Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/C7B0vwMLEZaWgTM1CVBmJE1rYiA.roa
File: C7B0vwMLEZaWgTM1CVBmJE1rYiA.roa (raw, json)
Hash identifier: pBcS0C7uUEnqnObYu5AGhaZb7C2W9QcxNQN5Z5zvNMU=
Subject key identifier: 0B:B0:74:BF:03:0B:11:96:96:81:33:35:09:50:66:24:4D:6B:62:20
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0194DAB89F4C99E1F22FEB9597255915D691
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/C7B0vwMLEZaWgTM1CVBmJE1rYiA.roa
Signing time: Thu 06 Feb 2025 10:05:19 +0000
ROA not before: Thu 06 Feb 2025 10:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34872
IP address blocks: 45.154.97.0/24 maxlen: 32
45.154.99.0/24 maxlen: 32
62.3.50.0/24 maxlen: 32
194.28.98.0/23 maxlen: 32
2a0c:b640::/32 maxlen: 128
2a0c:b641::/44 maxlen: 128
2a0c:b641:10::/44 maxlen: 128
2a0c:b641:50::/44 maxlen: 128
2a0c:b641:60::/44 maxlen: 128
2a0c:b641:530::/44 maxlen: 128
2a0c:b641:540::/44 maxlen: 128
2a0c:b641:70f::/48 maxlen: 128
2a0c:b641:820::/44 maxlen: 128
2a0f:8400::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:b8:9f:4c:99:e1:f2:2f:eb:95:97:25:59:15:d6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Feb 6 10:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bb074bf030b119696813335095066244d6b6220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:7f:40:c5:20:fc:52:d4:8f:c1:25:5b:d3:
4f:98:1d:9c:82:9e:61:cd:98:b6:1d:a7:08:29:7e:
4f:db:f2:16:64:4c:4a:9d:3d:e8:a9:2b:fd:33:fa:
3c:b8:10:ee:1f:5a:fc:a6:8a:51:24:f4:17:00:0b:
c2:d5:2e:a7:2a:9c:67:58:ad:7e:71:2c:5e:67:23:
6c:f0:71:6c:7f:84:45:b5:d9:89:9a:07:2d:08:77:
f4:43:70:cb:4f:98:22:57:bd:68:a6:b3:1b:c9:b8:
00:2f:23:9b:91:29:41:ad:56:e0:08:09:96:7c:80:
24:25:07:0a:83:3c:88:95:a7:a0:b6:94:90:4f:1f:
f0:9f:50:ce:92:11:19:a0:f9:16:69:da:49:32:38:
01:f5:44:8c:f8:c8:02:f7:12:37:bf:02:51:4c:d6:
40:2e:fe:ea:ab:63:34:03:94:fd:85:b1:43:8e:64:
b2:cb:1c:e9:65:b7:35:a2:9b:45:77:ce:82:6e:56:
24:6a:dd:b1:ea:40:42:49:24:a8:9e:08:04:65:9a:
1b:27:f1:cf:ff:18:31:be:bb:c5:9a:20:d3:9a:b4:
51:3b:c0:6b:a2:85:68:22:e7:30:96:47:45:f0:47:
16:3b:0f:09:68:c4:0d:34:76:35:88:33:9f:6f:c2:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:74:BF:03:0B:11:96:96:81:33:35:09:50:66:24:4D:6B:62:20
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/C7B0vwMLEZaWgTM1CVBmJE1rYiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.97.0/24
45.154.99.0/24
62.3.50.0/24
194.28.98.0/23
IPv6:
2a0c:b640::-2a0c:b641:1f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:50::-2a0c:b641:6f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:530::-2a0c:b641:54f:ffff:ffff:ffff:ffff:ffff
2a0c:b641:70f::/48
2a0c:b641:820::/44
2a0f:8400::/32
Signature Algorithm: sha256WithRSAEncryption
23:a7:f6:34:b9:43:c8:c3:69:b0:b0:0d:fe:0d:60:1a:fe:30:
cc:ff:80:93:07:4b:95:72:e4:72:7a:2c:b7:55:49:1e:c3:82:
7b:cc:32:62:da:46:46:0d:ee:00:90:a3:fe:5e:ac:ac:14:e0:
28:ef:e3:b4:1f:4c:65:de:b8:02:16:5c:aa:38:91:27:13:4f:
50:10:45:01:46:4c:e3:e8:10:5e:5d:4a:e4:d2:9e:d5:08:62:
85:b8:96:41:86:09:c8:37:0b:ac:b6:76:74:ae:c5:56:fe:3f:
b0:ed:2d:06:da:3d:af:80:4b:84:61:54:f7:68:05:97:f3:c7:
81:53:3a:0c:47:95:bd:75:f1:37:0d:de:2d:98:76:8a:75:eb:
a0:b7:05:5b:d3:c5:2c:e9:7b:95:68:59:0a:4b:96:a0:4f:98:
ce:de:0a:49:76:54:17:1c:44:3d:16:24:3d:ff:e0:9a:00:fd:
e8:71:eb:da:32:39:31:56:66:de:86:3d:36:e9:71:b3:74:5c:
63:e0:f8:a1:bf:e8:5e:29:42:e4:9a:2f:19:c6:af:ba:db:e0:
57:4d:5e:25:9c:be:fd:46:4b:59:c0:fb:07:dd:69:e2:3f:a1:
be:64:8b:35:1f:75:62:ac:5c:88:8e:d2:33:9e:4a:e8:20:03:
b2:40:04:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:30 2025 by rpki-client