Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/IGPoXTbYGF7JweJ3L0VLF6OOQrk.roa
File: IGPoXTbYGF7JweJ3L0VLF6OOQrk.roa (raw, json)
Hash identifier: llp7Y9hxp+sTPMXRa0hLoCN2lGTehRq+9KaotYEaF0I=
Subject key identifier: 20:63:E8:5D:36:D8:18:5E:C9:C1:E2:77:2F:45:4B:17:A3:8E:42:B9
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB640FFCDF16C9A08D853AD899E229
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/IGPoXTbYGF7JweJ3L0VLF6OOQrk.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 45.89.60.0/24 maxlen: 24
45.89.61.0/24 maxlen: 24
45.150.66.0/24 maxlen: 32
138.124.181.0/24 maxlen: 24
2a0e:4005::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:64:0f:fc:df:16:c9:a0:8d:85:3a:d8:99:e2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2063e85d36d8185ec9c1e2772f454b17a38e42b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0f:49:9e:14:5c:5b:25:d9:c0:b4:aa:91:29:
42:fb:4f:04:1b:bf:48:3a:09:b5:a2:21:47:c9:a4:
fa:ce:24:91:2c:85:87:52:27:c1:e5:57:13:90:69:
76:b1:99:8a:cc:31:83:7b:2d:b6:75:52:9d:95:2d:
1e:99:90:48:a5:a1:87:55:70:fb:6b:73:c9:71:3e:
bc:8e:fd:af:4c:80:39:9d:50:3c:bd:56:40:d2:62:
e2:5f:5a:53:33:46:7e:5c:1e:b3:c0:ec:75:eb:bf:
ce:bb:30:1a:21:4a:74:25:72:ea:de:df:19:9d:08:
75:35:af:58:0f:fc:c2:29:d6:66:b0:53:64:2a:27:
fa:6c:50:aa:52:0b:19:f7:0c:2f:ad:56:23:26:16:
b0:b0:c9:a7:0c:e0:3b:b5:23:05:05:cd:8a:a7:83:
38:0a:e2:b9:c7:13:d0:45:9a:80:29:2b:5b:02:2e:
e4:61:3c:31:50:c7:dd:6b:07:04:61:4d:b8:93:c1:
17:e6:61:7c:dd:21:b3:d0:ca:bf:29:f8:81:9d:6d:
95:94:68:2a:f3:83:9c:4a:c3:29:64:a6:0b:18:f8:
3a:38:4b:d9:f3:9f:9a:10:28:64:f9:63:d3:12:e8:
2a:1d:95:82:6f:54:0d:de:27:d2:6c:a1:1a:b5:a8:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:63:E8:5D:36:D8:18:5E:C9:C1:E2:77:2F:45:4B:17:A3:8E:42:B9
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/IGPoXTbYGF7JweJ3L0VLF6OOQrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.60.0/23
45.150.66.0/24
138.124.181.0/24
IPv6:
2a0e:4005::/32
Signature Algorithm: sha256WithRSAEncryption
08:2d:b2:48:69:f3:03:67:38:34:96:d3:b0:86:b9:e2:e7:17:
22:de:a6:e8:bf:0c:22:a3:e4:97:6f:4e:fd:14:97:13:15:e2:
9f:b0:26:cd:72:b4:09:ff:46:14:9e:9f:14:7b:e8:fd:c0:45:
62:64:35:de:79:7d:34:96:6d:a7:20:ae:0b:c6:ff:34:d2:9b:
fc:80:b4:36:9c:a5:52:dd:15:64:9f:df:26:fd:d2:0a:18:b0:
40:b6:37:b7:97:ee:23:b7:e1:47:35:5e:a1:f4:34:24:08:74:
0e:cf:59:d8:35:75:d0:a2:17:59:fa:d1:45:f9:86:9d:c8:f3:
72:da:4a:f1:f2:bc:e1:8d:06:a2:72:dc:df:6a:81:94:e2:bf:
bd:33:1c:45:fc:9d:ee:7b:dc:53:10:fd:a7:a1:8d:0f:28:17:
9b:fe:8d:2b:ae:31:d9:58:17:13:37:15:18:f1:e8:5b:1b:b8:
40:ea:c9:40:dd:62:b4:19:2d:65:32:4d:9a:7d:72:08:70:49:
ac:57:86:e7:d0:a5:36:4b:c2:8a:0b:53:80:3f:de:e8:1c:df:
7a:4e:a5:f5:11:22:81:de:ff:39:14:60:13:e4:5f:92:16:39:
2d:4d:d6:4a:41:c7:4d:ff:2b:89:08:b9:18:3c:be:b4:0f:d1:
09:53:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:37 2025 by rpki-client