Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa
File: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (raw, json)
Hash identifier: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=
Subject key identifier: EA:AB:3D:B3:A6:40:34:DD:15:AF:B3:2D:CE:5D:01:6E:BB:D4:65:7D
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 0194258EDF995F4A6717FE65FB91122A9083
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa
Signing time: Thu 02 Jan 2025 05:48:27 +0000
ROA not before: Thu 02 Jan 2025 05:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21368
IP address blocks: 45.86.137.0/24 maxlen: 24
45.86.138.0/23 maxlen: 23
185.109.252.0/23 maxlen: 23
185.109.252.0/24 maxlen: 24
185.109.253.0/24 maxlen: 24
185.109.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:df:99:5f:4a:67:17:fe:65:fb:91:12:2a:90:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Jan 2 05:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaab3db3a64034dd15afb32dce5d016ebbd4657d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:68:98:84:d2:f0:c5:9f:a0:8e:9e:45:15:
ed:aa:f2:16:09:b9:60:4b:31:af:f6:d0:f3:5f:84:
1e:8a:3a:12:23:b0:47:ca:6c:fa:eb:f1:30:80:25:
87:54:45:00:d3:7b:84:16:1a:f1:4f:41:f0:96:56:
60:0a:42:4c:7f:ac:f1:e6:6e:96:81:ee:60:c5:4c:
25:a0:30:8b:7d:46:fc:62:e2:b4:77:c3:1d:a5:f9:
16:cd:cc:76:95:33:ea:91:26:4e:45:31:60:d8:b7:
bc:1d:e6:52:02:b2:22:13:ce:2e:49:5e:19:32:b2:
2b:55:93:dd:d2:f8:4c:03:c3:7f:28:d9:a7:09:0d:
74:5e:73:5e:a0:e5:fc:e0:56:46:a3:ea:d5:ef:06:
80:68:62:4f:dd:3f:f4:0c:3e:a8:c4:93:54:92:90:
a8:15:a7:fe:42:1e:85:ad:c7:c6:0d:cc:f0:06:61:
d0:1a:3f:7b:f8:fb:7a:0c:33:94:61:63:e4:71:b2:
78:19:ac:21:d4:a4:02:1a:a4:de:d7:5b:ae:c1:b7:
b5:97:89:5f:dd:ef:ab:5c:aa:06:c8:7b:28:d6:c0:
24:b1:cd:92:3f:c2:e5:71:49:36:fc:c2:ec:ca:41:
54:db:09:ea:49:cb:7c:94:81:54:5f:fa:9c:1a:ed:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:3D:B3:A6:40:34:DD:15:AF:B3:2D:CE:5D:01:6E:BB:D4:65:7D
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.137.0-45.86.139.255
185.109.252.0/23
185.109.255.0/24
Signature Algorithm: sha256WithRSAEncryption
90:d4:19:87:9f:37:74:0e:ff:0d:ef:3a:62:9c:2e:ff:1c:46:
61:21:f2:77:76:83:00:64:79:5a:bf:5c:b7:a5:4d:18:d3:74:
4e:dd:44:86:8b:2a:2b:e4:51:aa:74:11:70:05:4b:8f:91:91:
d8:4a:0e:e4:43:e8:5b:7d:ca:c4:8e:28:fb:26:77:66:f0:9d:
92:dc:2f:f5:c8:f2:18:fe:85:27:5e:b5:20:76:a1:d2:75:73:
6c:3b:c0:c0:2e:fa:34:91:f6:f1:3c:53:f8:c9:d8:f5:bd:aa:
14:a8:ad:37:cd:dd:fe:e7:72:c7:6e:c1:f0:48:d9:58:f6:e7:
d3:d2:0b:32:56:b6:b9:d6:bf:fb:07:98:2f:44:d6:81:d8:6e:
e0:e1:c9:46:1c:5d:51:38:e2:b3:a7:a7:c1:9b:3c:d4:bc:a9:
a8:66:c9:d0:09:ba:99:f6:99:55:ae:f3:47:13:99:1f:73:77:
dc:55:0b:ec:d6:26:ed:d8:54:5c:75:12:8d:93:6a:e2:bc:72:
ac:6c:e6:48:8d:b3:c5:4e:b3:7a:67:e0:33:c9:d5:15:06:e0:
2f:aa:c3:7d:b5:a2:3d:1d:0e:7d:80:6f:08:d5:bf:58:bd:b4:
7a:98:14:ac:aa:33:d0:be:2d:5a:7f:81:80:ec:52:27:33:86:
57:16:d9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:59 2025 by rpki-client