Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/vmTqyBfrIU-aITFYYpJ_pvbhgC0.roa
File: vmTqyBfrIU-aITFYYpJ_pvbhgC0.roa (raw, json)
Hash identifier: xM5xmwegmuiTqJMpfTFyodKvwjgfcFUTfmYDDnBq5iU=
Subject key identifier: BE:64:EA:C8:17:EB:21:4F:9A:21:31:58:62:92:7F:A6:F6:E1:80:2D
Certificate issuer: /CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Certificate serial: 01856E01CBC3BE6B1D988AA21CAE65BE0764
Authority key identifier: 9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/vmTqyBfrIU-aITFYYpJ_pvbhgC0.roa
Signing time: Sun 01 Jan 2023 15:44:49 +0000
ROA not before: Sun 01 Jan 2023 15:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 45.91.88.0/22 maxlen: 32
45.149.20.0/22 maxlen: 24
45.83.224.0/22 maxlen: 32
45.134.104.0/22 maxlen: 32
45.158.212.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:cb:c3:be:6b:1d:98:8a:a2:1c:ae:65:be:07:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Validity
Not Before: Jan 1 15:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be64eac817eb214f9a21315862927fa6f6e1802d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:74:a4:90:b7:08:2d:e1:b1:f8:ec:f3:2d:
89:f7:05:e8:bb:1d:f6:d8:e5:2c:41:24:5d:bf:69:
de:55:fb:fd:7b:5b:1f:e0:15:fc:19:73:f0:cf:47:
5c:05:0d:78:28:b6:53:79:19:86:02:7a:15:04:ca:
a7:4a:ba:0c:dd:90:97:bc:11:ca:6b:b9:56:19:b0:
f4:b6:6c:b1:43:e6:d7:d7:0c:cc:90:20:59:0a:10:
34:97:5e:8a:38:17:2a:d4:2f:12:1c:45:50:df:be:
b4:2e:f9:52:cb:7b:16:36:9c:23:8c:b3:d0:57:31:
5a:4a:5c:f8:d9:32:08:d9:12:87:58:c8:0d:88:e9:
e8:49:39:a6:10:f4:10:84:24:9d:df:d5:e9:3b:a9:
b6:82:44:7e:e6:66:19:63:bf:f0:5a:36:8e:b5:34:
18:b6:58:3e:1c:21:17:a0:1b:a1:9a:b8:0b:8b:a2:
e5:87:7f:03:f3:e4:9e:a0:45:52:de:c2:11:87:b7:
4b:64:8e:ee:f4:d3:a0:5b:57:20:e6:26:2d:34:83:
e0:42:95:c4:ef:45:f1:28:4d:bb:75:63:9c:c5:24:
a1:25:47:e9:a1:88:01:8a:b9:ee:2f:62:7b:cd:64:
47:cd:e0:52:59:22:d2:8f:f0:bc:49:f1:4b:fb:7b:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:EA:C8:17:EB:21:4F:9A:21:31:58:62:92:7F:A6:F6:E1:80:2D
X509v3 Authority Key Identifier:
keyid:9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/vmTqyBfrIU-aITFYYpJ_pvbhgC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.224.0/22
45.91.88.0/22
45.134.104.0/22
45.149.20.0/22
45.158.212.0/22
Signature Algorithm: sha256WithRSAEncryption
85:7f:78:d2:05:3d:0d:c1:05:2a:54:91:13:19:6f:0a:13:3f:
89:fd:25:da:e4:e0:af:f0:d8:d0:6b:4e:0f:43:02:ab:9c:ca:
b2:9c:87:60:b0:e9:1c:2c:17:f0:0c:b9:cc:ee:ed:b1:14:33:
89:91:f3:68:8b:e2:c3:1e:27:7c:f5:f0:ee:78:eb:06:1d:8e:
a6:7a:27:0c:b1:b5:ac:38:a8:f3:19:80:6b:6c:40:2f:73:9e:
6f:73:a7:2e:76:5e:2e:dd:e7:5e:7e:4e:45:99:6e:a9:1b:7d:
f8:77:40:b9:7b:6e:c4:27:78:c7:6b:43:d3:66:2b:51:34:1f:
60:87:dd:72:f1:94:cf:d7:b6:72:8a:30:5e:79:92:70:bd:b5:
bc:78:a3:14:a4:c1:8a:3b:c8:dc:08:a0:13:42:7e:d4:d3:41:
01:65:bd:d9:25:0d:33:8c:d6:ff:ad:23:af:44:bf:61:9a:a9:
73:bc:4b:14:8e:4b:5a:38:07:70:11:09:60:8c:d0:88:28:44:
79:58:3a:48:af:e0:c3:8d:b6:55:08:f1:d1:03:8a:56:fc:f3:
d6:63:5f:f2:1d:e8:f6:b8:f1:b6:10:e5:97:5a:15:b0:01:17:
6a:73:18:38:bb:27:4b:71:44:50:60:de:db:57:4d:69:db:15:
cb:b3:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:11 2025 by rpki-client