Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/3WnWhyh5UPfKLWPic4-d0YgjLNA.roa
File: 3WnWhyh5UPfKLWPic4-d0YgjLNA.roa (raw, json)
Hash identifier: hCjazn4Qp7qXV71BbrIeVHf/cSl4FrCFjxIagIdR/Zc=
Subject key identifier: DD:69:D6:87:28:79:50:F7:CA:2D:63:E2:73:8F:9D:D1:88:23:2C:D0
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019422FC446C12B4815AE5BC453B806BEEF7
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/3WnWhyh5UPfKLWPic4-d0YgjLNA.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:44:6c:12:b4:81:5a:e5:bc:45:3b:80:6b:ee:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd69d687287950f7ca2d63e2738f9dd188232cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:a3:d7:9d:ad:c8:f0:dd:fd:78:61:b8:f0:
05:69:c2:60:67:6a:d4:bb:6f:a9:db:1e:e4:8f:f6:
10:d8:a6:dc:c8:8d:4f:f0:7b:4e:7e:3b:0b:0b:79:
b4:bc:08:45:bc:3f:d2:33:a0:63:95:4a:94:bd:72:
9a:62:df:93:4b:39:6e:4c:e9:52:f0:d4:d1:c8:7a:
06:2e:4a:b2:50:3a:a5:00:1c:8d:a2:9c:c1:52:c8:
83:5e:dd:92:1d:85:26:f8:b5:6b:ef:a8:33:1a:9d:
ec:50:b2:84:3a:7e:8f:e6:c7:af:e1:a0:6c:e7:29:
c1:13:29:ff:9e:f1:e5:99:16:d9:ff:da:60:e7:10:
14:fb:e8:a0:79:2a:19:f3:ae:b6:c2:05:39:b5:f4:
6e:c1:29:4f:0a:f8:55:cb:cb:e3:84:19:3d:cb:ca:
67:ab:48:2e:f6:48:46:21:39:87:a6:eb:59:4f:6e:
33:09:a6:a1:1d:60:a4:37:fa:46:2a:7e:6e:72:da:
76:b0:b8:a1:1a:f4:65:fd:ea:52:81:7d:e8:db:ad:
94:1f:d2:d9:7c:34:15:77:4a:87:3f:08:30:62:e4:
9e:2e:bb:91:40:eb:7d:2e:a1:50:61:97:f0:e0:ce:
f3:2e:16:3e:0c:84:a9:c5:2e:25:ea:39:e6:fd:c1:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:D6:87:28:79:50:F7:CA:2D:63:E2:73:8F:9D:D1:88:23:2C:D0
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/3WnWhyh5UPfKLWPic4-d0YgjLNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
86:ae:dc:ed:e7:0d:7d:9b:1b:17:2d:f4:3c:ac:06:e7:27:6f:
3b:8a:4e:c3:3d:2a:18:ad:af:30:87:59:da:a5:ca:a0:63:b8:
0a:a9:11:98:09:3c:fc:11:0d:44:6a:19:1e:65:e0:d4:f6:5e:
d5:ff:c4:71:e3:bf:a7:91:a8:57:0b:b0:20:d9:b0:b7:3f:e1:
1e:15:34:12:ee:f3:ca:e1:46:4f:ee:6d:56:08:a9:cc:ca:b5:
b8:12:87:d4:df:23:83:8f:e1:06:ce:ef:b5:d2:e3:7d:b0:b6:
21:e4:94:55:e7:5c:02:fb:65:74:ed:5c:fe:3c:f1:af:a8:43:
82:57:02:21:74:b6:b1:3b:05:e6:85:64:dd:c4:9d:29:b0:b6:
95:d7:8c:89:18:f5:7c:82:51:22:35:78:7b:31:8f:be:37:1b:
fd:23:ed:7c:75:3c:d8:36:26:e1:64:40:e0:0f:b3:0d:17:ce:
f9:86:7e:fa:47:46:8c:e8:a4:a0:2f:bd:e3:40:94:57:9d:e9:
b7:16:9f:8e:00:e7:a1:93:15:a8:96:c6:39:1c:3f:90:e5:38:
35:de:48:5b:55:8d:cc:e9:71:1e:7e:3c:59:55:ac:aa:26:d0:
1a:02:d5:e1:59:a8:f0:e6:1b:07:72:9a:20:7a:71:8f:55:53:
0f:e2:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:10 2025 by rpki-client