Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/kMluZ2fiSWEg_ieHuNUoNmOFeY4.roa
File: kMluZ2fiSWEg_ieHuNUoNmOFeY4.roa (raw, json)
Hash identifier: D7FwlGBoZ+Yp6gDK7SX57l1CIAk6hwA1VmYUYhduw9c=
Subject key identifier: 90:C9:6E:67:67:E2:49:61:20:FE:27:87:B8:D5:28:36:63:85:79:8E
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A143647
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/kMluZ2fiSWEg_ieHuNUoNmOFeY4.roa
Signing time: Sat 12 Mar 2022 22:13:28 +0000
ROA not before: Sat 12 Mar 2022 22:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.39.10.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
45.12.80.0/22 maxlen: 24
45.137.97.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
85.209.223.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169096775 (0xa143647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 12 22:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90c96e6767e2496120fe2787b8d528366385798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ac:ca:4b:6c:9c:98:28:9e:80:cf:b1:ff:21:
ea:db:36:53:9c:3b:58:7b:da:cc:7e:37:b2:4b:d2:
79:42:7e:0a:72:53:23:1d:85:01:67:2a:18:45:c3:
b9:ec:4e:85:b1:75:6c:47:91:a3:45:ea:2a:12:f6:
db:80:20:91:03:56:b6:80:66:9d:45:50:af:64:04:
f8:11:64:6f:56:46:5f:1c:f0:4a:c0:e9:ff:50:b2:
0b:02:d8:2b:46:e1:56:61:db:be:ee:ff:85:7b:84:
49:e9:5a:d7:01:c2:b8:82:60:db:81:84:7d:07:ce:
37:e1:56:e5:f2:63:9e:cb:0c:3d:02:0a:12:3b:28:
24:b6:9e:ee:7e:8d:bf:c5:43:c6:f2:7e:fe:92:4b:
13:ea:81:95:f6:92:44:f6:37:33:fa:da:83:76:24:
10:9d:88:3e:0a:d0:3c:5e:69:b1:25:73:13:c5:52:
67:9a:91:31:d4:8e:9f:a9:64:06:29:90:f5:ef:25:
63:70:7a:6c:94:91:9c:c7:40:f8:d8:c1:a0:48:f6:
fb:3f:a8:71:7b:71:88:bb:d3:f7:ad:b7:e3:cf:bd:
fc:4b:f1:d4:69:eb:19:6e:fe:7f:0b:d4:b0:7b:6f:
c7:23:ea:fd:f8:e8:1f:16:b4:2c:e0:02:9d:0c:33:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C9:6E:67:67:E2:49:61:20:FE:27:87:B8:D5:28:36:63:85:79:8E
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/kMluZ2fiSWEg_ieHuNUoNmOFeY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.97.0/24
85.209.220.0/24
85.209.223.0/24
193.38.53.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b3:32:b3:58:69:72:7d:08:66:c1:40:8b:02:ca:ca:2f:85:
e7:17:69:96:fa:1a:b9:a5:34:8a:7a:84:32:c4:2a:8a:b7:5b:
4e:6c:ee:99:cb:a6:8d:8d:0d:88:e8:51:db:55:a1:85:92:ac:
41:f6:dd:cb:af:03:ac:28:a5:da:fa:ae:11:61:06:4b:bb:f5:
64:a9:25:b3:5d:84:83:5c:dd:c6:43:03:53:30:c5:5f:9d:40:
4a:9d:0f:3b:68:57:e5:52:71:8f:d5:d6:50:24:2f:c4:59:d9:
d6:fc:bc:02:e8:9c:b9:3e:9b:bb:cb:b6:bf:6d:db:f7:38:e3:
6b:21:b5:b2:a4:08:e5:8d:52:ae:db:08:32:8d:1f:e2:74:b2:
42:7d:95:69:84:c3:17:da:23:d0:25:91:95:7b:11:5c:f6:1c:
e4:7e:23:30:0d:3b:9e:a6:98:4c:86:62:c1:ff:16:fc:4f:05:
5c:88:67:17:f5:79:07:d2:8d:8f:a2:b0:bd:14:99:1b:af:31:
91:31:e2:68:8e:f4:6d:45:16:0e:4b:35:53:5e:ed:2c:02:06:
8a:fd:2a:be:72:40:a8:c0:77:2a:e3:e2:b1:d2:84:14:26:7b:
98:fd:7e:3e:1d:3a:43:7c:5e:93:f5:f6:04:55:17:24:d2:f6:
15:84:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:36 2025 by rpki-client