Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/NRrgDH4J4CXTAvPXD6_3d1A_AB8.roa
File: NRrgDH4J4CXTAvPXD6_3d1A_AB8.roa (raw, json)
Hash identifier: gMJAwS5d7p1yd0nZvOPAx6H6bdi5jN4+vJLXsEcA8rM=
Subject key identifier: 35:1A:E0:0C:7E:09:E0:25:D3:02:F3:D7:0F:AF:F7:77:50:3F:00:1F
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 0194214469523D5EC3F18AE2145FBB0A5170
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/NRrgDH4J4CXTAvPXD6_3d1A_AB8.roa
Signing time: Wed 01 Jan 2025 09:48:38 +0000
ROA not before: Wed 01 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61955
IP address blocks: 45.159.212.0/24 maxlen: 24
45.159.213.0/24 maxlen: 24
45.159.214.0/24 maxlen: 24
45.159.215.0/24 maxlen: 24
185.54.108.0/22 maxlen: 22
185.54.108.0/24 maxlen: 24
185.54.109.0/24 maxlen: 24
185.54.110.0/24 maxlen: 24
185.54.111.0/24 maxlen: 24
2a02:44a0::/48 maxlen: 48
2a02:44a0::/64 maxlen: 64
2a02:44a0:1::/48 maxlen: 48
2a02:44a0:2::/48 maxlen: 48
2a02:44a0:3::/48 maxlen: 48
2a02:44a0:4::/48 maxlen: 48
2a02:44a0:5::/48 maxlen: 48
2a02:44a0:6::/48 maxlen: 48
2a02:44a0:7::/48 maxlen: 48
2a02:44a0:8::/48 maxlen: 48
2a02:44a0:9::/48 maxlen: 48
2a02:44a0:a::/48 maxlen: 48
2a02:44a0:b::/48 maxlen: 48
2a02:44a0:c::/48 maxlen: 48
2a02:44a0:d::/48 maxlen: 48
2a02:44a0:e::/48 maxlen: 48
2a02:44a0:f::/48 maxlen: 48
2a02:44a0:10::/48 maxlen: 48
2a02:44a0:11::/48 maxlen: 48
2a02:44a0:12::/48 maxlen: 48
2a02:44a0:13::/48 maxlen: 48
2a02:44a0:14::/48 maxlen: 48
2a02:44a0:15::/48 maxlen: 48
2a02:44a0:16::/48 maxlen: 48
2a02:44a0:17::/48 maxlen: 48
2a02:44a0:18::/48 maxlen: 48
2a02:44a0:19::/48 maxlen: 48
2a02:44a0:1a::/48 maxlen: 48
2a02:44a0:1b::/48 maxlen: 48
2a02:44a0:1c::/48 maxlen: 48
2a02:44a0:1d::/48 maxlen: 48
2a02:44a0:1e::/48 maxlen: 48
2a02:44a0:1f::/48 maxlen: 48
2a02:44a0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:69:52:3d:5e:c3:f1:8a:e2:14:5f:bb:0a:51:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Jan 1 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=351ae00c7e09e025d302f3d70faff777503f001f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:31:61:19:3b:8b:5c:41:eb:c9:a6:f8:67:
cb:15:88:33:d8:1e:9c:6c:eb:c4:78:3d:52:bc:c2:
05:5e:04:18:1f:6c:98:98:5f:83:73:d5:86:cf:24:
aa:cc:9e:ef:15:c3:73:dc:a5:4b:47:ae:e5:cc:e7:
d8:79:ff:18:62:6c:bc:3e:f3:52:e0:c2:0a:65:0c:
9c:5b:62:18:3d:35:ee:ed:fe:8f:6e:4e:76:25:c7:
9c:48:06:14:a6:e5:67:5d:32:12:c5:cf:71:b1:aa:
de:b4:f1:75:da:ed:18:b9:f1:01:f9:1b:84:af:d5:
1c:38:a6:18:20:d4:1a:e0:c6:b0:d8:5b:83:f4:0f:
9a:65:2b:a2:f4:7c:2a:ad:b2:95:6f:64:73:71:81:
94:b0:f9:38:07:87:aa:f7:e5:49:d4:45:e3:bb:db:
6e:15:63:7b:69:ce:1f:86:5e:0b:9d:a4:28:88:b7:
8a:c3:ef:a7:01:f5:52:0b:31:60:40:8a:89:e6:0c:
78:33:75:c9:31:62:00:4c:20:e5:39:c5:99:12:ee:
ad:e4:0b:ee:b7:47:cd:c7:13:5c:d1:22:a9:b1:43:
6c:9f:b5:ee:1d:ff:f6:f7:ae:1c:64:70:88:16:72:
a8:01:d4:98:13:1c:84:ee:08:30:37:9f:05:9f:94:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1A:E0:0C:7E:09:E0:25:D3:02:F3:D7:0F:AF:F7:77:50:3F:00:1F
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/NRrgDH4J4CXTAvPXD6_3d1A_AB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.212.0/22
185.54.108.0/22
IPv6:
2a02:44a0::/43
2a02:44a0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
1a:1c:ac:1a:7f:d2:86:21:8a:e2:86:b6:91:46:eb:e4:27:73:
aa:d8:8d:c8:41:4d:75:50:b7:53:2d:6a:c5:1b:fd:39:c5:63:
19:92:4c:e3:26:31:dd:c5:f2:9e:05:9d:ea:f1:2d:46:3e:a9:
93:ae:c7:57:c3:b8:f4:8d:62:00:3d:a4:a7:3a:50:cd:f9:6f:
d7:86:45:0a:28:d8:ae:c6:25:b0:35:8b:44:2b:61:a1:b4:0d:
21:eb:b4:fc:fd:ab:3f:95:5b:a6:4f:4d:ef:ba:a6:ca:c1:7c:
6e:34:ff:e1:92:bc:75:ab:6b:1a:4d:ab:3a:3e:a5:61:fb:91:
3a:5d:bf:5d:6f:5f:c7:84:09:26:33:4e:dc:59:ff:b2:d0:92:
75:02:74:30:4b:2e:06:a4:33:16:36:89:51:8d:96:aa:8c:b6:
6a:73:c9:4b:ac:7c:a0:b6:ad:d5:e2:8e:4c:1b:b3:d8:2e:45:
e4:98:3a:8d:6d:ee:b4:a4:0e:c1:c4:79:01:40:ee:70:27:3c:
e1:7e:19:2b:49:5e:14:21:79:91:b3:49:e5:23:7a:3e:05:52:
c8:b3:46:9b:2a:b6:6a:41:96:bb:86:42:55:f7:90:34:57:24:
02:44:3b:98:b2:1b:87:85:5d:96:5e:d4:f0:4f:56:dc:16:f9:
d4:7d:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:39 2025 by rpki-client