Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xloRwAt-DnTJMRwaEQLqxzPN2qw.roa
File: xloRwAt-DnTJMRwaEQLqxzPN2qw.roa (raw, json)
Hash identifier: hFklf1Xqn/j+yM+SNSIOpYoq9ahMJUuzIWqhbrhopNc=
Subject key identifier: C6:5A:11:C0:0B:7E:0E:74:C9:31:1C:1A:11:02:EA:C7:33:CD:DA:AC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194BC4CF235424160C314B72A7C6BD1ECA0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xloRwAt-DnTJMRwaEQLqxzPN2qw.roa
Signing time: Fri 31 Jan 2025 12:19:06 +0000
ROA not before: Fri 31 Jan 2025 12:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16589
IP address blocks: 45.84.88.0/24 maxlen: 24
45.89.244.0/24 maxlen: 24
45.91.193.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:4c:f2:35:42:41:60:c3:14:b7:2a:7c:6b:d1:ec:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 31 12:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c65a11c00b7e0e74c9311c1a1102eac733cddaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:48:ad:2b:0a:bd:43:76:a6:9c:bb:42:05:
68:4e:19:ec:43:d1:36:6f:29:13:82:83:c4:cf:b8:
0f:d9:90:f5:0f:98:d4:27:38:2e:41:0f:b4:99:77:
0a:1f:2a:80:ce:cb:66:1b:da:1b:1b:e9:48:7c:09:
24:32:8f:b8:d4:c5:88:d2:9c:02:32:f5:55:73:04:
35:fc:c4:cc:61:06:be:63:2d:0b:f8:f3:aa:67:77:
de:56:e9:b6:d2:e9:ef:ec:aa:ed:fc:5e:b2:45:b3:
63:2f:dc:7d:bc:ec:01:d6:31:62:c1:bb:46:d1:85:
c0:df:2b:f7:eb:22:7a:0d:a4:5f:11:6b:40:c9:bc:
eb:8a:6b:7b:4e:30:d0:02:95:8d:7a:bc:a9:de:69:
6a:cf:4a:ad:8b:1d:3f:c1:2c:73:61:80:75:99:39:
e2:0e:48:64:45:b0:dd:43:df:fd:16:90:cc:63:7a:
9f:92:5e:38:a7:5a:6b:b7:04:09:a0:36:24:ae:b7:
64:ab:96:36:93:e7:cf:4d:bd:9a:ed:57:c6:61:94:
2a:e3:54:fe:be:15:68:c7:9b:2a:b5:10:f9:eb:d3:
46:0d:d0:ca:61:46:4d:29:bd:d0:c0:b9:ba:02:2a:
e7:d4:64:b1:dd:6b:b6:a4:44:2b:25:f6:8c:09:df:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5A:11:C0:0B:7E:0E:74:C9:31:1C:1A:11:02:EA:C7:33:CD:DA:AC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xloRwAt-DnTJMRwaEQLqxzPN2qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/24
45.89.244.0/24
45.91.193.0/24
45.149.235.0/24
109.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3c:ff:62:ba:6f:7b:3b:93:23:e6:91:13:05:64:85:f3:82:
37:4f:ec:43:08:2e:8f:4b:5e:a7:d9:2f:8c:bc:a9:4c:2e:18:
f6:d3:6c:e5:68:78:e3:88:8f:e5:b9:fc:75:08:cb:30:a2:94:
58:0f:f0:ee:03:c8:b9:6a:c8:5e:cd:ed:ae:c3:9f:99:a6:d8:
8f:d4:9e:b6:15:17:85:6f:a5:07:b2:44:62:58:6e:3e:29:1d:
19:e0:19:43:d7:64:e2:93:7f:00:1b:75:b1:5b:40:fe:15:e5:
cd:5c:d6:42:1f:37:50:34:13:6f:ae:f9:45:0b:70:59:0e:35:
9c:88:23:52:d6:f7:28:c1:62:e8:2f:84:9c:42:97:6d:9c:69:
d4:e2:a4:c0:89:62:e7:34:b7:49:14:4b:a2:01:a4:1c:cc:e1:
af:79:7c:4a:09:4a:75:7a:56:04:88:8b:b5:0d:a6:c7:ae:c6:
06:0c:27:9b:3b:d1:39:0e:af:60:1c:44:85:71:a7:ea:eb:f0:
e8:60:25:aa:90:f6:d0:70:80:e0:14:2a:27:7f:63:8f:ff:07:
26:60:61:79:d4:18:81:c3:56:f9:a0:a5:3d:b3:11:c5:6a:d4:
bc:b6:7d:3f:60:42:b6:f6:9a:d1:3d:cb:3d:44:3a:10:a5:1d:
46:e3:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:27:38 2025 by rpki-client