Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Nibdixg1zd1GUFlw7ZBUGaqqj-A.roa
File: Nibdixg1zd1GUFlw7ZBUGaqqj-A.roa (raw, json)
Hash identifier: Zei5S+60EvZayBNlAK/BbADll2YlO3f1vqKMvRJ8MQg=
Subject key identifier: 36:26:DD:8B:18:35:CD:DD:46:50:59:70:ED:90:54:19:AA:AA:8F:E0
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452DA2E31DCE96B09B5456A2F6FB6C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Nibdixg1zd1GUFlw7ZBUGaqqj-A.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 45.15.239.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
45.132.39.0/24 maxlen: 24
45.135.35.0/24 maxlen: 24
45.138.7.0/24 maxlen: 24
45.138.156.0/24 maxlen: 24
45.138.212.0/24 maxlen: 24
45.138.215.0/24 maxlen: 24
45.140.65.0/24 maxlen: 24
45.149.130.0/24 maxlen: 24
45.149.131.0/24 maxlen: 24
45.152.118.0/24 maxlen: 24
45.152.119.0/24 maxlen: 24
83.138.51.0/24 maxlen: 24
83.138.52.0/24 maxlen: 24
84.246.82.0/24 maxlen: 24
91.206.69.0/24 maxlen: 24
91.224.140.0/24 maxlen: 24
91.237.104.0/24 maxlen: 24
91.237.105.0/24 maxlen: 24
176.116.2.0/24 maxlen: 24
176.116.5.0/24 maxlen: 24
176.116.9.0/24 maxlen: 24
176.116.20.0/24 maxlen: 24
176.116.23.0/24 maxlen: 24
176.126.109.0/24 maxlen: 24
176.126.112.0/24 maxlen: 24
176.126.115.0/24 maxlen: 24
193.0.245.0/24 maxlen: 24
193.0.246.0/24 maxlen: 24
193.5.1.0/24 maxlen: 24
193.33.67.0/24 maxlen: 24
193.58.171.0/24 maxlen: 24
193.58.178.0/24 maxlen: 24
194.107.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2d:a2:e3:1d:ce:96:b0:9b:54:56:a2:f6:fb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3626dd8b1835cddd46505970ed905419aaaa8fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:e9:11:76:01:17:43:3b:60:c6:ed:46:05:
98:22:3f:7e:16:c4:ba:eb:54:f8:0e:f5:49:78:64:
c3:7f:aa:8f:3f:ae:11:de:f5:9b:be:44:e2:52:61:
86:96:5b:98:6c:af:bf:f5:89:71:0c:ed:df:ba:1e:
1a:d5:34:c3:a3:9c:bc:41:e6:fe:9b:a5:db:41:53:
a6:91:db:0a:fd:46:ae:ed:74:22:d6:99:41:11:1f:
65:82:f2:79:97:55:f9:e9:97:1f:a4:22:12:24:43:
db:54:03:3f:8e:88:1c:64:32:71:6b:69:02:2a:7c:
35:e7:1c:de:c2:44:51:35:dd:29:a1:87:61:52:85:
a2:31:e9:8a:d8:5e:db:e5:a5:d0:e1:6b:df:1c:06:
45:62:37:b3:fc:a1:e1:91:2d:f0:00:6d:6b:89:d2:
38:a2:95:5a:a5:50:0d:5f:06:76:9a:09:e3:40:a2:
12:ea:29:56:d3:af:a5:d8:30:0b:c3:fa:4d:58:95:
a9:6c:52:f7:f0:14:92:9c:35:4b:14:b3:4f:45:d6:
10:b6:3e:7d:42:29:20:ed:75:2d:de:e8:e8:23:02:
fe:bb:49:b1:85:a9:86:69:6a:32:e0:57:46:35:ef:
fa:ac:1a:e6:f8:71:33:11:53:9b:a2:e7:f4:82:00:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:DD:8B:18:35:CD:DD:46:50:59:70:ED:90:54:19:AA:AA:8F:E0
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Nibdixg1zd1GUFlw7ZBUGaqqj-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.239.0/24
45.129.1.0/24
45.132.39.0/24
45.135.35.0/24
45.138.7.0/24
45.138.156.0/24
45.138.212.0/24
45.138.215.0/24
45.140.65.0/24
45.149.130.0/23
45.152.118.0/23
83.138.51.0-83.138.52.255
84.246.82.0/24
91.206.69.0/24
91.224.140.0/24
91.237.104.0/23
176.116.2.0/24
176.116.5.0/24
176.116.9.0/24
176.116.20.0/24
176.116.23.0/24
176.126.109.0/24
176.126.112.0/24
176.126.115.0/24
193.0.245.0-193.0.246.255
193.5.1.0/24
193.33.67.0/24
193.58.171.0/24
193.58.178.0/24
194.107.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a4:eb:93:21:ac:1a:13:bc:ec:6d:81:d4:17:04:85:9c:90:
03:c7:ce:f0:cd:12:6b:fb:46:17:a9:fc:72:67:75:c6:ee:26:
5e:2b:52:00:d4:92:b9:cf:09:e7:ef:c9:9c:09:07:e6:8b:bf:
5a:1e:ef:14:b5:44:da:94:0d:f4:e7:cf:63:4d:6f:1b:1e:7f:
d2:86:61:cd:b1:2f:45:8b:9e:97:3c:73:b8:80:3d:ea:2b:31:
b1:8c:f5:ca:fe:15:2e:21:a1:0a:e8:52:2c:e6:86:e7:d0:6b:
1a:88:84:b4:d4:02:77:2b:d9:4c:50:04:2d:38:fe:5b:3e:38:
13:d9:ce:0d:25:0a:cd:c1:fd:ef:79:b9:36:94:50:20:3f:50:
4b:c9:57:a9:9a:45:f5:8f:fb:6c:0a:56:a5:ee:a1:1f:6c:6f:
58:cd:b1:b5:8e:ac:b3:0a:cb:49:e5:bb:56:35:5b:d1:51:03:
69:13:4c:3e:f1:00:a2:c3:3c:27:34:c3:a9:05:e7:3d:67:d4:
b2:3d:19:d1:78:5c:0d:2b:d5:fa:3b:a5:a3:8b:61:e2:31:dd:
c1:25:d7:b0:ad:59:01:df:f7:73:9f:a0:ca:4e:8a:ad:66:ac:
4b:95:67:be:f1:6d:4b:48:7d:d5:ac:e6:9e:de:44:5c:ae:df:
2a:39:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:56 2025 by rpki-client