Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/hL9nVg0PCz1iH0t0zZu_EP6kUq8.roa
File: hL9nVg0PCz1iH0t0zZu_EP6kUq8.roa (raw, json)
Hash identifier: 2p1Y9iwQtnOqZMVomgNhiXW8UZHRVORDwOVUKz9BJLU=
Subject key identifier: 84:BF:67:56:0D:0F:0B:3D:62:1F:4B:74:CD:9B:BF:10:FE:A4:52:AF
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 019299D79B9A397E1A74C31BCB1CE7F7FF91
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/hL9nVg0PCz1iH0t0zZu_EP6kUq8.roa
Signing time: Thu 17 Oct 2024 09:38:16 +0000
ROA not before: Thu 17 Oct 2024 09:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6134
IP address blocks: 45.128.146.0/24 maxlen: 24
45.128.147.0/24 maxlen: 24
45.131.179.0/24 maxlen: 24
45.132.238.0/23 maxlen: 24
45.137.10.0/24 maxlen: 24
45.137.11.0/24 maxlen: 24
91.217.160.0/24 maxlen: 24
91.238.207.0/24 maxlen: 24
193.200.149.0/24 maxlen: 24
193.200.152.0/24 maxlen: 24
193.227.103.0/24 maxlen: 24
193.227.109.0/24 maxlen: 24
193.227.114.0/24 maxlen: 24
2a12:a380::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:d7:9b:9a:39:7e:1a:74:c3:1b:cb:1c:e7:f7:ff:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Oct 17 09:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84bf67560d0f0b3d621f4b74cd9bbf10fea452af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:22:9a:f3:3c:f1:a3:e9:0b:d4:a0:5b:b3:
77:02:b9:5a:e2:57:95:24:02:76:88:26:90:72:10:
2e:e0:09:79:c4:b8:6d:23:e9:4d:e7:b3:53:3c:50:
24:27:d0:33:17:d0:05:bc:32:af:f6:08:f6:0f:eb:
d8:9a:45:ae:c2:24:77:ac:2f:20:97:ec:7b:0a:2f:
6b:09:57:ca:0c:81:fb:05:c9:51:68:ce:fc:42:10:
63:34:7f:6d:05:9a:cd:b5:77:36:36:b0:55:bc:dc:
56:6f:4e:2f:7d:5c:9c:4d:f4:c9:85:fa:3a:ea:e9:
a1:90:43:a5:09:10:5b:22:b1:cf:81:b9:96:25:8f:
07:0c:24:76:7b:31:5f:67:76:d6:fd:d7:6d:e2:7c:
fa:8f:39:c1:e7:bb:0a:60:17:dd:32:0c:bf:dd:7e:
60:7d:d0:fb:48:2c:4a:45:15:6d:15:a1:ba:6b:22:
71:9e:6b:0c:80:91:ec:fb:7e:53:ee:27:a4:1c:7b:
69:85:88:e1:4a:2f:ac:c7:3b:af:b7:4b:61:a6:05:
1c:78:20:b2:1c:d5:20:99:89:13:7e:85:3f:ba:59:
a6:14:ca:21:a4:92:15:f8:1f:7c:6c:dd:a8:a5:e4:
01:ee:66:e1:d1:01:79:74:7e:a6:b8:9f:98:6f:7f:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BF:67:56:0D:0F:0B:3D:62:1F:4B:74:CD:9B:BF:10:FE:A4:52:AF
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/hL9nVg0PCz1iH0t0zZu_EP6kUq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.146.0/23
45.131.179.0/24
45.132.238.0/23
45.137.10.0/23
91.217.160.0/24
91.238.207.0/24
193.200.149.0/24
193.200.152.0/24
193.227.103.0/24
193.227.109.0/24
193.227.114.0/24
IPv6:
2a12:a380::/29
Signature Algorithm: sha256WithRSAEncryption
c5:42:0f:d4:40:a4:b8:32:92:c6:bf:60:d5:30:0e:6d:a7:61:
1e:bb:6c:e1:93:10:f4:7b:c1:47:87:dd:89:b6:5a:71:13:33:
10:4f:de:e1:dc:60:12:a3:4e:30:10:0b:bd:d3:01:d0:c6:8b:
43:93:98:05:44:6c:7c:07:02:99:38:32:77:4c:8c:84:f1:e1:
13:b6:68:b9:71:03:7b:8e:a7:cf:04:fa:b0:18:48:ab:80:06:
db:4c:0f:da:9c:61:8a:f2:6f:c0:e3:2c:f0:f9:c0:78:ce:72:
9f:3d:c6:6d:46:c5:b2:4c:fa:b9:4d:6d:8b:2f:0e:1c:d9:f5:
4e:e0:e1:a7:b9:20:24:8e:df:25:1b:4e:77:b3:8f:e9:2b:90:
c7:67:29:7d:1b:3d:ba:fd:a3:ac:c4:c9:d4:d2:ca:92:0e:4e:
bc:d3:84:f0:61:27:f6:08:df:7b:33:4f:36:63:d7:33:10:a9:
e3:5c:17:0c:01:40:bb:32:81:01:1d:fd:c3:75:ba:c5:18:2b:
a7:be:0d:c9:6e:bb:d7:96:96:06:39:90:8e:9a:c4:ac:5a:d5:
6a:69:99:e0:63:2e:75:57:cf:4d:ca:9d:6e:1a:c0:d7:19:58:
43:56:17:f4:74:5d:4e:da:e2:c7:de:fc:3d:16:d0:8f:65:ac:
f7:f9:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:17 2025 by rpki-client