Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3wivxbNRcMtILe4BcdYUKM76OZE.roa
File: 3wivxbNRcMtILe4BcdYUKM76OZE.roa (raw, json)
Hash identifier: /LucnQbt49zkQgw6YDbL1515BeAwv+hmDtjKEdN++54=
Subject key identifier: DF:08:AF:C5:B3:51:70:CB:48:2D:EE:01:71:D6:14:28:CE:FA:39:91
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206839A63F25A34D3EA63BD7D3B22877
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3wivxbNRcMtILe4BcdYUKM76OZE.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8342
IP address blocks: 147.45.38.0/24 maxlen: 24
147.45.39.0/24 maxlen: 24
147.45.61.0/24 maxlen: 24
147.45.62.0/24 maxlen: 24
147.45.63.0/24 maxlen: 24
147.45.88.0/21 maxlen: 21
147.45.117.0/24 maxlen: 24
147.45.118.0/24 maxlen: 24
147.45.119.0/24 maxlen: 24
147.45.120.0/22 maxlen: 22
147.45.127.0/24 maxlen: 24
147.45.205.0/24 maxlen: 24
193.233.60.0/24 maxlen: 24
193.233.62.0/24 maxlen: 24
193.233.124.0/22 maxlen: 22
193.233.170.0/24 maxlen: 24
193.233.236.0/24 maxlen: 24
193.233.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:39:a6:3f:25:a3:4d:3e:a6:3b:d7:d3:b2:28:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df08afc5b35170cb482dee0171d61428cefa3991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:97:b1:9c:9f:77:31:14:08:d4:ca:ac:28:
b6:6d:c3:60:27:f2:ed:2d:4e:4b:73:c8:a3:59:61:
a9:67:a6:fa:46:6c:0c:d4:00:9b:e0:63:a8:f7:b6:
1d:b2:9e:a7:95:c1:00:e9:ab:b8:68:dc:63:bb:9b:
ca:95:9a:af:53:df:cb:24:8a:14:62:1b:d9:06:b4:
80:a2:14:86:b7:b5:1a:12:ef:77:51:61:cb:36:9b:
5e:24:49:90:7e:86:39:c4:0f:4e:66:ee:21:af:31:
15:33:26:e9:e0:9c:9f:55:64:5f:0a:9b:54:2c:ea:
47:a2:2b:b8:2f:2f:d7:a4:5d:52:92:2c:64:39:1c:
cb:fc:3f:36:f6:61:67:d4:7d:31:db:21:56:71:b8:
5f:94:e1:43:2d:e2:a7:94:4a:87:2d:33:9a:24:a9:
c5:3c:c9:15:50:eb:4e:65:23:e5:2c:5d:e6:36:8d:
b2:1c:04:52:50:67:dd:17:a3:95:d7:60:0f:c5:39:
92:ca:ae:17:61:37:54:6e:42:d3:7d:3e:fb:fa:dd:
49:4d:18:90:ac:7a:04:73:c4:7b:4f:bd:e3:ff:7a:
b8:9d:87:e3:11:7e:6b:77:1f:e6:2f:aa:44:04:e4:
d3:1a:e8:eb:60:07:89:96:3e:fe:58:84:e1:e1:6b:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:AF:C5:B3:51:70:CB:48:2D:EE:01:71:D6:14:28:CE:FA:39:91
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3wivxbNRcMtILe4BcdYUKM76OZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.38.0/23
147.45.61.0-147.45.63.255
147.45.88.0/21
147.45.117.0-147.45.123.255
147.45.127.0/24
147.45.205.0/24
193.233.60.0/24
193.233.62.0/24
193.233.124.0/22
193.233.170.0/24
193.233.236.0/24
193.233.239.0/24
Signature Algorithm: sha256WithRSAEncryption
74:29:ef:9e:49:18:e1:6b:13:37:b7:73:5f:ce:16:5c:1a:d9:
82:54:00:04:fb:33:9e:c0:f1:a7:0a:31:5a:7b:f1:41:26:10:
c9:b9:ee:9a:19:dc:da:a4:59:c3:e9:5b:74:d3:31:26:94:0f:
5b:b8:05:7c:f5:df:95:8e:0e:dd:b7:7d:8f:53:9c:14:e1:7c:
2d:9c:49:40:83:ae:82:c2:50:06:ee:82:76:c7:d8:68:75:2d:
7d:58:89:cd:2c:b9:40:73:cb:f0:84:63:83:01:a7:8b:67:a2:
b1:6b:25:95:2c:0e:1b:06:f9:d6:4e:db:0b:0c:1b:82:43:08:
11:2e:d5:44:a6:92:1d:f7:47:3c:f7:d7:f7:2c:36:87:db:3e:
9a:e6:ee:90:31:31:67:fa:48:5d:a1:02:4d:be:5e:33:fe:4b:
d1:99:4a:fe:e1:dd:b0:8b:38:75:2e:c5:59:e4:53:9c:15:72:
ca:53:3e:87:f4:b0:b7:aa:4b:91:f9:8b:be:b1:e5:e2:55:76:
11:7f:6d:d0:44:be:2f:0a:53:a0:d0:f0:3d:bb:be:06:40:7b:
46:69:6a:9e:2d:71:b3:e8:7b:10:0b:d9:c4:16:65:06:89:2b:
ff:3c:54:63:54:5b:43:95:d4:f7:e3:2e:5b:8e:c4:ee:1d:8e:
f2:bc:5b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:29:55 2025 by rpki-client