Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/dmjBEIH_xWlSUlK_Q0j-47JFfaA.roa
File: dmjBEIH_xWlSUlK_Q0j-47JFfaA.roa (raw, json)
Hash identifier: SPDGiqQ5ceqCYq+PMFHVaxfzXvRxtieexIG5LAvx7FQ=
Subject key identifier: 76:68:C1:10:81:FF:C5:69:52:52:52:BF:43:48:FE:E3:B2:45:7D:A0
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01951971CB8CF35AC62BF548F1D2D5DAF863
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/dmjBEIH_xWlSUlK_Q0j-47JFfaA.roa
Signing time: Tue 18 Feb 2025 14:24:02 +0000
ROA not before: Tue 18 Feb 2025 14:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.11.189.0/24 maxlen: 24
45.65.114.0/24 maxlen: 24
45.154.156.0/24 maxlen: 24
45.154.158.0/24 maxlen: 24
185.83.200.0/23 maxlen: 23
185.83.202.0/23 maxlen: 23
188.209.131.0/24 maxlen: 24
188.209.132.0/22 maxlen: 24
188.209.132.0/24 maxlen: 24
188.209.133.0/24 maxlen: 24
188.209.134.0/24 maxlen: 24
188.209.135.0/24 maxlen: 24
188.209.139.0/24 maxlen: 24
194.15.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:71:cb:8c:f3:5a:c6:2b:f5:48:f1:d2:d5:da:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Feb 18 14:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7668c11081ffc569525252bf4348fee3b2457da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:d1:a3:36:0f:42:05:08:4d:28:70:94:47:
75:3f:93:8a:e9:03:39:0d:b2:eb:7c:c5:ac:98:54:
d8:2a:9c:fd:e7:f1:cf:e5:76:1f:cd:7b:a6:4a:6f:
6d:cd:dc:34:a8:59:38:07:87:d0:83:9b:3b:17:e1:
50:35:8c:54:4f:e7:4b:bb:cd:79:9f:07:c7:42:b5:
ed:b0:84:6e:81:1f:da:48:51:ad:6c:5b:fe:8c:87:
40:fc:75:20:62:61:bb:61:07:cb:cc:63:be:88:19:
8d:a8:cf:9d:0d:39:0b:7f:cb:e3:05:f3:34:e5:48:
13:d9:16:80:4e:d6:3e:98:a4:fa:e3:23:38:fb:8f:
e8:a3:3a:23:f8:e5:f2:3f:02:81:1d:58:1e:e0:f4:
59:88:9a:fa:7c:02:47:6a:19:9d:14:82:71:0d:1d:
34:9b:4c:44:8c:2f:e5:37:2a:d6:24:a9:28:36:c7:
d3:d5:0e:43:23:dc:12:c3:7a:28:22:53:74:66:cd:
7e:47:1c:12:12:4c:d9:fc:91:e5:33:fa:aa:50:00:
8e:22:56:c0:97:08:a8:44:45:9d:02:14:be:4f:a0:
d3:ba:ec:eb:1b:67:ad:49:e0:26:4c:2c:35:1f:e0:
47:ef:22:36:7d:2e:f7:8b:41:33:e5:eb:7d:ca:8a:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:68:C1:10:81:FF:C5:69:52:52:52:BF:43:48:FE:E3:B2:45:7D:A0
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/dmjBEIH_xWlSUlK_Q0j-47JFfaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.189.0/24
45.65.114.0/24
45.154.156.0/24
45.154.158.0/24
185.83.200.0/22
188.209.131.0-188.209.135.255
188.209.139.0/24
194.15.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:81:35:b3:83:f7:30:2c:dc:f6:e3:aa:df:b7:3f:41:0b:62:
c4:28:ff:ae:da:78:99:57:30:72:4d:6a:32:24:cd:27:b6:d7:
2d:34:4f:0a:a6:ec:e8:d0:5b:df:60:01:df:de:19:b0:98:ee:
e7:37:52:d8:ca:55:8d:52:d8:4f:d5:e5:42:86:52:db:91:d1:
1e:c0:d3:73:7b:63:7d:fa:c2:a4:ba:0e:a7:3d:a4:54:2e:ae:
8e:14:4b:55:23:69:fc:8c:fd:4b:93:92:a8:80:dc:47:fe:7c:
4e:36:00:6c:3f:32:70:00:4a:4c:b2:df:a8:2e:4c:a0:dc:ed:
0f:1a:6e:c8:01:d9:f1:74:65:37:b2:c3:70:77:e2:95:23:ad:
fe:cf:17:3e:6a:61:14:e9:ca:45:0c:6c:09:53:b9:1c:12:19:
2a:f4:af:41:86:5f:5b:d4:b8:b7:80:44:08:ab:9c:8e:54:6a:
e9:36:db:96:4c:19:7d:32:22:74:78:92:78:38:d1:8b:87:16:
af:e7:a7:03:74:96:55:1b:77:b2:10:a8:fd:6e:65:32:22:51:
ea:a5:52:75:85:30:2b:c3:14:16:ad:ec:ef:c9:e0:68:51:b5:
e7:04:f6:7c:2e:9b:2c:8b:b4:c8:58:31:45:7c:94:07:1f:75:
5d:50:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:16:02 2025 by rpki-client