Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/668BLkySdWDDmr5lSsB-YtLZ80Q.roa
File: 668BLkySdWDDmr5lSsB-YtLZ80Q.roa (raw, json)
Hash identifier: wAlTOv+x5XHci96XsqbLWx0e5eMWTNKBMvsGMhRIW5g=
Subject key identifier: EB:AF:01:2E:4C:92:75:60:C3:9A:BE:65:4A:C0:7E:62:D2:D9:F3:44
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 0194258FB5E1C11623F7C86FCB8F43438EE8
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/668BLkySdWDDmr5lSsB-YtLZ80Q.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 45.135.241.0/24 maxlen: 24
176.97.220.0/24 maxlen: 24
185.229.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b5:e1:c1:16:23:f7:c8:6f:cb:8f:43:43:8e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebaf012e4c927560c39abe654ac07e62d2d9f344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:3f:3d:83:3e:b5:55:a9:26:ce:14:28:12:
09:ac:78:0d:e6:de:6d:70:a1:39:44:3e:d3:1c:06:
78:10:e3:c7:f8:da:62:10:be:12:40:40:4f:5e:5e:
fa:18:ed:3c:2c:2c:46:c1:7e:a5:38:ad:fe:2d:fb:
3d:df:7b:1b:75:30:98:31:e7:2b:d3:f2:93:3d:9a:
b2:fc:c0:f9:c6:36:01:35:a7:2a:03:f6:fc:3b:7e:
b9:67:04:85:33:d1:20:9a:f4:9d:1e:06:9e:2c:5b:
17:13:7a:64:6e:38:18:8f:58:75:58:29:a2:cc:d5:
de:2d:0b:e6:0c:74:ce:69:7e:62:be:2e:ef:5b:cd:
05:d8:1c:ff:3c:54:e9:85:37:97:c4:25:b9:dc:3c:
99:ae:96:b8:0a:8d:a0:f8:9d:85:52:30:ce:da:81:
e1:e9:60:a7:b9:da:f1:30:8a:8a:5a:5e:fe:a5:33:
75:a6:61:df:48:7f:0b:1f:b3:3a:9d:bb:04:98:22:
fd:bf:92:45:a0:67:63:ab:c4:85:93:0b:9b:6a:14:
0f:c6:92:0c:5a:36:06:d0:37:ee:35:86:f6:65:49:
25:c9:00:a1:b5:1e:05:9f:78:52:80:c5:dc:3e:cb:
b3:b1:d4:e5:2d:36:09:23:7a:77:81:21:b7:8a:f3:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AF:01:2E:4C:92:75:60:C3:9A:BE:65:4A:C0:7E:62:D2:D9:F3:44
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/668BLkySdWDDmr5lSsB-YtLZ80Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.241.0/24
176.97.220.0/24
185.229.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:21:df:af:fe:ca:72:43:a0:1b:c8:09:0e:21:7b:46:fe:0d:
02:7c:a9:dc:b8:c0:b8:eb:3e:5a:ec:95:da:51:91:9c:78:fd:
dc:ed:ff:ac:ea:05:67:39:cc:d0:1c:82:d4:86:0e:47:dd:57:
ce:13:28:5b:90:32:8a:92:27:7b:7a:06:2b:04:c7:86:0e:46:
fe:c2:c0:cf:4d:92:50:2d:7e:ed:0b:16:4f:be:e6:dd:8a:d6:
51:57:20:aa:93:53:e7:13:70:2d:37:be:ea:a2:91:3c:e1:f8:
10:ce:d2:06:2b:97:03:1e:49:20:1e:ee:92:d8:aa:66:87:7e:
2a:db:e0:d3:f2:ae:13:e4:16:da:87:1e:36:41:92:2f:b3:10:
09:f7:36:41:a3:86:96:fb:bd:9f:8b:91:91:e1:1b:b8:63:d4:
ef:27:3e:95:a0:62:31:85:13:f2:55:3b:a6:41:87:32:40:37:
72:92:77:76:5d:50:ff:95:42:15:0a:e8:84:e8:87:cb:ab:fb:
bb:ad:cd:09:b8:8a:c4:62:05:df:ca:d7:91:13:67:f5:bb:d3:
0c:dd:51:72:60:e8:8e:a7:be:de:ac:09:06:e2:0e:e6:82:7c:
44:8a:18:02:53:63:3f:d3:9d:27:69:b8:21:44:7b:de:56:c4:
dd:38:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:13:01 2025 by rpki-client