Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/itLqudVm_LWWCSb2ZaHE7Y8xg9k.roa
File: itLqudVm_LWWCSb2ZaHE7Y8xg9k.roa (raw, json)
Hash identifier: bTfyy1SxJCeaK5coWhOr/Q8NlmQaYiJZYALhNcfWwOg=
Subject key identifier: 8A:D2:EA:B9:D5:66:FC:B5:96:09:26:F6:65:A1:C4:ED:8F:31:83:D9
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A3B95CF58ABC4D838900669C2EBE
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/itLqudVm_LWWCSb2ZaHE7Y8xg9k.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197730
IP address blocks: 45.135.238.0/24 maxlen: 24
185.235.164.0/24 maxlen: 24
2a06:da40::/40 maxlen: 40
2a0b:1f00::/32 maxlen: 32
2a0e:31c0::/40 maxlen: 40
2a0f:22c0::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a3:b9:5c:f5:8a:bc:4d:83:89:00:66:9c:2e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad2eab9d566fcb5960926f665a1c4ed8f3183d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:46:bf:67:e8:74:82:24:96:01:7f:8b:31:
bb:a2:fd:0b:e0:7b:e4:2c:62:a2:8a:47:9b:5d:34:
98:97:3d:a2:28:c0:2f:43:46:77:42:35:52:7a:80:
c8:3f:9a:5b:2a:2d:29:bc:da:7e:ea:91:40:d4:bc:
79:e2:03:8c:61:97:7f:e2:e4:35:76:99:4d:14:fe:
1d:24:37:4c:59:84:ae:a3:21:9a:df:0e:6f:e2:69:
31:da:52:3b:3c:b3:56:65:30:5a:e8:95:aa:c7:97:
89:1e:b2:3f:51:59:05:13:7b:17:e4:fc:86:52:2c:
37:6d:41:50:81:a4:7d:6e:f1:43:7a:a6:e5:a3:05:
3c:fc:c5:df:b4:9b:d4:a9:9a:d9:0b:72:22:cf:f4:
c4:1c:28:17:27:45:0d:46:1e:81:38:ff:e2:47:81:
5b:44:11:c4:40:fc:f2:9d:7d:ee:16:21:bd:ce:b7:
d0:2e:cf:99:60:6b:11:92:85:7d:c8:d7:e1:ba:b9:
74:5c:2e:4c:8c:80:9e:e2:6d:02:c1:e3:ad:52:ae:
f6:80:60:d9:51:50:3f:39:91:55:a3:23:91:dd:6d:
d0:bf:6f:2b:f4:b3:a5:9e:b5:c2:3b:98:b1:b5:68:
ef:b1:f7:f3:9b:d6:18:da:e7:ff:f6:37:4e:c3:a1:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:EA:B9:D5:66:FC:B5:96:09:26:F6:65:A1:C4:ED:8F:31:83:D9
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/itLqudVm_LWWCSb2ZaHE7Y8xg9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.238.0/24
185.235.164.0/24
IPv6:
2a06:da40::/40
2a0b:1f00::/32
2a0e:31c0::/40
2a0f:22c0::/40
Signature Algorithm: sha256WithRSAEncryption
79:c9:16:a2:79:5b:9c:d6:29:ea:f4:39:84:09:e4:4c:10:b3:
40:69:ba:04:b6:3e:23:03:a6:93:ab:d9:74:b6:f3:a5:07:26:
76:88:05:20:1f:23:68:25:10:9a:56:8e:8f:0f:a6:4f:2d:73:
3f:42:2e:b9:e6:4d:32:46:8c:1d:fd:41:c7:b7:43:5c:37:89:
e1:95:9d:4f:7a:65:8a:eb:16:42:5f:27:35:09:9e:38:3a:62:
3a:47:30:7f:67:fd:a9:89:8c:01:da:ee:6a:54:eb:55:3f:89:
c4:cf:50:f0:75:14:61:92:f0:1e:73:73:47:01:1a:09:fd:a1:
88:2c:87:5d:eb:75:29:6a:82:ad:85:e6:db:94:63:34:87:1f:
bf:af:30:4e:b1:8f:de:40:2b:51:d5:c5:d6:21:65:4c:75:d3:
6c:d9:8c:fb:a3:9b:95:23:b6:5b:36:54:c6:56:27:f8:4e:3c:
18:b5:ab:eb:cc:2b:83:4c:f0:16:ed:31:e7:35:fb:45:35:59:
3e:2a:3f:e6:17:fd:a5:9d:18:9e:54:25:a4:2b:1c:94:d3:7f:
33:24:96:41:bb:51:6f:21:a6:8b:56:04:54:73:2f:17:47:36:
69:cd:6d:77:24:93:5e:29:92:f3:cd:2c:f1:f6:63:81:73:86:
68:03:bf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:19 2025 by rpki-client