Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NH3Y21VYRqKu3dtiHEC0vYB0uqI.roa
File: NH3Y21VYRqKu3dtiHEC0vYB0uqI.roa (raw, json)
Hash identifier: /MjlHi46rSw2b7MPDQdiH+HCIgM/OwRY9dGzXHDZ/Sg=
Subject key identifier: 34:7D:D8:DB:55:58:46:A2:AE:DD:DB:62:1C:40:B4:BD:80:74:BA:A2
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5DB0461A5610B41A8D6E810438997
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NH3Y21VYRqKu3dtiHEC0vYB0uqI.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 45.137.52.0/24 maxlen: 24
45.137.53.0/24 maxlen: 24
45.137.55.0/24 maxlen: 24
45.137.191.0/24 maxlen: 24
45.139.28.0/24 maxlen: 24
45.139.31.0/24 maxlen: 24
45.140.171.0/24 maxlen: 24
45.140.173.0/24 maxlen: 24
45.141.186.0/24 maxlen: 24
45.141.187.0/24 maxlen: 24
45.145.162.0/24 maxlen: 24
45.147.1.0/24 maxlen: 24
45.149.83.0/24 maxlen: 24
45.152.225.0/24 maxlen: 24
45.154.162.0/24 maxlen: 24
85.202.166.0/24 maxlen: 24
85.202.167.0/24 maxlen: 24
91.212.82.0/24 maxlen: 24
91.220.84.0/24 maxlen: 24
91.220.90.0/24 maxlen: 24
91.220.126.0/24 maxlen: 24
91.221.38.0/24 maxlen: 24
92.249.13.0/24 maxlen: 24
92.249.14.0/24 maxlen: 24
193.150.98.0/24 maxlen: 24
193.150.170.0/24 maxlen: 24
193.150.171.0/24 maxlen: 24
193.163.199.0/24 maxlen: 24
194.33.8.0/24 maxlen: 24
194.33.9.0/24 maxlen: 24
194.55.103.0/24 maxlen: 24
194.55.104.0/24 maxlen: 24
194.61.76.0/24 maxlen: 24
194.147.84.0/24 maxlen: 24
194.147.85.0/24 maxlen: 24
195.245.110.0/24 maxlen: 24
213.139.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:db:04:61:a5:61:0b:41:a8:d6:e8:10:43:89:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=347dd8db555846a2aedddb621c40b4bd8074baa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:cb:ad:12:a6:b8:f4:bd:c0:8a:a1:67:fd:
ca:db:dc:71:19:09:63:fb:87:90:d4:b8:4d:02:75:
1d:d7:79:38:21:3e:25:71:a1:6f:dc:78:59:fa:c1:
f0:8e:40:8e:9f:78:b7:7e:56:9b:8a:a5:77:3f:de:
73:bc:c5:78:d9:8d:fb:c8:b5:4f:54:92:16:ab:bb:
46:15:fe:45:89:88:2d:60:9f:37:58:18:e5:bf:95:
2c:08:4a:81:9d:6a:67:73:c6:3b:5b:2b:98:a4:fd:
ff:5f:c2:10:66:c4:82:a7:ad:70:c2:08:ae:42:4c:
cc:20:4a:53:5b:4f:52:75:64:b8:00:40:22:a6:1f:
70:c6:35:f5:0b:c2:ac:55:d5:5b:77:41:1d:94:67:
50:22:10:d5:bd:1c:a4:13:b5:f3:97:5b:18:ca:4e:
49:c1:e9:ab:46:19:c7:1f:8e:a4:85:55:04:71:63:
85:0b:41:45:83:ef:c9:41:de:8f:49:7f:27:34:51:
d6:75:2d:69:bb:ea:8a:3f:f3:e2:c0:b3:65:1d:ed:
41:69:c8:78:21:cb:9e:54:10:f8:db:ce:21:57:0c:
85:e4:94:24:a9:a0:1a:06:78:f5:44:a7:ed:7b:8b:
e5:b5:d8:d5:20:b8:68:2f:8f:bc:83:cb:45:21:62:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7D:D8:DB:55:58:46:A2:AE:DD:DB:62:1C:40:B4:BD:80:74:BA:A2
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NH3Y21VYRqKu3dtiHEC0vYB0uqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.52.0/23
45.137.55.0/24
45.137.191.0/24
45.139.28.0/24
45.139.31.0/24
45.140.171.0/24
45.140.173.0/24
45.141.186.0/23
45.145.162.0/24
45.147.1.0/24
45.149.83.0/24
45.152.225.0/24
45.154.162.0/24
85.202.166.0/23
91.212.82.0/24
91.220.84.0/24
91.220.90.0/24
91.220.126.0/24
91.221.38.0/24
92.249.13.0-92.249.14.255
193.150.98.0/24
193.150.170.0/23
193.163.199.0/24
194.33.8.0/23
194.55.103.0-194.55.104.255
194.61.76.0/24
194.147.84.0/23
195.245.110.0/24
213.139.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f1:3d:5d:d6:74:50:a7:12:3d:cd:ae:18:39:03:82:df:bd:
ee:96:d5:91:d8:83:83:cf:d1:f7:39:6e:67:50:bb:ce:5b:92:
3f:f7:11:7c:ac:e6:fe:ed:b7:b3:31:7a:f0:48:89:21:4a:82:
f2:cf:b0:ab:25:e7:13:17:18:a0:9d:71:f5:83:b0:d6:ea:d3:
d1:20:f2:d3:cf:c2:22:77:9c:21:5a:1b:75:d4:59:35:4a:83:
c1:7e:5b:b6:89:df:bd:c8:cf:ac:7d:06:50:d7:f0:41:87:ff:
ad:12:44:8b:46:c1:e1:6f:0a:1d:3b:cc:61:1b:0a:b0:d4:05:
37:ae:22:bf:13:5c:20:4c:10:2b:55:1e:85:cb:20:2e:30:e2:
bd:e7:20:82:eb:c2:5b:59:cf:25:be:b9:ed:bd:f3:bd:e9:1c:
c8:8f:72:e7:08:85:4f:24:97:5e:c4:e8:b3:a2:3b:3d:44:1c:
de:d5:04:86:c8:69:d7:a8:eb:b4:57:7c:43:cf:b0:0c:5e:d1:
3b:39:99:a5:10:1b:5a:1c:58:37:3a:90:ff:ca:9c:a5:8c:b4:
e8:1f:35:39:ba:72:90:ef:20:87:a5:01:32:c7:42:82:22:32:
93:6b:51:18:36:89:6a:c6:4a:25:93:cc:2b:10:8e:df:0d:36:
2e:c6:4d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:17 2025 by rpki-client