Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/VQZVlZqkH9S0x1DXirk8cG7IBS0.roa
File: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (raw, json)
Hash identifier: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=
Subject key identifier: 55:06:55:95:9A:A4:1F:D4:B4:C7:50:D7:8A:B9:3C:70:6E:C8:05:2D
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0194266B91CC2B569B27E00E5307B35F7C24
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/VQZVlZqkH9S0x1DXirk8cG7IBS0.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 45.80.104.0/23 maxlen: 23
45.140.206.0/23 maxlen: 23
45.145.128.0/23 maxlen: 23
45.145.130.0/23 maxlen: 23
45.148.232.0/23 maxlen: 23
45.148.234.0/23 maxlen: 23
45.155.166.0/23 maxlen: 23
83.142.52.0/23 maxlen: 23
83.142.54.0/23 maxlen: 23
193.187.92.0/23 maxlen: 23
193.187.94.0/23 maxlen: 23
193.202.8.0/23 maxlen: 23
193.202.10.0/23 maxlen: 23
193.202.12.0/23 maxlen: 23
193.202.14.0/23 maxlen: 23
193.202.80.0/23 maxlen: 23
193.202.82.0/23 maxlen: 23
193.202.84.0/23 maxlen: 23
193.202.86.0/23 maxlen: 23
193.203.8.0/23 maxlen: 23
193.203.10.0/23 maxlen: 23
212.119.44.0/23 maxlen: 23
212.119.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:91:cc:2b:56:9b:27:e0:0e:53:07:b3:5f:7c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=550655959aa41fd4b4c750d78ab93c706ec8052d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:72:08:30:fe:ab:e7:fc:d7:97:96:03:3d:
3e:64:a7:97:1c:fd:6f:0a:0c:d3:f7:00:3e:9d:4c:
b9:a9:a9:53:85:c1:a1:51:18:0d:35:51:9d:e6:17:
fb:4e:a0:dc:a2:df:2d:ba:4c:3c:1e:02:d1:f4:21:
77:f4:7d:1d:65:4d:5f:ca:25:68:31:3e:75:6a:c4:
9e:f5:d5:8c:02:75:be:57:b6:d4:d8:74:ae:5e:57:
c2:05:a2:0e:4e:0c:85:66:da:fd:9d:54:46:6d:36:
2b:08:bc:f9:02:69:c2:64:37:b5:32:74:da:ab:34:
ec:8b:8b:36:53:db:1d:20:f7:44:b6:d7:2c:d0:c0:
5a:f6:5a:0b:0f:22:9a:f4:6b:38:d0:51:b3:db:ef:
29:24:97:46:01:8e:00:d8:30:13:6b:1e:f4:fb:88:
1a:2b:ef:39:c8:de:97:f8:d0:67:2e:44:3c:f8:77:
78:c3:d8:5d:1e:19:74:42:6b:b7:1e:9f:4f:b5:81:
fc:40:8a:41:6c:b2:73:07:13:4b:b5:7a:ec:fa:f0:
9f:8c:ce:5e:70:17:5f:55:d6:e5:12:71:d5:a6:b2:
d1:1b:e6:2c:fc:37:b4:f6:29:d1:f6:73:cb:da:a8:
43:fa:b0:be:c3:b0:40:6a:66:5e:35:e6:6e:17:5f:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:55:95:9A:A4:1F:D4:B4:C7:50:D7:8A:B9:3C:70:6E:C8:05:2D
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/VQZVlZqkH9S0x1DXirk8cG7IBS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.104.0/23
45.140.206.0/23
45.145.128.0/22
45.148.232.0/22
45.155.166.0/23
83.142.52.0/22
193.187.92.0/22
193.202.8.0/21
193.202.80.0/21
193.203.8.0/22
212.119.44.0/22
Signature Algorithm: sha256WithRSAEncryption
06:bb:3a:5c:09:a7:5b:8b:4d:c9:a8:aa:b0:4d:cd:94:78:c8:
a5:54:05:4e:33:29:f4:f5:99:49:2f:5c:7e:54:67:da:e0:b6:
4f:98:d4:b5:81:bc:30:0b:64:15:dd:dc:9a:91:a3:6b:ae:2f:
b9:df:51:3b:be:80:c3:79:c2:3f:86:ac:47:e2:b2:7d:92:82:
46:c9:86:74:b2:2d:64:61:b5:d3:8e:3a:45:05:4b:73:98:69:
ba:7c:4b:8d:64:45:1d:30:5d:1e:3d:e4:78:14:09:3f:c8:a3:
e4:7e:de:5f:1a:61:e9:3b:36:76:c7:bd:64:84:13:7c:60:35:
c5:fb:d9:0d:c3:fc:af:ee:44:ad:68:73:8a:32:85:5e:64:5b:
69:38:db:14:9b:8a:fe:cd:1d:83:59:e9:2f:35:b7:c8:3e:63:
42:5a:f3:f1:f5:9c:ed:62:16:85:94:b6:3b:f5:a9:25:61:d6:
24:e1:32:d5:5a:13:95:51:d3:ff:96:e0:bd:c7:a8:7e:f8:5d:
da:65:fe:26:12:63:bf:19:33:d8:5a:6c:93:30:20:08:e0:a4:
b9:86:d9:81:7f:8f:4c:be:af:64:9f:be:4f:65:92:03:87:5b:
a9:09:6f:ac:0d:9d:a2:24:a6:fe:4c:da:5c:84:4e:f9:77:65:
90:1b:e0:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:28 2025 by rpki-client