Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ivaRRc1DWzJYCrjzmD7SPHajmck.roa
File: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (raw, json)
Hash identifier: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=
Subject key identifier: 8A:F6:91:45:CD:43:5B:32:58:0A:B8:F3:98:3E:D2:3C:76:A3:99:C9
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA64E077FD2EBD014B345138A2633E
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ivaRRc1DWzJYCrjzmD7SPHajmck.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 45.85.247.0/24 maxlen: 24
62.68.64.0/24 maxlen: 24
62.68.72.0/24 maxlen: 24
91.212.122.0/24 maxlen: 24
91.229.5.0/24 maxlen: 24
193.110.161.0/24 maxlen: 24
193.201.202.0/24 maxlen: 24
194.55.128.0/24 maxlen: 24
195.60.170.0/24 maxlen: 24
217.8.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:e0:77:fd:2e:bd:01:4b:34:51:38:a2:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8af69145cd435b32580ab8f3983ed23c76a399c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:b5:d0:4f:36:3b:96:8a:02:fb:3f:36:bf:
7a:08:d3:f7:b9:22:e0:71:04:36:89:ea:48:fb:1d:
86:67:0c:6e:9c:9b:b2:b4:09:ac:08:f3:33:cc:91:
c4:f1:0e:7a:6f:91:af:9a:54:02:7b:e4:b8:cd:86:
18:9e:6e:3a:3c:02:9b:9f:45:ae:51:8c:a3:24:66:
be:06:3d:06:94:15:1b:eb:b8:15:ff:3a:9f:21:f9:
0d:17:6c:6f:a6:f6:1c:02:fc:f5:8e:c8:8b:36:0b:
56:4f:bb:87:3a:2f:78:95:76:73:41:f1:74:ae:6d:
d7:42:59:32:ef:ee:f1:11:d2:15:7d:a0:81:cd:f0:
2a:89:26:25:8a:92:24:eb:87:dd:92:5d:14:98:a3:
ce:bf:a1:00:b4:e7:52:b0:9a:9b:50:b9:40:59:7a:
98:76:ce:30:79:a1:56:ea:de:01:9d:6b:08:0f:c8:
f8:62:f9:3a:d9:7e:c9:03:ec:72:0e:37:47:d6:62:
14:f7:61:e0:24:09:54:3a:ae:14:31:cb:5e:10:67:
9f:1d:c8:a6:1a:d3:d3:90:5f:40:86:c3:f0:90:be:
28:a3:92:1d:80:1e:e8:5a:46:46:61:c6:83:86:4c:
88:22:8d:94:68:52:75:29:fe:cb:53:36:2c:70:a7:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:91:45:CD:43:5B:32:58:0A:B8:F3:98:3E:D2:3C:76:A3:99:C9
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ivaRRc1DWzJYCrjzmD7SPHajmck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.247.0/24
62.68.64.0/24
62.68.72.0/24
91.212.122.0/24
91.229.5.0/24
193.110.161.0/24
193.201.202.0/24
194.55.128.0/24
195.60.170.0/24
217.8.116.0/24
Signature Algorithm: sha256WithRSAEncryption
73:33:0c:08:8f:09:95:7e:d9:4f:4b:ce:ad:32:a5:e8:07:33:
b4:a3:bb:c2:c1:81:36:c2:a7:13:b3:3c:12:e7:10:52:74:9a:
79:2a:a1:35:c7:9a:e4:53:98:52:94:eb:a2:50:32:02:8c:9f:
87:4e:2d:4d:d5:25:55:9c:4e:fa:ec:60:ff:c9:7e:83:76:98:
63:1e:b7:9b:d4:b2:ce:12:bb:ec:10:f3:52:a4:cc:30:93:51:
38:59:67:b7:59:79:a2:97:89:71:fb:d8:33:65:37:7b:cf:73:
a7:34:62:8e:0a:f5:0d:fb:10:ee:a1:f9:41:02:84:18:fe:90:
e7:37:71:e1:76:74:04:44:26:a8:b5:73:a7:0e:d6:60:0c:7b:
b0:97:83:ba:68:84:ef:6c:10:29:06:0f:73:b1:ba:1d:9d:9c:
cc:56:2c:05:93:58:38:6e:12:18:bd:0b:99:8c:8c:15:be:5b:
7b:aa:30:e8:bd:f9:a2:c4:b6:19:b3:29:d2:fe:12:ca:65:d9:
ef:45:88:40:79:02:9c:6d:3d:a6:99:ac:7b:6b:c3:34:db:68:
a8:38:2d:d5:0c:3c:0a:4a:43:26:46:67:0e:dc:f4:08:3a:ad:
b3:49:74:1d:21:d6:e4:d6:79:c2:60:9e:55:17:9b:e6:1e:66:
ae:72:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:20:41 2025 by rpki-client