Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/PKjMMvZfZGO6d3QofJpMp8mLoEg.roa
File: PKjMMvZfZGO6d3QofJpMp8mLoEg.roa (raw, json)
Hash identifier: PLZzvSg9ShprS72UhVRcTHvYPm2OE+eVMBgJ7lsQMMA=
Subject key identifier: 3C:A8:CC:32:F6:5F:64:63:BA:77:74:28:7C:9A:4C:A7:C9:8B:A0:48
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB61ABC7F5C75EC7D4CC973AA1C2E8
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/PKjMMvZfZGO6d3QofJpMp8mLoEg.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 45.150.65.0/24 maxlen: 24
138.124.180.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.184.0/24 maxlen: 24
138.124.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:61:ab:c7:f5:c7:5e:c7:d4:cc:97:3a:a1:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ca8cc32f65f6463ba7774287c9a4ca7c98ba048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:92:76:67:9e:8c:f1:79:74:4e:b0:8a:76:
ee:0c:48:3a:ee:48:5d:d4:1a:45:73:53:09:fa:3b:
49:d1:92:5d:bd:24:1f:48:74:fb:da:18:de:d7:78:
1e:d1:24:75:45:7b:2c:07:d9:71:df:65:98:3e:e0:
c1:a0:ea:4f:bc:02:f5:6a:68:7c:48:af:52:be:1a:
33:64:ef:9d:41:34:f8:9d:ca:94:e7:60:c4:9d:d4:
2a:39:65:ff:65:58:9e:48:ec:53:a4:68:a5:55:b2:
b0:ae:7a:d8:b5:3f:af:23:43:e9:b1:ce:ed:9d:dc:
24:a8:ee:39:f8:27:1a:8d:8d:cf:3f:62:e4:a3:49:
e3:44:01:46:87:f3:bc:ea:4e:a3:24:89:93:a4:a6:
1b:48:1d:d0:2c:12:45:e3:97:4d:7f:e6:d3:fb:f7:
d8:25:19:ea:da:3c:98:ab:6e:e4:dd:91:dc:61:72:
e4:e1:88:11:9b:15:a5:00:01:37:29:43:99:67:1f:
da:40:76:d4:e8:49:e0:31:ab:55:4b:07:c8:27:d4:
88:5c:47:0b:11:51:fc:a7:63:e7:ab:85:73:9a:a3:
89:e4:1e:04:97:d3:3d:23:59:fb:d5:ca:6e:54:74:
a2:0f:f8:5e:ad:bf:04:c2:99:90:15:bd:2e:2a:05:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A8:CC:32:F6:5F:64:63:BA:77:74:28:7C:9A:4C:A7:C9:8B:A0:48
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/PKjMMvZfZGO6d3QofJpMp8mLoEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.65.0/24
138.124.180.0/24
138.124.183.0-138.124.184.255
138.124.187.0/24
Signature Algorithm: sha256WithRSAEncryption
30:54:a3:dc:97:07:48:a7:84:30:bd:26:c4:8e:4e:a9:62:b7:
16:da:a6:6a:ad:99:ea:70:0b:37:61:7b:ca:d9:ba:1a:b8:e1:
49:0c:a2:3c:20:65:0e:6c:86:c6:8d:13:dd:b1:d1:2a:0a:22:
74:2f:a8:ff:da:e5:a5:67:90:f8:4c:8e:e7:b5:0e:5f:ab:d3:
15:f6:a5:2a:84:3f:23:a1:9c:e9:36:5b:0a:1f:18:b7:35:80:
fe:06:00:33:13:d7:59:0b:fe:72:88:43:97:32:e8:17:6c:2a:
76:c0:5b:56:08:ab:c7:d6:b1:79:1b:a9:5c:51:5c:81:ce:6b:
86:57:44:5c:96:7e:fd:82:3f:31:ed:44:03:1e:31:76:cd:bd:
f2:9c:f6:c0:3e:75:4b:a1:85:3a:fa:e9:98:4a:ed:a5:1e:ca:
e2:30:74:76:cb:0e:1d:7a:02:c2:d9:6c:86:79:d4:1f:a2:8f:
16:7d:a8:2d:b3:b7:b6:76:2f:4c:1e:64:7c:66:8f:0f:b0:a0:
87:52:f0:48:ca:e1:b4:24:85:e3:64:bb:2b:b3:88:94:89:9e:
7d:18:f2:6d:18:3c:98:ac:a5:5d:7f:8d:e6:ce:25:85:1a:e1:
f0:51:53:03:ad:6d:8c:06:07:ff:44:3e:0f:0a:dd:1b:01:bf:
fb:7f:b6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:40 2025 by rpki-client