Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/h_5DZ1KRlVuQHUb-Kg3jtEtXEMk.roa
File: h_5DZ1KRlVuQHUb-Kg3jtEtXEMk.roa (raw, json)
Hash identifier: MfQUxLBAuB/gG4qWNQYA6koJ/Wdgs873kB2cgaVhMZo=
Subject key identifier: 87:FE:43:67:52:91:95:5B:90:1D:46:FE:2A:0D:E3:B4:4B:57:10:C9
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0193A0D1782D75662CA89AA062ADD3500389
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/h_5DZ1KRlVuQHUb-Kg3jtEtXEMk.roa
Signing time: Sat 07 Dec 2024 11:11:42 +0000
ROA not before: Sat 07 Dec 2024 11:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200195
IP address blocks: 45.89.60.0/24 maxlen: 24
45.89.61.0/24 maxlen: 24
45.150.66.0/24 maxlen: 32
138.124.181.0/24 maxlen: 24
2a0e:4005::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:d1:78:2d:75:66:2c:a8:9a:a0:62:ad:d3:50:03:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Dec 7 11:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87fe43675291955b901d46fe2a0de3b44b5710c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:68:32:36:1d:54:1e:1e:cb:d0:1d:ef:e1:
6e:94:4c:53:aa:12:f4:fe:22:4d:32:16:8b:37:26:
c6:17:6b:48:9f:3f:0d:47:47:eb:42:0a:17:c5:e7:
76:b0:12:85:54:3f:e6:ca:9e:09:05:3d:da:30:a0:
12:ad:a3:e5:d2:26:5b:8e:58:78:8a:ff:69:e2:d6:
79:dd:86:19:8d:e9:15:e1:9a:a2:cc:87:f3:7d:27:
a9:86:53:d5:67:72:16:5e:c7:db:f2:0a:1d:e2:03:
b4:87:4a:da:38:bc:96:fe:0e:4f:31:32:b8:dd:e2:
1b:6d:f4:e0:9c:0f:b1:cb:41:fa:d1:d8:54:ef:24:
bd:88:2c:08:91:cf:af:e8:0f:3d:29:53:0b:b3:9b:
1b:1e:8a:90:1b:2b:1a:1f:df:4d:a9:0d:38:13:90:
1d:fc:92:47:28:f0:73:f0:97:5d:89:98:3f:f3:df:
09:d9:ef:df:19:6b:64:bd:6e:30:5c:f2:97:55:f9:
eb:9e:e8:4a:28:6c:a6:98:18:a8:b3:89:91:7c:56:
dc:60:5c:bd:f8:38:aa:38:15:91:fc:f5:39:e3:70:
40:6c:85:c2:9c:5d:86:b8:26:54:87:49:5e:cc:a8:
d4:34:0a:88:63:89:c4:8f:fc:9f:c5:fa:4c:88:01:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:43:67:52:91:95:5B:90:1D:46:FE:2A:0D:E3:B4:4B:57:10:C9
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/h_5DZ1KRlVuQHUb-Kg3jtEtXEMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.60.0/23
45.150.66.0/24
138.124.181.0/24
IPv6:
2a0e:4005::/32
Signature Algorithm: sha256WithRSAEncryption
9c:cd:cb:2d:7b:04:d1:d7:5c:e0:d1:1b:40:d2:84:8f:78:27:
f5:a3:36:9a:df:c3:f8:11:1d:7c:c2:70:a6:cb:c7:96:e2:02:
d9:4b:ab:84:bb:47:d5:03:cb:c0:0d:d0:a2:1f:2c:6d:91:ca:
5c:6c:a7:5b:bb:38:85:e0:2b:fd:fb:6f:fb:c0:73:0a:f4:1b:
84:02:bb:38:69:16:dd:2d:6f:9d:3b:9c:d6:95:23:de:a6:46:
f6:d9:03:98:66:ab:0f:58:14:66:29:73:ad:84:a4:c6:5d:99:
d1:41:67:79:89:1f:74:aa:a9:24:62:b1:36:12:60:28:e2:43:
7a:bc:ec:9e:fd:7d:bb:3a:5b:3c:ef:00:c4:5e:2e:86:83:d6:
9f:d3:45:de:33:4a:ca:56:b5:59:92:7b:64:5d:be:5f:e7:3b:
b9:5a:15:18:1e:98:17:d0:a1:e8:5d:7c:81:8e:e4:87:ef:49:
8f:5a:4d:c0:5f:07:82:14:64:19:9d:01:aa:f4:c7:b1:c6:e4:
52:95:b0:a7:65:e8:7c:a6:30:d2:ee:52:45:f2:cf:a5:c9:a4:
7f:be:82:69:4e:0b:86:21:9d:2f:a7:88:64:b4:da:77:b0:ca:
63:76:7a:c7:97:8e:fa:a3:58:87:60:c2:3a:19:2b:44:89:c2:
c7:d2:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:36:47 2025 by rpki-client