Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/y7szfdX4Ebt-IKKlkvpbq-THJ14.roa
File: y7szfdX4Ebt-IKKlkvpbq-THJ14.roa (raw, json)
Hash identifier: SwTOs6n5lbBTUISkt09ofc4hgxDS0KDPMZOJpbuiwCY=
Subject key identifier: CB:BB:33:7D:D5:F8:11:BB:7E:20:A2:A5:92:FA:5B:AB:E4:C7:27:5E
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489497DB90BD064CE028EAC2A3EDF4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/y7szfdX4Ebt-IKKlkvpbq-THJ14.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 45.13.226.0/24 maxlen: 24
45.67.139.0/24 maxlen: 24
45.90.97.0/24 maxlen: 24
185.117.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:94:97:db:90:bd:06:4c:e0:28:ea:c2:a3:ed:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbbb337dd5f811bb7e20a2a592fa5babe4c7275e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:44:8f:f9:6f:bb:92:15:5b:4e:0b:dc:de:
2d:81:ce:55:73:4a:8a:87:9a:93:70:4d:cd:02:56:
24:6e:1a:cf:59:6a:23:1a:13:84:4f:c5:45:f5:14:
91:eb:ff:fd:3b:63:21:73:7a:88:bb:5e:34:e9:66:
fc:ee:c3:36:61:92:23:ed:23:7a:93:c5:b3:1a:38:
5a:48:b1:00:4c:3a:a7:d9:e9:7e:a6:40:73:18:bc:
f1:8e:a0:45:2c:c9:5b:61:85:e7:89:2e:be:24:b0:
99:01:9c:69:fc:2d:e6:5f:a4:c3:21:ba:bc:38:c3:
6f:f3:6b:22:5f:f8:2d:74:42:14:97:ba:5f:2e:68:
29:ce:e6:18:18:df:93:36:b7:a6:8e:8a:56:2e:22:
70:d0:40:e1:e8:c6:27:64:0a:da:ae:6f:40:9b:9b:
52:ba:58:61:ce:78:11:29:a5:e9:18:b4:77:0c:36:
b5:60:87:7a:33:0f:54:91:8f:f0:55:24:d5:f9:56:
06:d7:ee:bc:15:f1:da:ee:c9:b0:f5:d2:ee:28:ce:
31:7a:6e:3a:3f:f9:a3:cc:82:f4:0b:a5:5c:3e:a3:
65:94:67:00:eb:fd:4c:ab:91:d7:bd:44:98:73:47:
40:3f:a1:d9:71:1f:54:55:d0:70:d8:2c:a3:ac:fe:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:33:7D:D5:F8:11:BB:7E:20:A2:A5:92:FA:5B:AB:E4:C7:27:5E
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/y7szfdX4Ebt-IKKlkvpbq-THJ14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.226.0/24
45.67.139.0/24
45.90.97.0/24
185.117.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:dc:ae:87:9e:ee:8b:3d:d9:82:6e:5c:52:24:94:9b:b5:cf:
d5:bc:71:5f:ed:f7:1d:79:e2:13:7e:19:e9:36:48:bf:57:c8:
4d:a3:17:59:6a:6b:5b:9f:42:73:65:e9:1b:af:19:45:32:85:
a6:5d:bb:f1:e8:b4:69:96:40:4a:27:36:58:26:eb:98:1f:8a:
9c:3e:7d:b8:74:84:84:e4:48:69:6a:56:26:5d:60:95:4b:bf:
08:e2:20:84:7f:8c:ca:4e:70:b9:4a:dd:ee:56:ce:ab:82:a1:
57:ec:80:b0:6a:9b:20:3a:a1:a8:3d:3d:9e:87:5b:77:15:6e:
fb:ff:d9:37:23:a5:14:a7:83:65:ce:18:f1:b9:ab:c6:75:fe:
e2:6b:01:8e:e0:d0:be:d2:09:7f:b1:c4:a9:5a:c1:53:bb:54:
d1:8f:c3:51:d4:fc:a7:cc:a1:5d:78:d6:a1:b2:a2:b9:2c:c1:
a0:d6:a3:cf:0e:82:d1:91:49:a0:3a:5c:15:d2:63:6d:09:62:
df:48:14:fd:8f:b7:fc:43:87:e7:ba:8e:af:cd:db:54:4b:91:
f3:94:1b:3c:74:42:f9:d4:9f:44:fd:90:f4:c9:e4:08:7b:50:
67:c3:6f:d5:97:aa:eb:2e:a2:0f:8e:e1:96:d8:9d:e4:0a:8a:
17:df:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:58 2025 by rpki-client