Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/J8GObnTu1PFCSugCMrdLKf5mq1E.roa
File: J8GObnTu1PFCSugCMrdLKf5mq1E.roa (raw, json)
Hash identifier: 1jZHxip7J51Fyv9OdxTBDrCovZy+VZSI9+3ycSgbnw4=
Subject key identifier: 27:C1:8E:6E:74:EE:D4:F1:42:4A:E8:02:32:B7:4B:29:FE:66:AB:51
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019420680D891600B0A8C005256682F979E9
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/J8GObnTu1PFCSugCMrdLKf5mq1E.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209243
IP address blocks: 45.157.34.0/24 maxlen: 24
80.64.216.0/24 maxlen: 24
80.64.217.0/24 maxlen: 24
194.146.44.0/24 maxlen: 24
194.146.49.0/24 maxlen: 24
194.156.177.0/24 maxlen: 24
195.22.156.0/24 maxlen: 24
195.22.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0d:89:16:00:b0:a8:c0:05:25:66:82:f9:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27c18e6e74eed4f1424ae80232b74b29fe66ab51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:20:03:f6:fa:72:6e:28:90:4e:c8:c8:be:
af:10:1e:b1:91:93:4b:96:db:fe:55:14:78:9e:9a:
d6:6c:a4:2c:1d:d8:64:38:c4:fc:c7:44:b6:54:33:
60:e9:7e:3d:17:4f:24:77:09:c8:25:54:89:c5:68:
d6:21:35:42:10:d4:09:d3:97:6d:12:30:1d:4a:dc:
d7:2f:8d:35:5b:77:cf:b1:c2:0d:44:62:0c:86:1d:
5f:ea:70:59:c6:23:5c:57:19:fd:49:90:df:8d:36:
b7:1c:6b:c2:83:be:00:fd:56:4f:c1:94:ab:de:02:
0a:70:c1:ad:c0:d1:49:a1:53:cf:05:92:0d:eb:3d:
37:8d:1a:64:66:af:b4:5a:51:d7:72:47:8c:24:1b:
2f:1e:ff:6e:c7:d5:5a:d7:b8:a0:a5:f5:c5:39:87:
7f:85:85:5f:e7:3a:20:ba:d7:b8:b4:e3:ab:bf:9e:
ce:c7:2b:40:72:f0:30:64:89:3e:c4:98:00:b2:0f:
72:b2:bc:05:53:79:31:8b:45:77:b2:3c:6f:c8:74:
99:2a:79:3d:32:5c:6a:b9:d5:65:fe:78:87:ac:b2:
8f:98:2d:bf:63:96:9b:6a:ba:a3:c5:6f:9a:8a:42:
b5:8e:9a:bc:1c:63:da:6b:7b:f8:3a:83:85:4f:cd:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:8E:6E:74:EE:D4:F1:42:4A:E8:02:32:B7:4B:29:FE:66:AB:51
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/J8GObnTu1PFCSugCMrdLKf5mq1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.34.0/24
80.64.216.0/23
194.146.44.0/24
194.146.49.0/24
194.156.177.0/24
195.22.156.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:8b:0c:8f:de:96:84:83:a7:a8:89:97:dc:8a:49:71:a0:d0:
4b:9f:b8:dd:0c:7e:ca:33:8d:56:d3:c1:8c:c7:3d:3e:83:c6:
a4:cc:4f:c0:4f:f7:7e:5d:7d:b3:5d:9a:b9:a0:ac:ff:ae:32:
e0:cd:7e:8b:f0:a0:a8:fc:a1:cd:01:6f:bd:34:dd:26:c2:e6:
84:3f:41:27:e3:db:5f:b7:28:1e:dd:b6:a1:75:22:fa:d4:3c:
67:99:12:50:97:03:8b:34:63:98:f5:66:22:a0:40:45:24:b7:
fe:c1:6b:81:ed:15:2d:f4:61:c3:fd:98:0c:92:f4:be:29:6b:
6a:aa:27:55:8f:02:a2:b0:78:22:0d:7d:7b:05:1f:f4:4f:23:
3e:f2:6e:cc:01:4a:57:a1:ab:38:57:d2:82:11:ae:0c:82:f2:
c8:7b:6b:9a:14:08:3b:20:2b:77:89:dd:55:c4:ca:90:07:d1:
c0:1d:e6:83:67:66:1c:a2:0d:8f:06:0c:a0:fb:af:2d:fc:c0:
b4:43:39:08:bc:5d:29:1a:60:98:f5:d3:45:db:bb:be:67:94:
94:92:6a:60:f7:9e:cb:93:b2:5d:a7:fa:f4:cf:01:3d:5b:08:
66:b2:91:92:78:fd:40:ae:a4:b1:60:f3:17:60:4a:e2:ae:b8:
01:ef:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:57:02 2025 by rpki-client