Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nvBdsqH4Sk0MQ3F3fi5oSwwH4X8.roa
File: nvBdsqH4Sk0MQ3F3fi5oSwwH4X8.roa (raw, json)
Hash identifier: xdOqY8AUTOLS+8g756Uw8vxh9/ZONMqZNJSkvOGU89s=
Subject key identifier: 9E:F0:5D:B2:A1:F8:4A:4D:0C:43:71:77:7E:2E:68:4B:0C:07:E1:7F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194698E63BD5D639E2869EADA7421AE6A6A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nvBdsqH4Sk0MQ3F3fi5oSwwH4X8.roa
Signing time: Wed 15 Jan 2025 10:42:06 +0000
ROA not before: Wed 15 Jan 2025 10:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12541
IP address blocks: 45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/23 maxlen: 23
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
89.45.208.0/24 maxlen: 24
91.132.31.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.34.0/24 maxlen: 24
178.19.35.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.45.0/24 maxlen: 24
178.19.46.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
185.71.28.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
193.178.212.0/24 maxlen: 24
193.178.218.0/24 maxlen: 24
193.186.1.0/24 maxlen: 24
193.186.11.0/24 maxlen: 24
194.15.140.0/24 maxlen: 24
194.15.146.0/24 maxlen: 24
194.15.182.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:8e:63:bd:5d:63:9e:28:69:ea:da:74:21:ae:6a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 15 10:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ef05db2a1f84a4d0c4371777e2e684b0c07e17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:65:c5:d9:e9:5c:07:fd:71:f3:e7:2f:c6:
39:bd:a7:40:b3:0d:aa:22:10:20:24:08:dd:0a:ad:
78:0d:75:ca:0b:39:62:39:26:10:ba:6f:03:a3:1d:
ac:c5:da:c2:46:f0:3d:9f:94:64:e8:59:7f:10:3d:
fd:c2:21:64:88:24:65:62:69:ca:2c:3b:9d:4e:51:
0d:29:f1:4b:00:7b:8b:5d:20:88:dc:87:73:fd:00:
fb:ec:37:cc:4a:e2:1a:7b:18:22:34:42:d8:e8:26:
54:14:8d:c0:91:bd:af:cc:da:17:38:8a:5b:c3:c7:
4d:49:42:b1:8f:41:be:58:b8:69:6a:87:3a:5a:b3:
f0:ce:41:ea:cb:c1:a5:a8:b0:c5:1d:23:4b:d1:6f:
f4:0a:72:06:0d:1d:af:38:6b:82:22:20:68:0d:3d:
72:27:7b:bf:7e:07:2c:75:a9:bd:53:6f:d5:44:4b:
53:44:8b:0f:bf:80:d0:98:dd:ec:68:7e:3c:db:37:
ca:b7:8d:c4:72:f7:d9:be:44:eb:5a:e7:3e:2f:ed:
fc:d5:b4:35:cd:ab:ba:b0:ea:82:7b:97:e8:62:0c:
ea:13:3d:7c:bb:08:69:f3:4d:99:de:69:73:8d:27:
36:c4:43:82:fb:9e:42:23:b1:d2:7f:27:99:5c:2c:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:5D:B2:A1:F8:4A:4D:0C:43:71:77:7E:2E:68:4B:0C:07:E1:7F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nvBdsqH4Sk0MQ3F3fi5oSwwH4X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.50.0/23
80.66.112.0/22
80.66.117.0-80.66.127.255
89.42.70.0/24
89.44.150.0/23
89.45.208.0/24
91.132.31.0/24
94.198.47.0/24
178.19.34.0/23
178.19.44.0/22
185.71.28.0/24
185.203.21.0-185.203.23.255
185.242.175.0/24
193.178.212.0/24
193.178.218.0/24
193.186.1.0/24
193.186.11.0/24
194.15.140.0/24
194.15.146.0/24
194.15.182.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e9:d7:35:ff:22:3e:f4:49:ae:eb:de:14:6d:3a:57:33:ce:
c4:68:59:7a:04:b0:fd:73:1e:bd:0f:4e:50:4b:79:19:41:a3:
22:26:f1:87:2f:39:49:e4:f1:6f:c6:89:44:4b:e7:62:8a:69:
03:a1:61:3a:84:fe:27:d5:a2:8b:91:ac:75:61:40:94:c8:9e:
84:be:94:ba:85:df:89:64:87:cf:ed:17:78:a4:3b:e8:d5:7c:
f3:c0:3b:ee:8e:fe:9b:13:31:a3:74:5d:91:5c:43:3f:55:27:
90:25:a4:f6:6a:fc:35:c4:af:cd:9f:29:0a:b6:9e:5d:ce:60:
17:05:9b:36:bd:7a:89:6e:05:6e:5e:f3:a8:11:c8:67:02:53:
24:8b:7c:1f:17:46:47:a0:f5:d0:ad:53:da:36:5d:f7:10:0b:
4f:7c:da:03:e9:6a:6e:6a:73:65:84:de:1d:82:17:82:43:0f:
18:34:09:84:e4:64:8c:c8:ae:c7:d0:c8:d3:06:9d:af:9d:05:
34:50:41:ba:30:e4:74:4e:d8:13:73:9e:83:19:06:8f:3a:13:
3d:7c:ce:08:c7:17:3e:38:a6:a3:09:6b:f9:d5:b1:c4:34:d6:
df:5d:0b:6c:df:be:ed:1d:94:b9:a7:ea:38:cc:9b:f1:50:f8:
b3:85:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:03 2025 by rpki-client