Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/zUj5rZ7lUDzlpIezHL1nBDeB21I.roa
File: zUj5rZ7lUDzlpIezHL1nBDeB21I.roa (raw, json)
Hash identifier: Un3pGpZRDSoKyLL0MzWtYyOcI00H8KCqWCE5WBBFhqQ=
Subject key identifier: CD:48:F9:AD:9E:E5:50:3C:E5:A4:87:B3:1C:BD:67:04:37:81:DB:52
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019585DF6B25D90A4F01BCD3C81F1BA9F117
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/zUj5rZ7lUDzlpIezHL1nBDeB21I.roa
Signing time: Tue 11 Mar 2025 15:42:46 +0000
ROA not before: Tue 11 Mar 2025 15:42:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.11.190.0/24 maxlen: 24
45.11.191.0/24 maxlen: 24
45.154.159.0/24 maxlen: 24
188.209.137.0/24 maxlen: 24
188.209.139.0/24 maxlen: 24
194.15.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:df:6b:25:d9:0a:4f:01:bc:d3:c8:1f:1b:a9:f1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 11 15:42:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd48f9ad9ee5503ce5a487b31cbd67043781db52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2e:c2:57:01:59:71:0b:ca:bc:8c:b7:69:2d:
ef:b7:66:06:17:6c:93:81:60:13:6d:57:30:de:c8:
78:f7:54:43:0c:02:a3:cc:99:0d:6f:dc:d9:29:dd:
3c:26:fe:f8:43:58:8a:45:c6:10:8f:39:c7:d2:bf:
76:88:f7:34:22:9f:3e:2a:cd:e7:a6:f7:63:c0:82:
69:89:b1:3c:c1:6d:f5:95:b9:83:69:e9:db:b4:af:
59:a1:f7:c2:7f:87:a5:dd:4b:49:45:da:95:2b:af:
47:2b:19:57:24:a2:06:ee:27:0a:6a:5e:a5:2f:07:
11:27:e0:25:ca:67:3b:67:95:5a:f2:6a:34:c4:36:
93:98:51:4b:be:2a:eb:dd:c6:53:63:5b:3f:8a:d6:
91:99:2d:d5:e2:49:0f:47:da:58:a6:9d:b4:f1:bd:
55:d0:ee:1a:f9:f4:3b:98:87:47:df:b2:82:3b:be:
81:69:8d:a4:33:cf:3a:49:a7:71:c3:c2:46:c0:42:
b6:a6:c7:da:fb:21:e7:de:6f:85:6a:5d:66:9e:9c:
38:e6:66:18:37:bc:e6:3a:e1:77:42:e5:d4:70:8b:
ae:66:2f:81:a8:48:02:f8:de:1d:d8:2f:1b:04:5a:
dd:98:fb:c0:b3:a4:67:1e:2a:c6:81:1a:7a:cd:bd:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:48:F9:AD:9E:E5:50:3C:E5:A4:87:B3:1C:BD:67:04:37:81:DB:52
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/zUj5rZ7lUDzlpIezHL1nBDeB21I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.190.0/23
45.154.159.0/24
188.209.137.0/24
188.209.139.0/24
194.15.96.0/24
Signature Algorithm: sha256WithRSAEncryption
53:54:8a:fc:81:b4:e3:2f:d7:6e:97:22:ac:a1:ac:df:e2:7e:
cc:4a:7b:f0:dc:1c:c1:ab:28:a6:4c:3e:9b:17:67:16:0f:7b:
85:eb:1d:47:8a:1f:ba:36:a7:34:0a:18:68:9d:4b:c6:2e:b1:
d6:4c:f1:a8:89:bf:67:b5:3d:18:09:e4:b7:f3:79:c4:c4:c5:
3e:f3:bb:9d:f4:be:45:20:27:24:64:29:6b:6f:7c:20:2e:ad:
db:4c:e1:56:72:bf:7f:41:fa:15:11:7f:22:52:e4:34:f3:a0:
64:93:b0:d8:df:48:f0:b3:81:fe:37:9e:1f:bf:0b:f1:8a:09:
ad:df:84:3d:0d:64:77:24:20:14:f0:16:fd:2b:89:89:d3:d5:
73:7d:92:2f:3d:b7:89:22:37:eb:51:6c:3e:ff:4c:b2:49:7f:
39:36:43:fa:2e:0b:cd:d7:1c:02:f0:64:ac:86:0c:be:79:4e:
d5:9d:fb:33:af:94:8e:89:aa:59:c2:8a:61:31:b6:44:0f:66:
d0:c5:2f:45:57:e5:a4:c7:8f:d8:51:e4:fd:7b:1a:b8:d6:b4:
61:8b:6f:45:70:e9:43:aa:de:93:5b:bc:92:2a:32:85:21:15:
97:67:69:43:03:05:44:e2:f7:4a:84:d2:3f:99:ab:9d:af:cd:
eb:f1:bc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:56 2025 by rpki-client