Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa
File: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (raw, json)
Hash identifier: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=
Subject key identifier: D6:15:8E:CB:18:ED:A5:E5:61:0F:0B:FE:C4:33:9E:0A:A8:37:BD:A2
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 0194274889741F57162A092007ECB5D2794E
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42201
IP address blocks: 45.130.84.0/24 maxlen: 24
45.130.85.0/24 maxlen: 24
45.130.86.0/24 maxlen: 24
45.130.87.0/24 maxlen: 24
45.148.5.0/24 maxlen: 24
45.148.7.0/24 maxlen: 24
91.240.64.0/24 maxlen: 24
91.240.65.0/24 maxlen: 24
2a10:a000::/48 maxlen: 48
2a10:a000:1::/48 maxlen: 48
2a10:a000:2::/48 maxlen: 48
2a10:a000:3::/48 maxlen: 48
2a10:a000:4::/48 maxlen: 48
2a10:a000:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:89:74:1f:57:16:2a:09:20:07:ec:b5:d2:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6158ecb18eda5e5610f0bfec4339e0aa837bda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:d9:d1:c7:ce:22:eb:09:09:a7:7b:23:70:
99:e4:00:50:b1:38:41:ce:ca:a1:f0:2a:7d:30:64:
17:d3:62:5a:e2:0b:4c:16:05:90:fa:8b:51:78:47:
a2:83:ff:b7:f0:fe:96:f9:7d:8f:79:aa:1e:6e:ac:
46:71:97:f7:6b:40:91:55:cb:da:c2:64:1d:a7:50:
30:95:41:8b:8a:15:00:da:9f:df:33:99:5f:65:5e:
25:22:bb:1f:30:74:23:d8:a6:98:34:11:7f:23:11:
63:18:4e:4d:61:0a:08:6a:f7:48:68:86:65:03:6c:
f8:2c:8d:45:8a:ea:62:49:4d:62:c4:90:4d:4a:da:
90:5f:42:de:93:67:02:1d:78:51:86:3b:d7:10:72:
7b:94:09:59:49:84:70:d8:c7:79:94:a0:3b:04:aa:
c1:b5:a6:4b:9a:ec:57:d0:80:44:9a:5d:f8:c3:cf:
b6:3f:8a:46:67:4e:10:8a:94:00:4e:b3:28:f9:e4:
0f:09:86:a7:42:4b:a8:73:73:52:c4:d7:49:88:9c:
a8:db:29:16:37:13:24:f4:42:d5:d8:e2:63:ae:9a:
4e:33:0b:59:f8:7a:6f:15:d0:eb:96:2d:0d:d2:95:
18:93:88:d2:28:ae:0c:42:c1:75:46:e0:a2:cd:a9:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:8E:CB:18:ED:A5:E5:61:0F:0B:FE:C4:33:9E:0A:A8:37:BD:A2
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.84.0/22
45.148.5.0/24
45.148.7.0/24
91.240.64.0/23
IPv6:
2a10:a000::-2a10:a000:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:9c:36:2f:4f:1c:e5:2c:5f:fe:ad:83:02:a7:bf:ae:84:5f:
de:7a:23:83:b7:fb:c3:54:6c:a0:4c:d5:b8:ae:60:31:22:1b:
43:e6:b7:b3:f0:b1:e9:b7:9d:da:84:3e:c2:b5:82:71:54:c0:
1a:33:a9:3e:a5:4d:a1:9c:35:9c:e6:73:b0:6c:24:69:6f:c0:
94:5f:9c:90:68:e7:ae:0d:cb:95:2b:ca:a0:c5:2c:fb:86:be:
40:02:f6:21:40:48:8d:b8:27:fd:60:38:2d:9b:6e:eb:a6:b0:
9e:71:7a:d4:41:dd:97:da:2f:fc:5b:82:38:17:40:28:6e:39:
33:76:dc:4d:7d:3e:4b:65:a0:27:6d:6b:c7:17:a3:72:66:e6:
4e:4e:a4:9c:0e:87:b4:40:69:fa:d8:3b:d9:9b:6f:ef:5b:56:
b7:e7:b8:45:88:65:c8:6f:c5:9e:91:e4:4a:6f:ca:20:d2:73:
47:66:e0:74:1e:2f:e9:35:51:85:f0:76:58:36:b6:de:5e:28:
67:b2:af:12:47:26:9a:89:32:cb:56:d6:7e:fb:b8:23:b9:8b:
e1:97:65:3c:83:60:ac:72:c8:7b:8c:cb:24:d0:c1:10:70:98:
fb:26:9a:b8:26:34:f8:ce:1e:57:8c:1a:63:db:13:d2:68:a1:
dc:ac:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:46:36 2025 by rpki-client