Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/TVb93f9qFrOSeBTEj921DhvylTc.roa
File: TVb93f9qFrOSeBTEj921DhvylTc.roa (raw, json)
Hash identifier: +scApWNG2jwOdd88LrCouxcVVLnzFup4l3WgAbZnRcc=
Subject key identifier: 4D:56:FD:DD:FF:6A:16:B3:92:78:14:C4:8F:DD:B5:0E:1B:F2:95:37
Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial: 019427482ACC1E52962FACFCE5A2098F2E6F
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/TVb93f9qFrOSeBTEj921DhvylTc.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204506
IP address blocks: 45.152.23.0/24 maxlen: 24
93.157.207.0/24 maxlen: 24
2001:678:210::/48 maxlen: 48
2a0f:4507:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2a:cc:1e:52:96:2f:ac:fc:e5:a2:09:8f:2e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d56fdddff6a16b3927814c48fddb50e1bf29537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:35:6b:f9:9b:29:11:61:d1:44:56:18:e6:
e7:ae:7c:72:99:33:78:de:13:47:48:66:a8:e5:54:
d9:b9:e5:84:77:13:0d:20:e9:58:2d:c9:97:7a:3f:
b8:c3:10:bd:d7:92:bd:9e:14:92:b3:94:9b:1a:8b:
bc:df:a6:d4:2e:d0:6f:1b:51:01:c5:cb:ae:5a:34:
13:bc:82:29:b2:fc:46:43:a2:e8:87:ad:05:a4:60:
e1:37:fd:19:76:f2:df:28:40:a7:35:ed:76:9d:05:
03:7f:7e:1f:b9:ad:30:a0:5e:f4:0b:60:58:0c:6e:
cd:5b:0f:c1:a8:eb:24:f1:25:47:ce:eb:45:61:d9:
40:98:c0:38:05:fd:eb:90:11:13:9d:41:8d:52:4d:
c6:1d:f6:d2:b5:2c:06:ec:80:c8:2c:fd:a9:4c:4d:
ac:86:59:25:4d:ed:1b:16:b3:79:94:10:67:58:4e:
06:b2:a6:ca:eb:d6:c1:62:a4:1f:2f:2b:92:d9:fc:
86:4e:21:45:76:7c:38:f9:22:fb:5e:50:19:1f:02:
ed:36:d3:39:4a:ec:29:01:3d:eb:e5:33:04:fc:4a:
af:4e:80:96:a7:9a:eb:0d:0b:36:2b:af:3d:42:f5:
2e:9b:94:ce:99:23:58:7b:41:00:5e:e5:fa:18:83:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:56:FD:DD:FF:6A:16:B3:92:78:14:C4:8F:DD:B5:0E:1B:F2:95:37
X509v3 Authority Key Identifier:
keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/TVb93f9qFrOSeBTEj921DhvylTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.23.0/24
93.157.207.0/24
IPv6:
2001:678:210::/48
2a0f:4507:8000::/33
Signature Algorithm: sha256WithRSAEncryption
6b:61:35:50:43:e3:54:d3:e9:fc:fb:28:41:41:10:91:e1:39:
0e:35:d6:78:f1:a5:76:1a:7b:d7:75:18:f7:43:8b:f8:86:dd:
7a:fc:4b:e5:0e:86:ed:ee:eb:2f:0b:24:64:97:95:aa:ab:f7:
e3:88:9f:e2:6f:44:d5:87:f2:be:b5:ce:4a:dd:e9:5b:1a:a0:
c1:2c:77:7a:5b:3e:e2:97:41:8b:26:ae:a2:13:0b:8d:f2:e5:
9f:7b:ea:a5:21:57:37:2e:12:02:c7:36:81:0c:88:35:05:f1:
70:b4:32:ce:16:f7:a7:0d:d8:2c:a6:28:f4:bf:be:75:9a:a7:
18:dc:38:84:81:35:e4:06:d2:0e:bc:97:79:58:01:f2:ae:4b:
ac:a3:28:e2:b5:2e:ae:4b:04:58:c6:b2:1b:42:cb:1c:e5:36:
74:c2:9d:a2:06:93:f8:5d:e9:b5:18:69:d8:fa:bc:bc:2e:cf:
a2:14:95:8c:88:df:98:df:70:c7:c4:9a:0e:2e:bc:05:c2:a0:
85:ad:c3:15:e3:4c:8f:3d:41:e3:1e:e2:b5:2e:98:5d:64:2d:
8a:ae:55:50:8e:79:f9:dc:9b:5c:a2:e7:35:00:03:c5:bd:a4:
42:d7:e9:64:c7:40:57:6b:0f:bf:a1:da:f4:47:c7:b0:8b:03:
d3:89:8a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:43 2025 by rpki-client