Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa
File: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (raw, json)
Hash identifier: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=
Subject key identifier: F3:46:66:0C:16:6A:E7:E3:D4:FA:93:A8:8B:87:0D:65:8F:A1:62:23
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 0194221F505BDC4F33FD9A13B67192B4E8EB
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa
Signing time: Wed 01 Jan 2025 13:47:44 +0000
ROA not before: Wed 01 Jan 2025 13:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210636
IP address blocks: 45.88.184.0/24 maxlen: 24
45.88.185.0/24 maxlen: 24
45.93.150.0/24 maxlen: 24
45.93.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:50:5b:dc:4f:33:fd:9a:13:b6:71:92:b4:e8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 13:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f346660c166ae7e3d4fa93a88b870d658fa16223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:0b:f3:c9:95:25:d4:b3:87:1f:53:bb:a9:
46:7c:24:f9:a5:95:cc:7e:65:30:bf:c0:1d:7a:da:
34:55:19:33:69:aa:db:29:3a:84:18:18:f4:fc:aa:
7b:08:bc:ce:4a:49:8d:75:9c:6b:78:18:ad:be:39:
e4:7a:6d:75:c6:c3:b8:7d:3d:e2:88:d0:b4:65:62:
55:71:2d:d1:11:a7:fc:4e:98:3e:ac:71:68:e8:5f:
98:a0:c3:03:17:70:7f:aa:26:24:6e:9c:32:0f:ae:
1d:67:ee:4c:a3:fe:3c:4c:97:17:7a:b1:a7:8e:0a:
25:9b:12:d8:49:02:27:5e:af:80:bc:e7:d3:74:86:
e2:fc:23:6d:14:ef:8b:c5:78:e1:0d:68:1d:e3:4f:
0f:f5:81:03:45:4b:2a:41:69:15:14:ab:cd:48:03:
a2:e6:b4:ad:c7:2c:60:53:a3:3d:04:bb:7e:f0:85:
ea:18:87:e7:10:b2:9c:6d:2e:85:ea:2a:0a:ed:42:
d4:c3:c4:d6:80:1e:4b:20:90:11:c3:11:0a:d6:07:
74:82:0b:52:f8:5b:cc:e0:79:2b:5e:b8:c4:0e:31:
5a:74:4f:0f:53:98:d1:1c:b3:38:bc:08:df:c3:ed:
c8:03:23:ca:59:f0:f3:cd:3d:b2:1c:6a:06:44:8d:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:46:66:0C:16:6A:E7:E3:D4:FA:93:A8:8B:87:0D:65:8F:A1:62:23
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.184.0/23
45.93.150.0/23
Signature Algorithm: sha256WithRSAEncryption
33:fc:89:7e:e7:d8:81:1d:81:bb:59:9d:e8:9f:f5:56:1c:35:
55:e6:73:11:79:cf:59:d2:fc:06:19:48:32:87:d6:c4:4d:55:
e4:50:3a:0f:3f:97:8d:ff:9e:07:20:3e:f4:36:35:26:fc:d9:
8f:a3:14:00:36:77:24:e5:7e:3d:bc:51:3d:9c:e2:21:bd:7b:
c0:d2:e5:b0:1c:b1:56:2e:05:7d:fa:7f:14:b3:d3:ac:1d:2a:
d2:fa:ac:e1:9f:fa:d4:05:25:ea:ae:26:9d:e6:66:31:f9:36:
50:f3:79:fe:a5:f7:1c:17:6e:8a:de:04:6f:c9:2a:47:de:d6:
94:d0:6a:eb:1f:47:b2:5e:a9:92:5d:57:a8:08:77:43:e8:c9:
93:89:80:e7:93:ab:f7:ff:4b:db:4d:a5:dd:d2:8d:18:f7:ed:
e5:61:e4:ba:7d:44:9f:22:5d:cf:3c:13:0b:fb:a7:42:4d:94:
da:d5:0b:38:6b:f9:6a:ce:10:71:8e:c8:1d:f8:b6:8b:92:bb:
23:e1:d9:a8:5e:12:c6:ab:90:9f:a1:60:40:ba:79:76:bd:81:
2b:8b:09:73:d9:2e:2b:04:42:ad:8f:5d:47:c1:d2:3c:48:24:
a4:96:b5:58:80:c0:f1:74:cc:c1:b5:4f:c1:04:7c:a2:af:ac:
f3:31:95:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:04 2025 by rpki-client