Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa
File: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (raw, json)
Hash identifier: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=
Subject key identifier: BE:F5:A5:18:DB:85:1A:E5:E4:04:8B:53:1F:D6:71:BB:E2:4B:29:6F
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01946F85B4A4506E7623C87CDD89380929B3
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa
Signing time: Thu 16 Jan 2025 14:30:20 +0000
ROA not before: Thu 16 Jan 2025 14:30:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203396
IP address blocks: 145.12.0.0/16 maxlen: 16
145.12.0.0/24 maxlen: 24
145.12.10.0/24 maxlen: 24
145.12.20.0/24 maxlen: 24
145.12.26.0/24 maxlen: 24
145.12.27.0/24 maxlen: 24
145.12.31.0/24 maxlen: 24
145.12.34.0/24 maxlen: 24
145.12.36.0/24 maxlen: 24
145.12.37.0/24 maxlen: 24
145.12.40.0/24 maxlen: 24
145.12.46.0/24 maxlen: 24
145.12.47.0/24 maxlen: 24
145.12.68.0/24 maxlen: 24
145.12.69.0/24 maxlen: 24
145.12.100.0/24 maxlen: 24
145.12.101.0/24 maxlen: 24
145.12.102.0/24 maxlen: 24
145.12.103.0/24 maxlen: 24
145.12.104.0/24 maxlen: 24
145.12.105.0/24 maxlen: 24
145.12.137.0/24 maxlen: 24
145.12.210.0/24 maxlen: 24
145.12.216.0/24 maxlen: 24
145.12.218.0/24 maxlen: 24
145.12.219.0/24 maxlen: 24
145.12.220.0/24 maxlen: 24
145.12.221.0/24 maxlen: 24
145.12.227.0/24 maxlen: 24
145.12.242.0/24 maxlen: 24
145.12.243.0/24 maxlen: 24
145.69.0.0/16 maxlen: 16
145.69.0.0/19 maxlen: 19
145.69.0.0/24 maxlen: 24
145.69.25.0/24 maxlen: 24
145.69.40.0/21 maxlen: 21
145.69.42.0/24 maxlen: 24
145.69.47.0/24 maxlen: 24
145.69.56.0/21 maxlen: 21
145.69.96.0/19 maxlen: 19
145.69.100.0/24 maxlen: 24
145.69.101.0/24 maxlen: 24
145.69.102.0/24 maxlen: 24
145.69.103.0/24 maxlen: 24
145.69.104.0/24 maxlen: 24
145.69.105.0/24 maxlen: 24
145.69.106.0/24 maxlen: 24
145.69.107.0/24 maxlen: 24
145.69.108.0/24 maxlen: 24
145.69.109.0/24 maxlen: 24
145.69.110.0/24 maxlen: 24
145.69.128.0/17 maxlen: 17
145.69.210.0/24 maxlen: 24
145.69.216.0/24 maxlen: 24
145.69.218.0/24 maxlen: 24
145.69.219.0/24 maxlen: 24
145.69.220.0/24 maxlen: 24
145.69.221.0/24 maxlen: 24
145.69.227.0/24 maxlen: 24
145.69.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:85:b4:a4:50:6e:76:23:c8:7c:dd:89:38:09:29:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 16 14:30:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bef5a518db851ae5e4048b531fd671bbe24b296f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:5a:4a:d1:f1:d7:43:c8:d5:6a:38:de:9b:
49:f8:87:95:af:44:60:92:60:9c:0f:e0:be:0f:ea:
df:3d:8e:a4:79:c6:25:22:06:d5:25:6b:7a:93:c3:
a1:73:98:b6:50:14:9f:20:d1:7a:e9:f3:27:49:21:
1a:d5:3c:dc:1c:c4:e0:c6:4e:34:26:89:48:ad:d4:
79:0e:c6:14:2c:d7:c5:a2:bc:0d:42:2d:4c:5b:bf:
6f:4a:e4:f0:67:f5:ac:de:cf:30:33:4b:ed:bc:bc:
bc:6d:c9:03:1d:dd:71:8c:69:d4:16:56:53:3e:c7:
1c:9c:e7:02:37:01:e2:f8:0a:30:92:47:d8:56:b3:
0e:31:39:2a:30:b4:b1:14:8e:db:bd:03:a1:a1:49:
6e:28:d6:e4:eb:be:56:25:22:f4:cd:ef:5a:74:85:
ff:88:7c:e8:1a:bd:4b:3b:52:a7:bb:97:ca:29:fa:
69:da:1b:b1:b4:92:cb:a3:f3:77:8c:cb:41:be:38:
96:2c:3e:85:6e:5c:53:bd:11:87:3d:fb:78:46:45:
eb:61:e3:11:d3:04:35:24:b1:33:29:27:80:9d:c9:
6d:93:38:86:84:64:c1:2d:f5:d7:54:4a:7d:2b:a6:
62:06:a4:8f:10:bf:d8:e4:ad:59:9c:17:1f:06:13:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:A5:18:DB:85:1A:E5:E4:04:8B:53:1F:D6:71:BB:E2:4B:29:6F
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.12.0.0/16
145.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:d8:65:7c:ff:3e:9a:1b:b8:f0:ae:7b:1e:0e:2c:6d:50:ef:
c2:3c:2f:12:ac:68:21:13:79:c9:1b:5b:a1:5e:b0:cf:fb:b3:
19:0b:9c:47:d0:33:6b:14:2f:4a:f2:bf:e9:aa:1d:8a:ef:92:
61:f4:5b:77:c7:ba:eb:1e:e6:42:5a:dd:e0:d6:96:66:01:c4:
26:b8:a5:30:9d:b4:74:07:c5:40:b9:d7:f4:13:0c:dc:a4:ea:
4d:c3:8d:d4:dc:f2:71:ce:d8:17:bb:b8:0a:82:b1:0d:84:cd:
83:3b:ee:71:5c:38:8d:8b:d1:01:2b:96:86:5d:a4:09:dd:d4:
94:32:f6:ba:9a:78:33:bc:b5:31:f1:c3:d1:4e:1a:19:1d:22:
6a:aa:5f:c6:21:b1:1e:ab:9d:36:d5:69:6f:6b:53:18:89:94:
e3:1d:c7:8a:03:c1:1b:ad:2e:16:ef:6f:e4:2f:1c:8d:42:9f:
ee:1b:e7:2b:5a:8d:88:92:f9:13:29:8d:1a:ce:d6:8c:1f:e0:
46:8d:47:03:b4:aa:3f:8a:91:79:a5:89:60:a4:f4:6d:f0:8a:
d1:58:d4:01:b2:8a:d3:5a:70:15:e0:ed:5b:84:e3:55:90:ce:
eb:9c:94:fe:3f:8c:72:59:a4:78:21:98:12:22:ff:67:87:44:
90:63:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:26:57 2025 by rpki-client