Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/DdFxlWbaGRT4CZL97qtlhoDJM0Y.roa
File: DdFxlWbaGRT4CZL97qtlhoDJM0Y.roa (raw, json)
Hash identifier: M/MMli5M2T2c0uadxkb0PM0+WTS5b3KbAgN3Uh9mTdk=
Subject key identifier: 0D:D1:71:95:66:DA:19:14:F8:09:92:FD:EE:AB:65:86:80:C9:33:46
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01957F5AED5D61FBBEE3F3007292663D20D5
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/DdFxlWbaGRT4CZL97qtlhoDJM0Y.roa
Signing time: Mon 10 Mar 2025 09:20:20 +0000
ROA not before: Mon 10 Mar 2025 09:20:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208258
IP address blocks: 45.144.244.0/23 maxlen: 24
45.144.246.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
45.154.238.0/24 maxlen: 24
45.154.239.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.208.211.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:25::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:5a:ed:5d:61:fb:be:e3:f3:00:72:92:66:3d:20:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 10 09:20:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dd1719566da1914f80992fdeeab658680c93346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:de:9e:7b:27:2a:55:b0:db:d4:d7:8a:76:
01:9a:46:8d:3a:33:90:87:b1:ea:f7:fa:e6:13:55:
61:05:60:a5:a1:4e:86:bc:62:fc:a1:0d:1b:66:07:
a8:7e:70:74:10:75:05:dc:0b:ce:86:45:ae:0b:e2:
39:96:28:50:15:c5:39:87:80:d8:9e:03:f5:cd:1a:
b2:e9:1f:0f:d7:ed:c7:18:7c:80:77:f5:4b:d4:bd:
04:a8:ab:d3:df:f3:bb:2a:11:66:b9:98:74:fc:34:
27:9b:c5:a2:33:29:a7:3f:2b:ac:1a:47:d7:17:95:
0a:f3:16:8f:49:67:93:0c:45:06:57:f6:91:81:21:
e8:a0:4b:25:d7:6d:e1:27:03:53:e8:60:05:06:ad:
a7:65:6f:35:1c:70:f9:15:44:46:4e:00:f9:ff:9e:
a8:10:e5:a0:17:dc:63:fa:94:d5:ca:2c:7c:36:1b:
08:40:67:7a:b2:c7:bf:b0:30:1c:2f:ad:66:99:88:
13:b6:e9:72:c1:d9:8d:33:b3:35:aa:20:c9:dc:84:
30:dc:07:f7:c0:89:37:27:10:1f:c1:41:fe:f8:43:
2a:31:05:8b:61:59:25:13:5a:58:fb:d9:22:aa:31:
ac:4f:10:39:68:20:e7:3c:6d:a8:f8:9b:ae:48:88:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:71:95:66:DA:19:14:F8:09:92:FD:EE:AB:65:86:80:C9:33:46
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/DdFxlWbaGRT4CZL97qtlhoDJM0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.244.0-45.144.246.255
45.151.156.0-45.151.158.255
45.154.238.0/23
185.208.208.0/22
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
194.146.48.0/24
195.26.6.0/23
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:25::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
3d:07:55:9e:af:47:44:ee:8c:77:54:11:91:52:44:0c:26:13:
91:84:1c:66:97:b6:99:35:9f:77:de:1e:4f:18:4f:a0:6c:9a:
39:06:f5:87:45:fe:3b:c0:53:12:57:b8:c9:b0:64:88:9c:2e:
ba:03:97:07:59:0c:72:76:c1:e1:0e:78:fa:99:d1:f2:cd:4e:
45:86:37:64:f2:2f:d0:65:3f:1c:12:c8:83:ce:c7:4b:37:b6:
7e:b4:65:05:e1:31:6e:14:39:21:f3:a1:e7:d8:61:eb:88:91:
a7:94:2b:ab:93:96:22:44:a3:74:f1:7c:91:a8:56:df:81:3e:
68:a1:37:e4:64:78:ba:87:75:f0:6e:24:ba:82:5e:dd:6f:1a:
29:3c:fb:9e:01:61:34:2b:ed:a6:8c:e5:50:42:7d:1f:54:e1:
12:e4:c6:06:8b:56:d6:bb:a6:30:9d:48:f4:1b:4a:b9:52:b4:
71:6d:bf:79:32:82:39:f5:a2:e1:f8:d4:be:ca:8c:2a:87:65:
bc:9e:32:f2:a2:79:d1:39:26:9f:a3:9b:15:e6:13:af:9b:90:
0f:03:23:8b:f4:94:f9:af:6b:3b:f0:d3:c9:93:43:7e:e0:55:
6b:82:2b:ef:67:41:ac:83:47:3e:5d:8f:38:c1:df:f5:94:d2:
3e:10:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:49 2025 by rpki-client