Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1W8YwVPVVmWribwLy9LvtNVEaUM.roa
File: 1W8YwVPVVmWribwLy9LvtNVEaUM.roa (raw, json)
Hash identifier: YW6U541Esgjax5jt18u+1nzqZU1iI0A9cYffbNQQT6c=
Subject key identifier: D5:6F:18:C1:53:D5:56:65:AB:89:BC:0B:CB:D2:EF:B4:D5:44:69:43
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019559E9598DE2D44B4FEC447722BC2C2569
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1W8YwVPVVmWribwLy9LvtNVEaUM.roa
Signing time: Mon 03 Mar 2025 02:50:19 +0000
ROA not before: Mon 03 Mar 2025 02:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214785
IP address blocks: 45.134.144.0/24 maxlen: 24
45.155.224.0/24 maxlen: 24
103.211.100.0/24 maxlen: 24
103.211.102.0/24 maxlen: 24
185.245.1.0/24 maxlen: 24
185.245.2.0/24 maxlen: 24
193.107.216.0/24 maxlen: 24
194.120.164.0/24 maxlen: 24
194.145.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:59:e9:59:8d:e2:d4:4b:4f:ec:44:77:22:bc:2c:25:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 3 02:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d56f18c153d55665ab89bc0bcbd2efb4d5446943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:36:1d:e0:d6:7d:e3:f0:f0:1d:e0:ad:3f:
ed:e6:98:39:bb:2e:33:82:59:07:24:20:7d:d6:c0:
e2:3f:ed:7c:cf:6d:5f:74:2e:21:79:3d:47:38:07:
45:47:95:7c:21:98:62:85:d7:cf:30:85:f6:a6:ed:
84:77:8f:65:68:44:26:04:e3:d2:8e:26:77:ab:a0:
26:92:17:94:a4:7e:df:7c:3c:bd:9f:a4:a7:c6:35:
f0:58:12:0c:97:7c:f1:86:f7:2b:e5:8d:fe:bb:22:
28:44:76:1d:d1:49:ea:a7:40:d4:cb:67:4c:8d:14:
d4:ee:76:5a:c1:34:83:d0:45:40:e6:a2:36:30:36:
35:47:1e:33:eb:68:e8:1c:2a:bd:2f:c0:d5:d6:04:
34:a5:7e:66:02:cb:0c:39:52:92:be:47:f3:e3:bd:
0a:59:25:a5:dd:4b:1f:de:ba:df:0d:fc:10:72:78:
51:ea:3a:18:99:29:93:9e:2c:2a:a4:e6:66:19:ff:
1d:45:80:b5:41:94:5e:7f:99:f5:61:ba:03:1a:dd:
cb:c5:4b:77:ce:57:01:74:73:fa:65:7e:02:ca:dd:
b4:89:d0:2a:9f:4b:22:85:1f:32:a6:38:80:b1:07:
35:6b:18:41:0c:b6:11:98:2e:56:33:7f:86:fb:6e:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:18:C1:53:D5:56:65:AB:89:BC:0B:CB:D2:EF:B4:D5:44:69:43
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1W8YwVPVVmWribwLy9LvtNVEaUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
45.155.224.0/24
103.211.100.0/24
103.211.102.0/24
185.245.1.0-185.245.2.255
193.107.216.0/24
194.120.164.0/24
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8c:38:29:1e:c2:c5:76:22:e7:17:d2:78:1a:ec:bc:78:88:
c9:77:af:6c:19:42:f8:c6:52:24:b7:bb:7d:38:ff:b2:14:52:
43:77:cc:27:27:58:8c:0d:1c:14:1b:23:89:75:56:d4:6b:d8:
c2:09:ba:fb:a4:b8:ca:3a:05:fc:1d:64:83:15:8d:9b:9c:6d:
80:bf:dd:a0:46:15:c1:9d:0b:d2:4a:41:04:a1:9f:ab:cc:f9:
b6:ec:91:91:05:13:b3:07:76:d9:e4:41:4e:a3:5f:5b:ab:24:
26:4b:8b:2a:cc:6b:c0:a8:de:04:2b:3e:8a:ea:59:8d:52:b1:
88:45:a0:e8:29:d4:c3:6c:bc:96:e1:3a:ce:67:15:47:01:25:
43:4f:d2:b5:77:40:ca:84:f8:76:67:87:76:99:f7:a5:6b:b4:
01:b6:1f:91:db:45:28:43:4e:95:45:64:95:92:59:bc:f0:45:
ce:e3:8a:a0:29:5f:2d:32:e5:de:f0:60:8f:49:06:24:72:ae:
f8:1b:3d:dd:37:fb:79:8f:04:0a:0f:9b:61:69:e1:20:6b:66:
95:8e:fc:d7:67:16:e7:ed:e4:e6:60:ca:ed:65:76:13:2e:18:
a9:0f:71:ce:14:a3:25:f6:2d:8d:1e:f8:29:5d:78:df:02:c7:
6f:17:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:30 2025 by rpki-client