Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/U1lFlyacXhQwf8OG2nD2ys6_T54.roa
File: U1lFlyacXhQwf8OG2nD2ys6_T54.roa (raw, json)
Hash identifier: C+WfUYLC7dZg6aX1xOdMK1eWPccxj/uPzzt9nJPGx4k=
Subject key identifier: 53:59:45:97:26:9C:5E:14:30:7F:C3:86:DA:70:F6:CA:CE:BF:4F:9E
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 0195391CCA973217AE8A108A99D82759A89F
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/U1lFlyacXhQwf8OG2nD2ys6_T54.roa
Signing time: Mon 24 Feb 2025 17:59:02 +0000
ROA not before: Mon 24 Feb 2025 17:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212655
IP address blocks: 45.92.44.0/22 maxlen: 24
83.217.160.0/20 maxlen: 20
185.8.92.0/24 maxlen: 24
185.8.94.0/23 maxlen: 23
185.26.240.0/22 maxlen: 22
185.154.144.0/22 maxlen: 22
193.28.90.0/24 maxlen: 24
2a0e:1d40::/29 maxlen: 41
2a10:6940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:1c:ca:97:32:17:ae:8a:10:8a:99:d8:27:59:a8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Feb 24 17:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53594597269c5e14307fc386da70f6cacebf4f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:f6:04:bf:f9:30:bb:cd:e9:cd:d9:80:1c:
a7:8d:86:35:69:5b:07:85:51:80:3f:4b:6c:0b:db:
72:3d:34:cd:c7:b2:4b:d4:3e:e3:b4:4e:69:ba:60:
ad:57:7a:35:5d:db:4c:3f:c0:19:24:cb:a0:0e:a0:
dd:3b:21:cf:6e:83:f4:a9:b6:8c:e2:d4:9f:01:93:
ca:40:ff:b9:f1:26:53:2e:fc:b1:39:80:65:0a:33:
5c:be:15:1f:04:9a:f5:cf:92:e4:f3:88:66:4a:34:
64:0e:e8:b6:2d:9b:0e:eb:54:0d:d7:40:01:f7:68:
fe:e6:5e:05:e4:62:aa:13:56:40:45:c6:73:0f:71:
07:c9:d2:d2:10:df:3e:04:6c:fc:9f:55:0a:d8:d0:
b8:b3:eb:5e:be:a6:fa:49:c3:86:05:c2:3a:12:01:
68:39:99:a3:ae:1f:f2:cb:2a:4a:55:ea:4d:70:d5:
de:9f:29:b4:fc:7b:79:67:28:85:97:83:e0:09:84:
70:de:e3:55:cf:12:28:69:98:36:36:f7:3d:ba:d4:
32:fa:48:7a:40:b6:99:f1:b8:96:db:ea:66:37:29:
3e:9e:f8:bc:1d:bf:16:51:8b:ef:34:b3:03:61:95:
47:e9:8f:17:9f:3e:af:03:20:3b:e6:62:68:c0:44:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:59:45:97:26:9C:5E:14:30:7F:C3:86:DA:70:F6:CA:CE:BF:4F:9E
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/U1lFlyacXhQwf8OG2nD2ys6_T54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
83.217.160.0/20
185.8.92.0/24
185.8.94.0/23
185.26.240.0/22
185.154.144.0/22
193.28.90.0/24
IPv6:
2a0e:1d40::/29
2a10:6940::/29
Signature Algorithm: sha256WithRSAEncryption
39:7a:9f:cb:b1:76:d9:83:a6:bb:c7:13:97:cb:d2:7f:c8:da:
a0:5b:3e:e1:08:5a:d8:33:02:3a:ef:fe:3a:9f:ba:ea:0a:f4:
3e:8d:f8:c7:cc:2e:a6:bf:61:81:04:13:86:12:b6:9e:64:71:
5c:ae:d7:85:c9:ab:b0:97:5c:ec:ff:24:25:aa:f1:df:57:6e:
21:f3:67:16:87:35:a8:43:58:7c:bc:93:24:70:67:b5:79:5a:
1c:ae:29:d6:77:b1:a8:b0:f6:df:5f:e7:ef:55:04:65:5d:93:
8f:5a:37:ff:25:12:6b:bd:2d:6f:1b:66:f6:bc:e2:e9:72:f6:
8b:64:31:77:f6:27:49:fc:f0:d7:70:fc:38:fb:ac:7b:72:43:
92:86:18:81:bc:dc:c2:3a:e2:da:ef:7f:a5:1e:9a:1e:03:b0:
c6:95:39:c8:d2:f6:67:b1:99:4d:76:20:ca:15:9d:79:da:bd:
09:b1:16:d8:fb:c0:df:95:c5:ab:c9:90:ce:6c:c7:da:65:c0:
59:55:c5:89:c9:45:57:8e:a2:94:89:c3:86:5f:fa:11:ba:4c:
ac:b1:ad:51:9e:a2:49:f0:95:22:50:0b:5b:37:fb:53:e7:ee:
09:57:2a:68:e5:af:f2:11:28:24:6a:14:fa:57:10:4d:dc:e1:
45:df:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:30:16 2025 by rpki-client