Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vE4slm00tlBPiMv-GA-ZWvecErY.roa
File: vE4slm00tlBPiMv-GA-ZWvecErY.roa (raw, json)
Hash identifier: xK//5H00+/mSED0KRDihEfnN+utcPAPBcnLbNvrINQs=
Subject key identifier: BC:4E:2C:96:6D:34:B6:50:4F:88:CB:FE:18:0F:99:5A:F7:9C:12:B6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420685CBFE81560CB83652CCF1F982F07
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vE4slm00tlBPiMv-GA-ZWvecErY.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 147.45.45.0/24 maxlen: 24
193.233.112.0/23 maxlen: 23
193.233.134.0/24 maxlen: 24
193.233.254.0/24 maxlen: 24
193.233.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5c:bf:e8:15:60:cb:83:65:2c:cf:1f:98:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc4e2c966d34b6504f88cbfe180f995af79c12b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:93:c7:24:12:d1:99:5b:52:9a:72:1d:1e:
c1:89:da:d2:3c:db:f4:bc:37:0e:30:84:b6:90:3a:
47:7e:a6:a1:86:82:34:33:27:73:60:52:d5:c6:1d:
47:9e:c6:c5:1c:fb:a8:0f:b9:73:4c:8b:e7:07:40:
4a:7c:25:cc:0e:b3:d3:92:79:ca:38:1f:ea:f4:5b:
bb:6c:6d:d8:81:3a:25:b4:11:bb:b3:d2:ae:38:57:
16:07:68:d8:5a:82:7c:0d:31:fc:69:ba:8a:ef:7b:
ea:67:20:61:12:47:d3:50:34:ba:02:de:63:f2:2b:
fc:ad:60:87:b9:4d:8e:8e:e8:93:94:1e:1d:62:da:
14:5d:c7:23:60:10:66:10:c6:ab:74:05:cc:43:2e:
d2:a0:32:9c:d6:f6:80:3f:ee:0e:5a:99:6d:6f:c7:
dc:6e:5c:15:ad:88:1f:2b:05:02:e7:96:34:79:e1:
25:37:b4:df:8e:93:89:31:9f:17:17:d9:3e:99:78:
f3:58:13:03:b6:b8:0f:b7:cf:78:18:7e:56:1f:e2:
e5:58:ee:86:ea:9d:6d:62:41:82:18:44:bb:0e:06:
a0:4e:67:50:fa:42:48:f6:2c:a2:3e:2f:fa:3b:5c:
26:fe:aa:d5:63:94:7e:61:ae:56:c6:7d:bd:6d:1b:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4E:2C:96:6D:34:B6:50:4F:88:CB:FE:18:0F:99:5A:F7:9C:12:B6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/vE4slm00tlBPiMv-GA-ZWvecErY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.45.0/24
193.233.112.0/23
193.233.134.0/24
193.233.254.0/23
Signature Algorithm: sha256WithRSAEncryption
92:9d:d5:52:a7:13:64:82:14:3b:67:a2:9c:c5:b9:0e:6e:1b:
f5:94:cc:1c:83:d9:4b:f7:01:69:c9:28:55:ae:f1:4f:db:a8:
de:a5:9a:cd:3a:79:e7:be:07:0f:44:6f:11:f3:4f:f3:42:56:
6f:27:8b:d1:56:dd:ad:32:28:ca:cd:34:dc:b6:e6:da:9e:24:
75:b7:11:f9:91:2a:05:45:4c:73:8a:da:9a:b3:9e:f4:3e:5f:
dd:ed:96:29:44:6e:93:00:45:71:be:91:7c:b8:6d:54:a3:23:
58:db:16:93:e6:d9:90:9f:e1:4c:11:59:62:3c:0b:0f:8f:cf:
de:42:fd:a9:c1:80:b3:f4:cd:01:76:76:2b:03:40:a2:b5:af:
27:5a:3e:21:92:7b:72:a7:a6:13:33:77:f8:a0:cf:04:98:cd:
54:ee:41:1c:dc:f3:10:45:31:34:85:04:16:72:01:e7:f3:35:
98:cf:d3:f5:71:3f:ae:7c:af:d9:87:25:54:08:57:ff:9c:78:
8a:3d:63:2a:18:ad:eb:4c:86:ae:c3:e4:6c:4a:5f:90:6a:17:
9d:52:48:99:72:d2:2e:86:7a:17:24:b9:84:cb:f2:de:46:fb:
13:82:58:4e:d0:4d:ba:d4:8a:eb:d4:b6:94:44:3a:59:a3:9c:
4c:ba:d2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:02:49 2025 by rpki-client