXxJVDkoBHOWveKyINI1M=
Subject key identifier: 05:D5:31:4A:3D:6C:71:9E:F1:AC:15:25:6C:BC:7C:8C:FE:EB:9D:33
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 019420D5FBE2F0392913C094E612AD08E96D
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/BdUxSj1scZ7xrBUlbLx8jP7rnTM.roa
Signing time: Wed 01 Jan 2025 07:48:01 +0000
ROA not before: Wed 01 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16633
IP address blocks: 45.147.95.0/24 maxlen: 24
46.229.240.0/24 maxlen: 24
87.236.163.0/24 maxlen: 24
185.201.17.0/24 maxlen: 24
185.201.18.0/24 maxlen: 24
185.225.27.0/24 maxlen: 24
188.190.112.0/24 maxlen: 24
193.41.32.0/24 maxlen: 24
193.200.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fb:e2:f0:39:29:13:c0:94:e6:12:ad:08:e9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05d5314a3d6c719ef1ac15256cbc7c8cfeeb9d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:31:bf:08:2a:ac:2e:ae:41:35:f4:d4:0a:
69:4c:a9:31:72:07:20:ac:b9:49:6d:8d:86:64:d4:
31:84:10:d5:ad:c5:6a:39:f4:b9:34:d0:4d:c2:31:
2f:3a:54:7c:77:92:21:cb:53:85:6f:b2:0c:9a:f0:
2e:54:c5:2f:6e:38:59:55:01:99:e8:b1:8b:e9:33:
02:19:47:d8:96:ed:d6:60:54:6d:5f:d8:67:ee:13:
13:ae:bf:49:5f:1a:3c:c3:77:d6:fe:e8:41:6b:04:
a3:2e:19:b8:16:7a:23:ae:4d:2e:ab:55:cc:d2:52:
12:65:80:35:3c:a6:11:45:6d:d6:b3:37:30:ee:1f:
06:71:e2:45:82:c0:3c:e3:b0:c4:65:5c:ea:d3:7f:
5c:af:f1:fe:e0:e9:5b:fa:4b:e8:95:f0:cd:58:9b:
c3:cc:90:bf:da:bf:86:63:41:0b:24:41:f3:d3:4a:
b5:d6:34:a4:9b:79:19:80:3a:84:a7:57:13:56:f5:
ec:61:19:48:94:40:47:ff:56:ef:3b:b5:f6:bd:27:
06:61:ee:ef:fd:b5:62:a3:9c:1c:81:ad:86:ee:d3:
6e:18:26:06:ed:3d:15:20:58:e7:ad:a2:e6:6e:1b:
ce:7f:66:27:85:e2:32:20:e0:67:e4:c4:d8:88:34:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:31:4A:3D:6C:71:9E:F1:AC:15:25:6C:BC:7C:8C:FE:EB:9D:33
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/BdUxSj1scZ7xrBUlbLx8jP7rnTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.95.0/24
46.229.240.0/24
87.236.163.0/24
185.201.17.0-185.201.18.255
185.225.27.0/24
188.190.112.0/24
193.41.32.0/24
193.200.214.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2e:cd:51:0b:d3:7e:d5:74:0a:91:c5:f4:2b:f9:73:f1:b8:
cd:12:75:0a:ca:9b:f8:d7:c8:53:bb:df:b6:ad:45:09:04:10:
0a:42:fa:c5:ef:af:35:2e:7e:e7:10:3e:ce:4a:73:2d:86:20:
55:bf:2c:db:64:a2:c2:db:f3:91:d6:e0:1c:e0:3a:6f:b1:09:
57:12:2e:d3:34:2d:c7:ee:39:2a:d7:64:14:c6:d3:76:76:fe:
bd:ab:c8:79:5b:bb:4e:20:99:36:82:64:19:11:95:98:31:e5:
a2:e2:0e:6a:48:3c:64:3d:97:f2:84:9e:13:13:2a:6b:c1:cf:
70:e3:a3:cd:57:27:20:81:31:d7:c3:fc:5b:96:d6:bf:bd:33:
da:4a:98:a4:9c:1e:28:52:0c:ca:b7:5a:b5:5a:0a:da:4d:b3:
b5:99:61:b5:29:e4:5f:ca:86:d5:07:52:d9:50:39:3c:1d:f7:
30:d1:12:71:d0:18:76:02:6f:3b:6b:21:9b:f6:55:8c:46:c0:
b9:b4:a4:ed:a5:ee:9c:e0:43:45:d4:25:16:0c:c8:e5:9e:5e:
31:85:41:4b:97:93:6a:81:ab:67:be:4c:87:98:e0:58:b8:79:
de:d6:69:7b:8a:1d:69:50:e5:a2:f3:c3:b7:c3:a9:2e:e2:91:
e9:6c:8a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:15 2025 by rpki-client