Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/CN98ni3cfk7ExyavvaML-CFp7rw.roa
File: CN98ni3cfk7ExyavvaML-CFp7rw.roa (raw, json)
Hash identifier: 1D7/+yaFg9jJO+qITlT7nLZXPsmGelcfH781HCIEbik=
Subject key identifier: 08:DF:7C:9E:2D:DC:7E:4E:C4:C7:26:AF:BD:A3:0B:F8:21:69:EE:BC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1EC783F6478F3EE4F43FF159C6DC
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/CN98ni3cfk7ExyavvaML-CFp7rw.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207177
IP address blocks: 45.86.16.0/21 maxlen: 23
45.86.16.0/22 maxlen: 22
45.86.16.0/24 maxlen: 24
45.86.17.0/24 maxlen: 24
45.86.18.0/24 maxlen: 24
91.242.81.0/24 maxlen: 24
171.22.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1e:c7:83:f6:47:8f:3e:e4:f4:3f:f1:59:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08df7c9e2ddc7e4ec4c726afbda30bf82169eebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:d6:c5:1f:54:82:7a:75:2d:c8:97:ec:81:
89:c6:6e:68:c2:90:ed:e2:02:f1:f2:28:fa:01:92:
7e:7f:4c:4f:49:cf:7a:95:09:69:45:1e:90:c7:5c:
37:7c:7f:0d:ad:2b:b5:1e:5d:db:61:a0:7e:42:17:
55:ac:c2:a8:45:88:8d:26:38:03:83:e6:5c:4d:ed:
7c:bf:60:aa:42:f8:8e:a0:5f:4a:28:7e:a5:ce:9f:
b1:f0:ff:e2:fb:aa:cc:19:a7:74:73:69:ec:f7:a3:
97:7a:86:9e:8f:f0:c2:a7:df:cf:86:bc:19:af:7b:
f4:9b:0c:bc:8f:ea:2f:66:bc:0c:d4:ad:6f:62:d2:
5c:b3:c0:73:0e:95:f9:d0:d3:dc:d4:bc:72:25:89:
da:35:32:f5:90:8c:d9:ab:f8:d6:bd:d7:57:ea:59:
35:8b:03:56:3e:34:ed:24:6c:26:e7:bb:71:f4:c0:
43:d8:b4:82:e8:8c:53:13:ca:6b:1b:16:f7:28:1a:
08:e2:c5:28:43:f8:51:ec:59:28:13:4e:a1:6c:39:
bb:da:91:ea:e3:2d:56:40:fc:a3:00:d8:8b:5c:cd:
d2:7d:fc:10:09:e4:61:44:2b:99:cf:51:47:4b:39:
18:fa:d0:86:58:7c:1d:87:1a:88:f0:da:93:49:53:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DF:7C:9E:2D:DC:7E:4E:C4:C7:26:AF:BD:A3:0B:F8:21:69:EE:BC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/CN98ni3cfk7ExyavvaML-CFp7rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.16.0/21
91.242.81.0/24
171.22.52.0/22
Signature Algorithm: sha256WithRSAEncryption
86:8a:37:3f:66:e6:33:5d:6b:6d:19:82:83:66:01:ae:36:ab:
52:15:9b:1b:80:aa:c5:72:c4:84:19:6e:8d:53:5b:0a:5d:12:
e3:3e:ac:67:78:7f:eb:1e:4d:01:2e:b6:f8:28:eb:72:3e:79:
42:f8:17:78:6e:23:2b:23:9b:d5:9c:5c:b3:ce:9f:27:55:89:
c6:d2:0b:5d:da:a9:a4:04:20:22:fa:93:7b:f3:83:16:74:10:
ab:1e:94:3f:b7:a1:38:6a:5c:bd:49:05:4e:a2:14:f3:98:15:
32:7a:9d:c9:1a:87:f8:57:e9:99:fd:d9:d3:ce:2f:5b:e7:0e:
e5:54:75:9b:ec:fe:78:79:e7:29:cb:0a:02:01:e4:96:68:38:
ad:cf:de:1a:bb:51:05:4a:81:b1:f0:ea:a8:85:d2:8d:2a:6d:
76:a6:88:e0:59:fe:74:78:c4:3d:b3:53:49:6f:76:bc:ab:70:
56:17:2f:f8:5c:1c:c4:70:7e:6e:5a:24:09:52:36:66:fb:d8:
a6:eb:4a:eb:68:49:02:77:de:a0:fa:d2:61:dc:53:0c:91:66:
b9:ec:ef:70:78:2a:52:61:2f:5f:19:91:d4:c0:e7:54:fa:49:
41:e1:ee:f5:a4:d1:fd:ef:d4:13:f6:47:d7:b8:13:b4:f4:52:
56:bc:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:41 2025 by rpki-client