Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/f8KVcaiQWcot8gKV8acNwJUgtzY.roa
File: f8KVcaiQWcot8gKV8acNwJUgtzY.roa (raw, json)
Hash identifier: Whc+TbHvgFu+VRc4sLCF3icODxsuBEv16RtGQ195mBY=
Subject key identifier: 7F:C2:95:71:A8:90:59:CA:2D:F2:02:95:F1:A7:0D:C0:95:20:B7:36
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0193A14C27A1E54A85B569371C579D7D7DB1
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/f8KVcaiQWcot8gKV8acNwJUgtzY.roa
Signing time: Sat 07 Dec 2024 13:25:42 +0000
ROA not before: Sat 07 Dec 2024 13:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 45.89.63.0/24 maxlen: 32
45.144.232.0/24 maxlen: 32
45.144.233.0/24 maxlen: 32
45.144.234.0/24 maxlen: 32
45.144.235.0/24 maxlen: 32
138.124.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:4c:27:a1:e5:4a:85:b5:69:37:1c:57:9d:7d:7d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Dec 7 13:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fc29571a89059ca2df20295f1a70dc09520b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:e4:4a:a6:85:95:67:c4:58:e4:ba:e4:b3:
40:79:59:1c:43:c1:bf:a3:84:f7:3e:87:7b:f4:60:
9a:c6:5f:7e:a6:65:9c:1e:ae:6d:be:a7:6e:8d:99:
a7:36:ca:9e:4c:49:c6:1c:0d:f1:1b:6f:a3:34:5c:
7e:c8:7e:2a:18:c3:1a:a3:0a:fc:44:3c:31:51:2e:
c3:76:2c:9e:d9:cb:b3:54:5c:8b:88:e7:1e:06:a4:
4b:de:f1:47:45:64:e9:6f:db:1c:f7:73:c7:98:97:
06:f7:72:dd:90:40:0b:bf:58:49:3b:8f:40:73:45:
4e:15:3f:4b:61:39:0e:b3:dc:e7:22:b8:3d:aa:98:
f0:55:16:fc:b2:68:8a:1e:e9:48:3f:a8:54:34:df:
f7:ad:d1:2f:a3:bb:3c:0b:a6:21:46:42:00:f3:3f:
f5:f9:9b:f1:6e:28:90:b3:bf:7d:bb:de:7c:f5:72:
a1:40:49:d8:cc:ec:5f:60:d4:1a:74:91:e9:e4:f3:
64:70:19:71:20:42:03:57:4a:f9:21:6b:95:08:94:
6f:33:b5:fd:67:73:4e:de:b5:9f:a0:92:86:33:39:
ae:4c:a3:d0:09:29:52:17:97:fc:60:e9:18:29:34:
dc:f2:f8:6c:bc:82:5f:c4:da:f2:fc:1c:f7:21:6d:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:95:71:A8:90:59:CA:2D:F2:02:95:F1:A7:0D:C0:95:20:B7:36
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/f8KVcaiQWcot8gKV8acNwJUgtzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.63.0/24
45.144.232.0/22
138.124.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b4:d0:f5:ae:86:89:79:e9:eb:c8:43:d9:57:f3:f2:85:19:
97:c8:24:a1:33:0e:ca:a2:48:c0:82:bd:55:49:36:c3:c4:e7:
7b:de:ef:6c:8b:74:a9:ad:97:f5:df:48:bc:04:74:ea:8e:1c:
7c:8f:cc:35:bf:71:fc:76:97:c3:1d:f8:2c:6c:35:a8:b3:75:
63:e2:e3:f1:1d:13:40:3b:4a:db:db:05:85:1f:c0:00:43:5b:
4a:47:a6:6e:e0:6d:74:cb:d3:55:5f:01:07:32:2f:62:00:96:
51:97:2a:8b:07:6e:2e:e7:17:96:a4:ae:bf:56:c4:7b:a5:da:
e8:aa:c7:3d:6e:b0:88:e2:52:34:4c:eb:69:d9:ba:3c:b0:87:
43:a7:0e:11:45:22:0a:03:b3:53:d6:dc:2c:4f:7c:98:0e:5a:
67:8f:cc:9e:6d:c8:c8:ef:0a:a7:69:ca:8a:21:13:c1:b5:f6:
3e:63:0f:1f:2b:c7:cc:0f:36:d7:f6:57:df:b8:12:99:55:5d:
fa:df:ef:e8:0b:b8:59:b0:76:38:50:94:47:6b:75:12:3a:fe:
ef:47:34:9e:5b:7a:27:f6:3a:bd:3b:ae:44:4e:c0:d8:b1:de:
60:1e:ce:cf:4d:f0:28:8a:d1:03:05:a0:09:bd:15:31:0c:a8:
45:ab:d8:95
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZOhTCeh5UqFtWk3HFedfX2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjQxMjA3MTMyNTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmMyOTU3MWE4OTA1OWNhMmRmMjAyOTVmMWE3MGRjMDk1MjBiNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT/kSqaFlWfEWOS65LNAeVkcQ8G/
o4T3Pod79GCaxl9+pmWcHq5tvqdujZmnNsqeTEnGHA3xG2+jNFx+yH4qGMMaowr8
RDwxUS7Ddiye2cuzVFyLiOceBqRL3vFHRWTpb9sc93PHmJcG93LdkEALv1hJO49A
c0VOFT9LYTkOs9znIrg9qpjwVRb8smiKHulIP6hUNN/3rdEvo7s8C6YhRkIA8z/1
+ZvxbiiQs799u9589XKhQEnYzOxfYNQadJHp5PNkcBlxIEIDV0r5IWuVCJRvM7X9
Z3NO3rWfoJKGMzmuTKPQCSlSF5f8YOkYKTTc8vhsvIJfxNry/Bz3IW0aywIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH/ClXGokFnKLfIClfGnDcCVILc2MB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvZjhLVmNhaVFXY290OGdLVjhhY053SlVndHpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVk/AwQC
LZDoAwQAiny2MA0GCSqGSIb3DQEBCwUAA4IBAQCltND1roaJeenryEPZV/PyhRmX
yCShMw7KokjAgr1VSTbDxOd73u9si3SprZf130i8BHTqjhx8j8w1v3H8dpfDHfgs
bDWos3Vj4uPxHRNAO0rb2wWFH8AAQ1tKR6Zu4G10y9NVXwEHMi9iAJZRlyqLB24u
5xeWpK6/VsR7pdroqsc9brCI4lI0TOtp2bo8sIdDpw4RRSIKA7NT1twsT3yYDlpn
j8yebcjI7wqnacqKIRPBtfY+Yw8fK8fMDzbX9lffuBKZVV363+/oC7hZsHY4UJRH
a3USOv7vRzSeW3on9jq9O65ETsDYsd5gHs7PTfAoitEDBaAJvRUxDKhFq9iV
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:45:20 2025 by rpki-client