Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/zJfYWtrmuOnIS50feQhKcumdyfw.roa
File: zJfYWtrmuOnIS50feQhKcumdyfw.roa (raw, json)
Hash identifier: iVCAB4WbYXFr/UIQ+S56Cp8fATWtHXGcdqo4NIduuNc=
Subject key identifier: CC:97:D8:5A:DA:E6:B8:E9:C8:4B:9D:1F:79:08:4A:72:E9:9D:C9:FC
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0194258EA6E8ACA65119C7D6020D918CB3B2
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/zJfYWtrmuOnIS50feQhKcumdyfw.roa
Signing time: Thu 02 Jan 2025 05:48:13 +0000
ROA not before: Thu 02 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41155
IP address blocks: 45.91.151.0/24 maxlen: 24
45.156.72.0/24 maxlen: 24
45.156.73.0/24 maxlen: 24
45.156.74.0/24 maxlen: 24
45.156.75.0/24 maxlen: 24
45.158.136.0/24 maxlen: 24
45.158.137.0/24 maxlen: 24
45.158.138.0/24 maxlen: 24
45.158.139.0/24 maxlen: 24
77.75.231.0/24 maxlen: 24
109.107.134.0/24 maxlen: 24
185.34.103.0/24 maxlen: 24
185.89.23.0/24 maxlen: 24
185.222.215.0/24 maxlen: 24
188.244.116.0/24 maxlen: 24
194.0.193.0/24 maxlen: 24
194.0.221.0/24 maxlen: 24
194.0.223.0/24 maxlen: 24
194.1.200.0/24 maxlen: 24
2a0d:8e80:2659::/48 maxlen: 48
2a0d:8e80:8080::/48 maxlen: 48
2a0d:8e80:8a80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:a6:e8:ac:a6:51:19:c7:d6:02:0d:91:8c:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jan 2 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc97d85adae6b8e9c84b9d1f79084a72e99dc9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ff:c2:68:54:8c:73:75:10:cd:d3:59:9d:4c:
e1:1b:90:b2:85:3c:66:7c:df:c8:ae:08:f1:4e:f5:
82:52:46:08:58:c4:bd:55:2b:90:df:c5:85:ad:26:
cf:b3:41:31:6d:04:af:e3:9f:b8:5a:aa:96:c7:dd:
90:82:85:1b:83:f0:72:52:54:5b:2f:ee:b7:f3:af:
a8:09:9e:16:29:e0:86:fb:4c:78:6a:16:63:50:c7:
bd:26:8f:c3:34:5d:0f:39:32:14:a6:92:9f:3d:cf:
df:e6:a4:52:21:46:55:19:b5:da:4f:b0:75:3d:03:
16:f4:14:0e:e8:55:68:eb:ee:d3:d9:25:55:34:96:
cc:d7:10:0b:51:aa:d8:e4:0c:de:1b:55:b3:3a:d7:
d8:e1:d1:65:bd:fb:ed:ba:2d:9c:91:85:a2:77:6b:
b8:2a:0b:1b:bc:0d:42:43:a0:36:35:eb:bf:cf:ff:
2d:53:a0:18:73:78:81:33:90:1b:ca:e4:fc:e3:db:
06:07:c3:1b:bc:44:aa:08:cc:0e:b1:0a:92:38:ad:
b7:f7:89:ca:19:2c:ba:5c:84:bd:26:68:88:74:12:
e0:70:2b:b7:73:4e:91:d2:75:7c:cb:0f:16:e4:77:
77:ee:60:7a:06:c6:9d:a6:9c:65:46:18:55:2d:74:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:D8:5A:DA:E6:B8:E9:C8:4B:9D:1F:79:08:4A:72:E9:9D:C9:FC
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/zJfYWtrmuOnIS50feQhKcumdyfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.151.0/24
45.156.72.0/22
45.158.136.0/22
77.75.231.0/24
109.107.134.0/24
185.34.103.0/24
185.89.23.0/24
185.222.215.0/24
188.244.116.0/24
194.0.193.0/24
194.0.221.0/24
194.0.223.0/24
194.1.200.0/24
IPv6:
2a0d:8e80:2659::/48
2a0d:8e80:8080::/48
2a0d:8e80:8a80::/48
Signature Algorithm: sha256WithRSAEncryption
13:64:bc:07:08:05:9d:fb:02:15:00:3c:b0:6d:5d:5c:68:da:
8c:e0:d0:07:c8:b4:df:fb:68:46:4e:0f:5c:44:e6:fd:87:46:
71:ae:22:3a:9e:a9:e7:43:a2:ec:c4:dd:5f:2c:1b:c2:a9:28:
f1:bd:b9:d2:4d:27:a6:7f:5f:2e:4f:f0:20:60:c3:0a:d8:da:
55:10:a5:41:6e:4f:09:ad:de:ca:3c:de:c2:b2:04:06:ab:c8:
41:34:83:81:bb:88:2e:4f:09:98:5c:a9:fb:9b:0e:49:86:ee:
70:37:cf:7f:16:7f:fd:8d:48:80:63:47:91:ca:85:fa:c0:46:
dd:b5:56:03:e1:08:d2:b4:09:95:f4:b2:61:6b:9e:66:9d:e9:
7a:18:2f:a4:3f:04:32:c7:ba:12:ee:21:0e:c3:0b:26:61:b2:
1a:7e:3a:33:da:4c:55:64:4e:f1:e7:fd:a9:0e:e1:73:2f:bf:
ba:9e:63:75:a0:9d:e1:01:d4:f8:e7:24:6b:75:33:77:63:af:
b2:c5:9c:7c:a1:35:e2:05:47:7c:e2:9a:04:01:a0:3c:94:b3:
4c:d7:32:9c:52:d8:1d:f4:fa:2f:da:fd:06:f7:c7:15:4d:c4:
44:98:98:6c:ad:b7:2d:17:47:07:3a:28:d5:c7:18:23:08:9c:
24:67:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:05 2025 by rpki-client