Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/RnuLLCKmxxQbViXUw6YPgsQ6v10.roa
File: RnuLLCKmxxQbViXUw6YPgsQ6v10.roa (raw, json)
Hash identifier: No/jeNNjJ8VsmRH9W4+aYmy1tyRk8N0eZbTsanaO96A=
Subject key identifier: 46:7B:8B:2C:22:A6:C7:14:1B:56:25:D4:C3:A6:0F:82:C4:3A:BF:5D
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 0193DA730057AA9FDF540E80E022CC4A8FBF
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/RnuLLCKmxxQbViXUw6YPgsQ6v10.roa
Signing time: Wed 18 Dec 2024 15:46:29 +0000
ROA not before: Wed 18 Dec 2024 15:46:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 45.136.104.0/24 maxlen: 24
45.136.105.0/24 maxlen: 24
45.136.107.0/24 maxlen: 24
185.26.144.0/24 maxlen: 24
185.26.145.0/24 maxlen: 24
185.26.146.0/24 maxlen: 24
185.26.147.0/24 maxlen: 24
185.126.176.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.153.228.0/24 maxlen: 24
185.153.229.0/24 maxlen: 24
185.153.230.0/24 maxlen: 24
185.153.231.0/24 maxlen: 24
185.162.144.0/24 maxlen: 24
185.162.147.0/24 maxlen: 24
185.171.24.0/24 maxlen: 24
185.171.25.0/24 maxlen: 24
185.171.26.0/24 maxlen: 24
185.171.27.0/24 maxlen: 24
185.247.136.0/24 maxlen: 24
185.247.138.0/24 maxlen: 24
185.247.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:73:00:57:aa:9f:df:54:0e:80:e0:22:cc:4a:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Dec 18 15:46:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=467b8b2c22a6c7141b5625d4c3a60f82c43abf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:dc:e0:9d:53:fa:51:c6:2a:9b:20:00:ec:
70:83:e2:cc:56:a6:09:51:92:56:cf:4a:92:d4:f3:
7d:97:15:45:4b:eb:96:de:4d:9d:f9:23:a3:a9:ce:
5e:b4:c0:a9:24:f9:43:85:d6:4d:dd:31:e6:d4:fd:
c8:2f:a5:15:74:5b:55:0d:e9:c8:de:11:b1:8a:78:
1b:69:39:c6:10:82:97:f8:b6:95:8a:dd:0c:14:56:
44:f1:65:8c:bb:61:f3:8e:0c:0b:64:3a:c2:0c:65:
22:5b:6f:37:55:58:f7:b8:43:a5:22:6a:4c:49:2a:
c6:50:a1:1b:f3:c6:5f:a6:2d:1c:cd:90:75:49:3a:
4e:da:ac:79:5e:c4:de:8e:d7:40:33:3f:c6:47:ad:
8b:b0:6e:ca:56:ea:bb:5a:3f:d7:f5:b9:70:71:c0:
6d:66:c8:4c:dc:83:85:91:92:97:61:9a:ca:dd:0e:
26:97:f2:d8:bf:c4:9e:db:8c:7a:20:1d:78:d3:62:
39:f6:55:21:20:07:b0:1e:fa:56:ff:4f:c8:2c:cc:
36:a8:26:16:4b:75:66:2b:82:76:6a:bb:ca:f7:e8:
6c:a7:f1:7c:51:b4:7c:25:81:8d:86:a3:67:c1:ee:
ae:5f:ea:74:7e:ce:48:ca:26:da:9c:31:32:8d:d8:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7B:8B:2C:22:A6:C7:14:1B:56:25:D4:C3:A6:0F:82:C4:3A:BF:5D
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/RnuLLCKmxxQbViXUw6YPgsQ6v10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.104.0/23
45.136.107.0/24
185.26.144.0/22
185.126.176.0/24
185.126.178.0/23
185.153.228.0/22
185.162.144.0/24
185.162.147.0/24
185.171.24.0/22
185.247.136.0/24
185.247.138.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:65:7d:6d:01:88:9f:ab:ee:49:d4:d7:af:5a:8f:fd:49:37:
8f:ff:de:9a:e4:e3:62:78:7c:f9:72:e5:35:91:30:00:a1:ae:
d7:c6:dd:ed:4d:e1:09:b2:3c:21:39:9b:14:57:25:f4:be:26:
7f:2f:18:40:1c:04:f7:79:55:b2:1a:70:df:de:cd:e9:11:dc:
bb:03:91:a2:c0:c7:31:bd:82:09:07:b1:4b:0a:2e:c2:e3:10:
6e:54:fa:28:12:b9:d3:a1:a5:5b:9a:64:83:23:c9:bf:a8:c5:
97:fd:75:5a:94:0c:af:2b:6f:d8:2b:b5:a7:dd:be:91:a9:dd:
5c:b7:1d:98:dd:59:15:a0:9a:94:11:e7:a3:e2:2f:50:ea:a3:
d5:92:30:10:df:bb:47:19:79:90:23:4f:61:df:e0:87:cf:d8:
fd:d2:9c:55:ef:82:55:dc:fe:21:64:b0:8a:4a:64:b0:30:b5:
7e:5a:a4:18:03:8d:2b:7f:80:f0:02:42:2c:d1:8d:cc:99:e4:
59:7b:6d:f3:41:e5:56:25:08:16:b9:60:56:41:92:64:5e:bb:
ab:4d:d2:66:31:09:43:ef:e1:26:25:cd:8e:90:1d:5f:59:35:
08:ba:e2:af:cb:d7:93:14:7c:e0:b8:2b:d6:69:47:f8:cb:79:
52:69:c1:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:30:18 2025 by rpki-client