Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/m1SelAXu0Ky3a_DAHuu1fA_dREs.roa
File: m1SelAXu0Ky3a_DAHuu1fA_dREs.roa (raw, json)
Hash identifier: puMRRfWxvDw4z5XgOrtHiYsXZMsqNJJaD7u85Dvioow=
Subject key identifier: 9B:54:9E:94:05:EE:D0:AC:B7:6B:F0:C0:1E:EB:B5:7C:0F:DD:44:4B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A45DE564ABC420EC0F46DB96F718E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/m1SelAXu0Ky3a_DAHuu1fA_dREs.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60945
IP address blocks: 45.85.194.0/24 maxlen: 24
185.133.73.0/24 maxlen: 24
194.156.159.0/24 maxlen: 32
2a06:7a03::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:45:de:56:4a:bc:42:0e:c0:f4:6d:b9:6f:71:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b549e9405eed0acb76bf0c01eebb57c0fdd444b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1b:11:78:08:30:80:fe:69:a6:b8:bb:30:7b:
4a:09:89:a2:04:bb:f2:6a:fb:85:fa:66:8e:c2:c2:
ae:e7:ba:96:bd:e3:9b:7b:23:f1:6a:e2:f3:16:f6:
3e:c9:f3:1d:3e:d3:37:3f:03:42:d4:69:2c:f1:e8:
76:52:79:19:ba:bf:59:ea:05:84:44:a7:2a:0c:ec:
a9:92:a0:14:c5:94:3f:93:4c:62:8a:89:ae:85:7c:
f6:f8:72:18:f1:46:a5:ce:c1:9f:1c:c4:81:63:3d:
3b:9d:c5:35:c0:16:50:84:ba:c8:25:52:06:11:e9:
c0:c0:a4:37:64:62:9d:90:03:90:43:73:53:11:52:
f4:77:16:6c:09:41:1b:cf:3c:09:76:a7:47:fb:10:
16:fd:b6:86:9c:a9:11:db:af:1a:a6:31:d0:ff:f6:
cb:24:2d:a0:5a:cf:1d:32:30:bb:3d:48:8a:3d:df:
1a:5a:47:42:b2:31:24:c8:13:ff:eb:48:f4:5c:c6:
a8:60:8a:26:dd:48:f2:66:f1:a4:cb:b9:fa:f8:67:
ac:f1:52:b7:13:5a:8e:b7:9c:ee:ef:19:bb:76:ad:
45:ca:e3:27:12:22:b0:c5:1b:da:4b:78:63:3e:47:
99:87:74:d6:f8:8a:55:ad:a8:2d:8f:53:49:9f:a1:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:54:9E:94:05:EE:D0:AC:B7:6B:F0:C0:1E:EB:B5:7C:0F:DD:44:4B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/m1SelAXu0Ky3a_DAHuu1fA_dREs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.194.0/24
185.133.73.0/24
194.156.159.0/24
IPv6:
2a06:7a03::/48
Signature Algorithm: sha256WithRSAEncryption
00:b3:35:16:99:06:0a:52:ee:a4:7a:94:05:3d:1e:d3:48:0a:
35:bd:05:c3:2a:57:64:96:88:8e:5a:7d:55:57:11:2d:3b:76:
be:0a:3f:c2:4c:48:1c:18:df:af:c2:f2:1b:88:ef:de:17:1e:
22:49:5f:09:86:e9:62:90:f6:bf:eb:a7:04:08:ab:ea:a9:d3:
4d:f5:8b:36:ae:d0:22:75:79:f4:1e:02:63:48:6c:cc:87:ab:
d8:a3:29:09:58:7b:eb:df:9d:b3:14:ab:d2:cb:2e:42:ef:a0:
bc:f7:1a:6c:ac:f2:20:b1:b5:31:dd:27:56:2b:79:60:df:7b:
c3:c7:57:bf:73:1d:34:3c:0c:df:65:95:a0:d2:ec:77:6e:8b:
23:71:0c:8b:85:64:35:2a:06:e2:52:17:67:65:ea:fb:f7:0f:
3d:f6:30:13:79:a0:bf:c6:ae:8d:60:f5:0b:98:aa:58:c2:f1:
86:df:11:af:7b:ba:64:d7:86:86:f8:7c:fb:b7:3e:c8:97:c0:
c7:61:57:2a:ae:80:33:1e:13:2f:fd:7e:04:ee:95:c6:95:1b:
61:14:d1:42:7a:07:4a:ff:22:ac:67:c3:cc:23:4b:cc:af:c6:
68:12:b4:60:6c:c4:13:c3:50:4f:f9:86:6e:9d:7a:b0:3e:1d:
bf:cf:65:79
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQjakXeVkq8Qg7A9G25b3GOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMTAxMTk0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjU0OWU5NDA1ZWVkMGFjYjc2YmYwYzAxZWViYjU3YzBmZGQ0NDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BsReAgwgP5ppri7MHtKCYmiBLvy
avuF+maOwsKu57qWveObeyPxauLzFvY+yfMdPtM3PwNC1Gks8eh2UnkZur9Z6gWE
RKcqDOypkqAUxZQ/k0xiiomuhXz2+HIY8UalzsGfHMSBYz07ncU1wBZQhLrIJVIG
EenAwKQ3ZGKdkAOQQ3NTEVL0dxZsCUEbzzwJdqdH+xAW/baGnKkR268apjHQ//bL
JC2gWs8dMjC7PUiKPd8aWkdCsjEkyBP/60j0XMaoYIom3UjyZvGky7n6+Ges8VK3
E1qOt5zu7xm7dq1FyuMnEiKwxRvaS3hjPkeZh3TW+IpVragtj1NJn6H2AQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFJtUnpQF7tCst2vwwB7rtXwP3URLMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvbTFTZWxBWHUwS3kzYV9EQUh1dTFmQV9kUkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALVXCAwQA
uYVJAwQAwpyfMA8EAgACMAkDBwAqBnoDAAAwDQYJKoZIhvcNAQELBQADggEBAACz
NRaZBgpS7qR6lAU9HtNICjW9BcMqV2SWiI5afVVXES07dr4KP8JMSBwY36/C8huI
794XHiJJXwmG6WKQ9r/rpwQIq+qp0031izau0CJ1efQeAmNIbMyHq9ijKQlYe+vf
nbMUq9LLLkLvoLz3Gmys8iCxtTHdJ1YreWDfe8PHV79zHTQ8DN9llaDS7HduiyNx
DIuFZDUqBuJSF2dl6vv3Dz32MBN5oL/Gro1g9QuYqljC8YbfEa97umTXhob4fPu3
PsiXwMdhVyqugDMeEy/9fgTulcaVG2EU0UJ6B0r/Iqxnw8wjS8yvxmgStGBsxBPD
UE/5hm6derA+Hb/PZXk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:27 2025 by rpki-client