Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hWO1l4tIwHyKuYPtY2wk0WqI_Js.roa
File: hWO1l4tIwHyKuYPtY2wk0WqI_Js.roa (raw, json)
Hash identifier: rChZ5XOOSprPqdBY+kp2dmkc7mIV3L5U23fMfoqU4Tc=
Subject key identifier: 85:63:B5:97:8B:48:C0:7C:8A:B9:83:ED:63:6C:24:D1:6A:88:FC:9B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195B978EA1E70461BD735C88E2966A88D18
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hWO1l4tIwHyKuYPtY2wk0WqI_Js.roa
Signing time: Fri 21 Mar 2025 16:11:04 +0000
ROA not before: Fri 21 Mar 2025 16:11:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.86.15.0/24 maxlen: 24
45.141.176.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:78:ea:1e:70:46:1b:d7:35:c8:8e:29:66:a8:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 21 16:11:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8563b5978b48c07c8ab983ed636c24d16a88fc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:5f:87:ef:dc:62:0d:0a:fb:b0:1a:72:90:
5c:d1:d1:d1:c4:f2:4a:38:ef:c2:1a:a1:08:2e:2d:
b0:7e:f2:ff:c1:fa:25:fe:f7:96:26:87:8b:d1:a6:
c5:bf:81:2f:01:1c:be:dc:78:e0:18:75:45:38:fb:
e6:b5:f9:d0:1e:4e:5d:a7:22:76:6d:0a:ae:d1:a1:
98:c4:89:4c:5d:a6:f7:1e:0b:fd:da:46:1d:a2:84:
1d:46:b5:e9:84:6b:c9:12:c0:ca:d0:15:b7:8b:9b:
d2:0f:e6:01:36:be:f9:96:60:2f:4a:9c:7b:bc:20:
bc:61:63:bc:5e:be:db:20:8d:5d:95:ae:d3:9a:84:
18:bf:4d:c6:bb:3e:a2:d1:a8:85:60:36:3b:9b:ea:
b3:8b:e1:b8:f5:03:31:c2:c3:7a:34:88:df:df:a5:
1d:2f:a6:e1:98:bb:89:95:93:5e:32:b3:29:e0:b7:
5c:1d:b3:2a:c6:00:9a:26:6a:89:c2:17:cf:f4:93:
5f:83:5c:8b:55:0b:bf:05:88:96:8a:ad:bb:17:75:
0e:06:fc:65:4c:a2:72:a9:b4:52:b6:28:f7:8b:7b:
18:0d:35:91:46:5a:0f:82:bd:85:16:84:34:6c:48:
7f:b9:8a:87:7c:8b:99:b4:1c:10:52:fd:59:a0:2d:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:B5:97:8B:48:C0:7C:8A:B9:83:ED:63:6C:24:D1:6A:88:FC:9B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hWO1l4tIwHyKuYPtY2wk0WqI_Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.15.0/24
45.141.176.0/24
45.146.91.0/24
185.214.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:98:a5:df:e2:a6:4b:84:b2:d3:44:da:5b:90:80:bb:99:e1:
16:56:8d:1f:52:e6:19:e3:12:c7:11:39:ef:0a:a0:cb:55:6b:
5e:56:22:eb:57:69:6b:94:6a:b9:a0:0e:07:6c:c3:32:7b:c4:
9a:8c:8d:93:7f:64:d6:57:14:10:60:31:60:e1:42:f2:4b:81:
d5:bb:8e:a1:a2:a6:2d:5c:5f:cd:21:a0:7f:5d:e5:c1:96:ee:
53:b3:da:1c:3e:16:f7:f4:46:81:f0:66:2d:97:e1:7f:55:30:
88:36:a5:cd:b9:8f:3c:5f:49:40:8b:00:0c:92:60:73:0f:63:
16:e1:40:2f:30:3e:1b:fe:ed:99:d8:a7:09:ee:59:09:08:76:
6f:bd:6e:1e:89:3e:3d:fa:ee:41:de:e6:f8:fb:d2:0a:de:c1:
7b:c6:42:67:af:07:4a:f7:04:60:7e:82:af:0c:63:44:39:b5:
6d:cb:57:d4:ac:89:c2:44:ca:85:fd:5c:b1:71:8a:71:68:58:
46:52:88:65:c8:ff:ae:ef:94:62:66:16:fd:35:4c:7a:97:fc:
8b:03:98:b4:c0:a6:56:4b:17:b8:47:11:3d:63:1a:d3:5e:f3:
66:d5:f7:41:de:c5:b4:ba:a9:3b:ac:0a:8a:a9:fb:46:c6:1a:
e5:0f:c5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:49 2025 by rpki-client