Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fMNZVNBC0YwXPHuQInAOvfIAylA.roa
File: fMNZVNBC0YwXPHuQInAOvfIAylA.roa (raw, json)
Hash identifier: mYt2qW1AaAnrZyOMKoBMHxet0vz405Q9RXF9qfPSew8=
Subject key identifier: 7C:C3:59:54:D0:42:D1:8C:17:3C:7B:90:22:70:0E:BD:F2:00:CA:50
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01942748453BBCC5F915A3D1AF2A465ABF8E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fMNZVNBC0YwXPHuQInAOvfIAylA.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203936
IP address blocks: 45.67.244.0/22 maxlen: 22
77.247.120.0/22 maxlen: 22
89.42.112.0/23 maxlen: 23
185.226.192.0/23 maxlen: 23
185.227.103.0/24 maxlen: 24
217.26.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:45:3b:bc:c5:f9:15:a3:d1:af:2a:46:5a:bf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cc35954d042d18c173c7b9022700ebdf200ca50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:4c:b5:13:24:7b:7e:d6:ba:df:80:6c:65:
e6:59:03:cf:42:c7:b2:96:6a:1f:ab:97:4e:d0:8f:
5e:e5:02:84:25:99:78:76:f9:84:24:3e:14:f3:53:
86:c9:94:7f:c3:23:42:ff:bc:e7:f3:a1:1c:12:98:
5c:f4:43:f5:ce:5d:fc:87:e5:2b:94:5e:a9:49:fd:
eb:96:af:56:e9:6a:8c:a3:78:8b:f8:3b:49:5e:bf:
e4:c9:f0:a6:aa:3b:38:8f:07:87:da:3c:a5:08:8b:
ef:60:6f:77:c9:5c:c6:9f:cc:a9:01:c7:46:5a:f0:
01:a2:00:52:7a:70:4d:01:a2:ee:34:04:4e:c5:19:
e8:c5:af:1d:b6:59:52:53:7f:39:89:74:c2:98:1e:
15:cd:f8:f8:91:4f:be:3c:14:52:74:c9:5c:c1:70:
8f:d2:66:52:7c:bf:98:66:2b:84:98:3b:b5:e0:22:
1b:af:b6:01:2e:30:52:fa:87:59:4b:8b:d1:76:ed:
1e:fc:91:08:1c:42:c2:25:c2:be:b6:75:a8:f8:e7:
d7:4a:67:3c:a0:45:4f:cf:7c:c7:3a:5c:cb:33:70:
35:71:14:1d:a4:f7:c0:cf:b4:35:7f:08:4c:de:1c:
a0:eb:0e:f7:5b:41:27:2e:fd:69:29:ea:cd:e4:96:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:59:54:D0:42:D1:8C:17:3C:7B:90:22:70:0E:BD:F2:00:CA:50
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fMNZVNBC0YwXPHuQInAOvfIAylA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.244.0/22
77.247.120.0/22
89.42.112.0/23
185.226.192.0/23
185.227.103.0/24
217.26.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:5d:5d:81:81:bf:f3:2c:fb:94:dc:62:3d:48:d4:0f:7f:93:
15:c0:52:34:8f:b4:00:20:c1:a5:15:8d:99:56:33:57:9b:f8:
1c:e2:20:44:da:44:0f:20:3c:d1:42:fa:3e:8b:94:c7:2f:11:
e4:f9:77:87:c1:5e:f8:44:62:cf:59:62:87:78:49:e0:d5:ac:
b1:b5:8c:6f:a3:7e:eb:14:f5:b0:84:7f:b9:ad:9b:04:f9:fb:
68:f8:f4:5e:86:c8:72:06:ef:73:cc:fd:b2:bf:00:02:cb:d9:
c1:3f:24:a1:0c:d5:3a:02:b0:8c:7e:77:18:0c:9a:f8:a6:8f:
fb:42:41:d1:c1:c5:aa:18:fe:fd:e7:0c:ae:5d:13:cc:9d:ce:
43:0e:c6:3b:f8:c8:ec:5f:58:fb:c0:21:0a:f7:21:a4:92:34:
17:bb:fc:21:56:ed:da:89:44:2e:29:38:45:77:c0:50:00:3a:
2e:00:8b:61:31:20:9a:3a:f9:30:40:4e:e2:69:29:09:36:c5:
90:bd:0d:fd:2c:2c:b1:4d:cc:b4:62:b5:74:1a:23:a6:82:21:
d2:f0:1d:37:66:ee:5d:39:45:dd:4a:ab:e9:c2:b6:cf:50:65:
ab:85:c0:57:e8:ff:fb:44:ee:dc:21:d0:b3:d4:f6:00:78:ce:
f1:37:f6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:11 2025 by rpki-client