Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d0o3BnTNtqURVRWyh-5mN-PnXOs.roa
File: d0o3BnTNtqURVRWyh-5mN-PnXOs.roa (raw, json)
Hash identifier: FQj4nUA0r+MEVwc1CbCSp3UoyvV2oIc0HFFZFDbFs10=
Subject key identifier: 77:4A:37:06:74:CD:B6:A5:11:55:15:B2:87:EE:66:37:E3:E7:5C:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A968287AB592EAE184D00A1463AD9B4C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d0o3BnTNtqURVRWyh-5mN-PnXOs.roa
Signing time: Tue 18 Mar 2025 13:18:50 +0000
ROA not before: Tue 18 Mar 2025 13:18:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199959
IP address blocks: 45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.76.0/22 maxlen: 24
193.47.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:68:28:7a:b5:92:ea:e1:84:d0:0a:14:63:ad:9b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 18 13:18:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=774a370674cdb6a5115515b287ee6637e3e75ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:64:5d:e6:1f:c9:78:5d:32:1d:91:c6:dd:
92:99:95:bf:10:81:ac:9d:d8:13:a2:ed:41:ce:7d:
da:ec:2d:04:a9:f6:d5:7a:4d:96:7d:6d:7d:c8:82:
c3:34:72:88:43:95:d7:81:9f:20:f8:41:a2:56:a5:
19:30:29:11:1c:64:ba:fc:a7:4f:24:ca:a3:58:f5:
69:9e:d5:7e:65:46:ff:9d:a8:72:c3:eb:b3:0a:24:
68:02:9d:be:11:f4:86:44:d3:f9:db:ec:db:c6:f9:
91:2d:50:a1:09:e0:5b:db:47:51:2f:0d:d5:9d:9e:
28:b8:35:17:40:f7:03:07:25:48:af:44:e0:93:1a:
15:9e:cd:55:05:93:af:95:0e:82:49:dc:24:09:f7:
3f:3c:03:36:07:7f:00:f4:67:56:4c:91:0b:3e:d8:
72:6d:42:a3:70:c0:e2:e2:e9:f8:57:ce:67:42:23:
2c:21:42:28:1e:69:e4:d1:4d:b0:33:16:be:7f:02:
5b:5b:60:3a:a2:fe:45:ea:ab:d7:be:b8:2a:2a:50:
e3:61:5a:d1:5a:b8:f0:1b:01:62:cc:6f:ad:a8:9c:
25:a0:19:c3:c9:c7:eb:46:45:84:bb:bb:cf:20:93:
88:24:fc:51:de:30:40:38:2a:4b:d8:51:62:c5:50:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4A:37:06:74:CD:B6:A5:11:55:15:B2:87:EE:66:37:E3:E7:5C:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d0o3BnTNtqURVRWyh-5mN-PnXOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.123.0/24
91.92.67.0/24
93.123.76.0/22
193.47.62.0/24
Signature Algorithm: sha256WithRSAEncryption
58:64:8b:88:7b:c1:c7:6e:f0:82:b9:23:65:91:bf:b6:d6:1a:
78:07:fc:47:c2:eb:8e:19:e8:6a:07:a6:2f:08:49:6f:27:6b:
a0:23:7c:19:74:4c:47:52:ba:68:e3:ad:46:c1:93:a4:94:c3:
70:0c:96:a6:f3:60:5a:18:a4:83:66:ef:cb:b7:fd:02:51:01:
67:45:7d:43:7f:53:09:ee:f9:fe:8d:cc:f6:c0:23:24:6b:e6:
41:2b:b6:97:47:aa:1d:8f:4e:17:b3:a5:81:a9:d2:a0:b7:a7:
8f:93:b7:c2:96:92:e1:23:09:02:88:75:af:41:54:70:0b:e2:
f3:c8:c1:2a:8a:0e:6a:cb:01:fc:a5:bd:ca:3c:6e:8a:dc:0a:
d8:18:19:56:fb:4e:f1:d8:0f:fd:cb:de:58:4c:76:5e:0f:ff:
ae:d3:a5:22:c2:b0:1d:f8:db:cd:32:c4:a6:52:46:68:3c:b6:
26:17:02:b5:da:bc:e4:d5:a4:31:a8:ba:aa:78:3b:f4:66:0e:
39:37:89:60:a6:f8:68:a1:58:a8:85:57:5f:b6:a4:5d:b6:d3:
ab:90:10:eb:e4:b7:10:9b:c1:1f:15:77:a9:e7:90:cf:01:d8:
eb:e3:fe:4d:0f:f8:e9:c3:e2:92:7d:17:9d:88:3d:40:5c:2a:
de:c8:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:18 2025 by rpki-client