Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B4aTGeI4AnNmAUdr62gsGK9figA.roa
File: B4aTGeI4AnNmAUdr62gsGK9figA.roa (raw, json)
Hash identifier: K16rydFIIEfiKB0y+/JDLBJGwIuwTGT8s6lODnjC1Eg=
Subject key identifier: 07:86:93:19:E2:38:02:73:66:01:47:6B:EB:68:2C:18:AF:5F:8A:00
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195C74B37D7B902B7B373CA3BF14AC73F58
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B4aTGeI4AnNmAUdr62gsGK9figA.roa
Signing time: Mon 24 Mar 2025 08:35:50 +0000
ROA not before: Mon 24 Mar 2025 08:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 45.90.88.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:4b:37:d7:b9:02:b7:b3:73:ca:3b:f1:4a:c7:3f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 24 08:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07869319e23802736601476beb682c18af5f8a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:b1:e0:81:91:b7:4b:68:6f:64:d9:c4:2e:
a1:0b:08:59:ca:3e:c9:ab:66:27:7c:ef:d8:a1:8a:
cb:f1:05:2f:57:19:fd:41:ea:a2:b5:91:6d:3d:e8:
2d:b5:4b:ff:ca:5d:49:00:5e:6e:b8:23:cc:c4:be:
1c:74:63:b1:de:b4:9b:9b:e4:80:c4:5b:1c:a0:a4:
50:bc:5a:46:97:9f:cd:32:80:ab:d7:46:ae:5f:0c:
c4:74:02:ba:f4:47:f9:98:02:54:c1:2e:59:7e:2a:
45:5e:02:5a:ba:b5:79:d7:41:6e:7a:b1:bc:62:07:
69:f5:7a:8c:9b:5e:7a:7e:55:6e:78:f2:0d:5a:80:
1b:98:1a:7a:45:6b:f1:7c:f3:1b:d0:f6:51:a0:e3:
b4:ba:0a:8f:34:01:80:ac:63:a5:36:fb:7d:ef:e0:
16:50:d6:41:e0:39:90:d0:68:d4:e3:ce:57:1a:5f:
63:62:75:5f:6c:e8:d8:c6:7a:a5:c5:21:06:87:96:
e7:56:d3:f2:55:9d:44:91:2e:07:96:8d:f7:1f:c1:
48:08:75:28:3d:d4:0c:f3:c6:26:d0:8f:df:75:56:
ae:02:6c:06:bc:a2:be:ad:df:91:0e:6a:be:25:c7:
ee:ae:87:d5:5d:7b:dd:dd:e8:0f:df:d4:0d:2f:53:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:93:19:E2:38:02:73:66:01:47:6B:EB:68:2C:18:AF:5F:8A:00
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/B4aTGeI4AnNmAUdr62gsGK9figA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.88.0/24
45.149.242.0/24
87.121.103.0-87.121.104.255
93.123.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ae:66:f3:6b:3d:12:31:eb:f2:5c:8a:25:74:40:c5:e1:57:
11:bc:cf:83:02:f1:8e:bd:03:48:98:5a:ae:89:a0:50:27:f9:
83:4c:20:bb:6b:55:66:f4:85:f3:07:1d:ad:c6:00:16:42:02:
d5:e6:21:b6:5e:66:d7:37:dd:30:5c:3b:cf:8b:da:92:83:bb:
73:da:7b:22:d0:d4:58:b4:6b:38:1b:2f:0b:81:b9:a8:22:80:
77:a3:c5:88:06:11:b7:f5:7d:58:c1:96:26:9a:1b:89:b2:15:
32:20:c0:35:72:a9:98:2b:ff:09:cf:52:eb:d2:9c:fd:ab:be:
bd:51:e5:32:96:e6:1b:e9:39:c6:72:c4:2a:ba:25:5e:f3:58:
52:7f:c8:0b:a2:44:ee:1f:7a:e3:cd:fd:77:1a:b8:5a:36:fb:
dc:67:e4:11:28:c7:e3:73:0e:9a:6c:37:90:bc:3a:6e:e7:ea:
ee:75:3c:33:b0:43:15:72:be:cb:8c:11:89:10:33:06:40:1d:
f7:7f:af:21:db:0a:6e:5a:f1:d3:8f:95:c0:f0:a6:c3:da:be:
a7:82:30:9e:26:d5:8c:ec:bd:d8:2b:38:c4:c4:08:59:2a:47:
5e:3b:bf:7f:24:1c:5a:95:8e:cf:f3:67:a5:32:23:39:06:ed:
e9:fd:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:08 2025 by rpki-client