Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/Rddl2fet2Vm20A8CAANZDEDIPUg.roa
File: Rddl2fet2Vm20A8CAANZDEDIPUg.roa (raw, json)
Hash identifier: lOl+MUezAcTpCpeSwRzbh1C2gHNRKYk6JdG5EannzwU=
Subject key identifier: 45:D7:65:D9:F7:AD:D9:59:B6:D0:0F:02:00:03:59:0C:40:C8:3D:48
Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial: 018A8D892589E9968616AE5F2578FE3DA1C5
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/Rddl2fet2Vm20A8CAANZDEDIPUg.roa
Signing time: Wed 13 Sep 2023 07:54:50 +0000
ROA not before: Wed 13 Sep 2023 07:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 195.46.38.0/24 maxlen: 24
91.213.115.0/24 maxlen: 24
91.200.50.0/24 maxlen: 24
91.241.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:89:25:89:e9:96:86:16:ae:5f:25:78:fe:3d:a1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Validity
Not Before: Sep 13 07:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45d765d9f7add959b6d00f020003590c40c83d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:e1:b5:95:65:18:e2:95:37:fe:62:15:85:
d2:6e:97:6f:09:76:00:d4:8f:bf:40:75:08:9a:fd:
0f:34:95:19:1c:77:3e:32:d7:74:ff:7e:78:aa:f9:
21:08:4d:7b:e1:e4:34:50:b9:84:ae:2a:29:a4:02:
87:f3:c0:4d:97:83:14:74:fe:5d:18:b1:26:93:a4:
fd:ca:a6:4e:65:50:25:53:76:50:04:17:9a:24:27:
a9:d8:54:25:8b:fb:b5:79:b2:52:93:c2:28:a9:a7:
0a:8d:22:63:93:4b:b3:15:18:48:26:f7:e1:10:4b:
aa:53:3a:02:8c:34:fd:8c:b4:e6:1d:64:67:4a:36:
b0:d9:44:47:b7:b3:d1:a7:9b:d1:e8:6f:c0:ab:13:
1d:99:f7:bb:a2:65:88:5b:10:c1:a6:5d:b4:40:ea:
da:6c:99:fc:59:72:e3:c0:57:d5:8a:b4:03:59:25:
9d:3f:c9:80:c7:3a:be:c8:89:a5:d8:b6:d3:19:3f:
75:60:04:37:0b:ed:77:e7:7e:ea:e3:f2:61:65:2e:
71:0b:3c:22:a6:a8:be:05:b2:1b:dd:7e:60:41:73:
e5:f7:a7:bd:3c:bb:7d:17:fc:20:8b:b6:82:2c:b0:
85:29:6e:83:88:0b:d4:f1:3b:4a:63:de:db:37:68:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D7:65:D9:F7:AD:D9:59:B6:D0:0F:02:00:03:59:0C:40:C8:3D:48
X509v3 Authority Key Identifier:
keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/Rddl2fet2Vm20A8CAANZDEDIPUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.50.0/24
91.213.115.0/24
91.241.6.0/23
195.46.38.0/24
Signature Algorithm: sha256WithRSAEncryption
33:08:34:d9:28:71:5f:91:c9:73:da:8d:55:0f:21:5a:8c:dd:
bb:25:dd:01:41:21:30:0e:83:63:99:b9:44:36:bd:44:d5:da:
2e:a9:56:36:ac:23:cd:c7:6e:7f:41:09:cb:02:21:ba:9a:f9:
b4:8a:83:46:bb:d9:a7:35:e0:66:ee:ea:9c:79:15:bf:30:0c:
f3:65:ed:08:df:62:a6:01:e1:4e:87:21:c0:1a:e4:ba:c0:42:
d2:c0:fa:e1:ee:41:ea:e6:10:24:9f:96:e3:25:61:4f:ee:99:
89:17:e0:1a:5b:da:16:c3:52:d9:e1:33:f5:2b:a7:eb:57:99:
82:3c:4d:ce:37:3e:a6:25:fc:59:81:08:c4:17:a4:28:d4:d9:
58:d6:ef:a5:c1:bd:c0:9f:d2:a3:49:73:dc:60:3c:d3:33:17:
a2:86:4c:22:f2:3e:f4:ea:be:10:3c:ac:bc:94:3a:c0:ad:60:
5e:0e:3a:ea:17:24:05:b6:6c:09:cb:57:e3:77:06:b8:68:4c:
4f:21:0a:4f:2d:9d:73:07:af:73:56:2b:47:5e:a3:c2:ed:d9:
c5:90:5e:f9:5b:ed:98:45:49:a9:7e:ff:cc:59:54:a2:45:c2:
3b:17:90:a1:26:1f:9d:9f:0d:f3:a2:30:fd:15:95:f2:87:6c:
c5:1c:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:26:02 2025 by rpki-client