Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/dwFe3nH81Si_VNrtz-zJYevGIHU.roa
File: dwFe3nH81Si_VNrtz-zJYevGIHU.roa (raw, json)
Hash identifier: 0rt5oMdFe3Xc4XSYtVzvaXDk0kM2jNWacI48dEFva2k=
Subject key identifier: 77:01:5E:DE:71:FC:D5:28:BF:54:DA:ED:CF:EC:C9:61:EB:C6:20:75
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 019425FDA11D3D1D9C1457D6427C08AE21FF
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/dwFe3nH81Si_VNrtz-zJYevGIHU.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 45.11.92.0/24 maxlen: 32
45.11.93.0/24 maxlen: 32
45.11.94.0/24 maxlen: 32
45.145.4.0/24 maxlen: 32
45.145.6.0/24 maxlen: 32
45.145.7.0/24 maxlen: 32
45.152.84.0/24 maxlen: 32
45.152.86.0/24 maxlen: 32
45.152.112.0/24 maxlen: 32
45.152.113.0/24 maxlen: 32
45.152.114.0/24 maxlen: 32
45.152.115.0/24 maxlen: 32
45.154.1.0/24 maxlen: 32
45.154.2.0/24 maxlen: 32
45.154.3.0/24 maxlen: 32
45.159.208.0/24 maxlen: 32
45.159.209.0/24 maxlen: 32
45.159.210.0/24 maxlen: 32
45.159.211.0/24 maxlen: 32
193.23.55.0/24 maxlen: 32
193.43.72.0/24 maxlen: 32
193.43.79.0/24 maxlen: 32
193.43.91.0/24 maxlen: 32
193.43.94.0/24 maxlen: 32
193.187.172.0/24 maxlen: 32
193.187.173.0/24 maxlen: 32
193.187.174.0/24 maxlen: 32
193.187.175.0/24 maxlen: 32
193.242.145.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a1:1d:3d:1d:9c:14:57:d6:42:7c:08:ae:21:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77015ede71fcd528bf54daedcfecc961ebc62075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:c3:5b:25:14:c1:57:1b:a4:24:cb:97:38:
14:e3:e5:d6:c1:98:17:82:a3:6c:04:e3:97:91:5a:
24:bf:46:eb:ed:44:ca:de:92:06:be:21:e8:02:4d:
e5:d0:b7:57:e5:01:36:eb:8a:6b:a6:7b:ce:4d:b0:
01:3c:56:a2:88:03:5e:d8:58:4d:b2:c2:da:71:26:
73:0c:f4:ae:3b:46:73:a7:cb:05:87:d7:c7:b3:e9:
3c:22:82:19:3b:ac:fb:f5:91:b3:50:62:64:dc:c1:
72:95:ea:e9:b0:28:85:54:99:21:86:66:ac:9d:62:
a0:f5:35:72:57:7f:01:6a:ca:5a:28:f2:b5:7f:72:
d2:66:20:b8:46:ca:ba:27:a2:0c:0a:06:ef:11:71:
58:75:79:fd:41:0e:0b:f6:3a:e1:aa:7c:c1:81:c7:
90:5d:1a:4a:47:54:64:d0:fd:32:71:f1:ce:b2:a8:
5d:25:78:dc:12:0e:fa:ac:76:f4:e4:d2:3a:7d:b7:
ce:c5:73:8d:42:a6:aa:be:f1:2c:e5:f4:ed:62:97:
b8:f1:2c:b0:30:af:17:42:34:2e:e6:20:c7:63:ac:
23:e8:cc:09:3c:b9:ad:48:7d:d6:7f:fe:53:73:14:
c4:86:2d:af:31:9a:d4:76:0e:05:22:77:5f:92:6c:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:01:5E:DE:71:FC:D5:28:BF:54:DA:ED:CF:EC:C9:61:EB:C6:20:75
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/dwFe3nH81Si_VNrtz-zJYevGIHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.92.0-45.11.94.255
45.145.4.0/24
45.145.6.0/23
45.152.84.0/24
45.152.86.0/24
45.152.112.0/22
45.154.1.0-45.154.3.255
45.159.208.0/22
193.23.55.0/24
193.43.72.0/24
193.43.79.0/24
193.43.91.0/24
193.43.94.0/24
193.187.172.0/22
193.242.145.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d8:41:cc:4e:7d:02:c7:13:48:76:6d:1c:92:fd:ef:95:89:
31:6d:a4:e9:ac:c5:dc:93:e8:b3:e1:a8:ff:cf:9f:d0:1c:76:
00:57:79:50:75:5e:37:fb:64:f7:d3:6c:8f:6d:b2:7e:56:5d:
d4:48:c4:5a:b1:6e:23:8f:3e:6c:93:fd:23:06:59:c1:02:cd:
f7:b2:e5:f9:60:3a:21:42:1d:c6:f9:c8:d1:38:cd:c0:e7:ae:
3d:8a:46:fe:3b:c0:80:47:b4:b2:26:62:65:87:bc:a0:2c:21:
f7:68:e1:26:ab:5d:cf:9d:32:e5:d7:9d:f4:4d:ad:bd:de:79:
71:d3:50:27:2f:64:fb:72:ae:06:96:a9:16:06:12:c5:d9:8a:
36:c5:99:b2:e8:a1:ff:f1:bc:c7:f5:5d:e9:e3:0e:5f:10:cf:
ac:43:0f:8e:22:2e:2b:5b:ba:5e:eb:94:59:58:ab:64:36:14:
3b:bc:9b:06:d6:87:6f:ab:a6:e1:34:89:c9:18:db:f0:d7:61:
38:56:3c:f6:19:43:3f:b6:d9:0f:fe:92:4b:4b:f2:b6:f2:1a:
2d:fc:55:84:23:9e:68:c5:18:aa:88:5a:59:3b:fa:25:ec:a8:
f2:fd:72:ce:17:80:b3:34:95:2b:52:63:66:58:0a:ba:91:d5:
4f:9b:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:48:35 2025 by rpki-client