Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/C6ceWis6UjNyvg7YUI5fYDaSk10.roa
File: C6ceWis6UjNyvg7YUI5fYDaSk10.roa (raw, json)
Hash identifier: EX8WIRXCgT+98ec+Oo+nZJ9cQLemZ2uYero8yZXeqn8=
Subject key identifier: 0B:A7:1E:5A:2B:3A:52:33:72:BE:0E:D8:50:8E:5F:60:36:92:93:5D
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019427B5E148692990481BFA1B92F9D1F86F
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/C6ceWis6UjNyvg7YUI5fYDaSk10.roa
Signing time: Thu 02 Jan 2025 15:50:18 +0000
ROA not before: Thu 02 Jan 2025 15:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 45.88.108.0/22 maxlen: 22
45.88.108.0/24 maxlen: 24
45.88.109.0/24 maxlen: 24
45.88.110.0/24 maxlen: 24
45.88.111.0/24 maxlen: 24
45.135.200.0/22 maxlen: 22
91.218.64.0/22 maxlen: 24
2a04:e8c0::/29 maxlen: 29
2a0c:75c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e1:48:69:29:90:48:1b:fa:1b:92:f9:d1:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ba71e5a2b3a523372be0ed8508e5f603692935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:c6:39:47:d4:f3:32:77:a1:b3:dd:e7:f2:
7c:26:17:4b:53:38:6b:55:77:f2:38:ed:65:a4:a5:
6c:b8:4b:7f:73:77:d5:8b:03:32:25:22:be:40:2b:
37:04:9a:72:c8:24:f6:cf:72:ab:00:56:2c:04:b9:
f3:ce:60:3f:33:6e:fd:5a:7d:00:78:75:30:42:23:
18:d2:24:f7:49:92:62:ef:9d:ed:80:80:c2:45:53:
7e:de:fd:63:c6:aa:5a:57:5b:b1:8f:57:de:fc:3f:
27:82:93:97:2e:6a:39:c0:c9:f6:9d:d0:5b:a4:48:
17:9a:db:e5:ff:5e:b2:ac:70:b7:57:d0:8e:96:5f:
99:af:d3:37:96:f0:a7:bc:9f:46:98:87:c3:e5:9d:
8e:e7:d4:14:ba:d6:5c:d0:d9:2a:a9:8b:27:90:50:
c0:6d:c4:52:1e:be:b6:e2:ad:ee:1b:12:7b:f6:d9:
70:75:fb:56:eb:aa:27:1f:08:d6:0f:2f:05:aa:32:
ea:68:c6:de:06:84:14:de:34:cb:16:40:b8:54:73:
7f:d0:66:55:a2:15:34:f8:29:0f:4f:01:e7:42:dd:
b3:b4:cb:e6:0c:1d:4f:6f:93:ef:be:33:1e:68:6b:
e3:ae:14:e5:db:28:52:00:91:1d:ab:9d:fb:c5:46:
e5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A7:1E:5A:2B:3A:52:33:72:BE:0E:D8:50:8E:5F:60:36:92:93:5D
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/C6ceWis6UjNyvg7YUI5fYDaSk10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.108.0/22
45.135.200.0/22
91.218.64.0/22
IPv6:
2a04:e8c0::/29
2a0c:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:b9:b8:0c:b4:93:90:55:7f:bf:5d:bc:88:9b:69:d3:61:f9:
d4:55:d2:dd:b3:c3:79:6c:a9:a3:f0:3b:84:ed:79:c3:5d:61:
2a:ba:16:bf:a8:8c:ef:1e:bb:2c:f4:18:fa:ca:43:b5:03:66:
10:d2:20:07:bc:de:69:3e:f0:22:dd:be:eb:e9:58:d9:67:84:
f2:d6:df:08:1d:e6:03:b4:27:4a:6a:60:2b:71:14:fe:2b:dc:
f6:ce:cb:e6:f5:e3:eb:99:8d:c4:60:74:ff:5d:ed:95:25:ca:
01:a5:a0:d1:42:74:b3:39:5e:fe:b3:2a:f4:fc:63:f5:29:00:
f7:92:e2:bf:d8:a4:9c:1d:46:da:d4:56:02:08:d7:d2:3a:64:
5e:85:a4:e0:70:41:d8:f1:a6:53:41:a9:48:51:90:16:cc:3c:
8a:30:6f:3e:f8:41:8e:07:9c:7f:95:da:1a:55:5e:56:c5:84:
73:0c:1f:39:ea:38:de:f2:27:a2:ae:6a:2f:9c:33:e3:c9:93:
48:98:8f:41:ea:4e:9c:de:52:25:7e:c8:6d:2f:54:56:9a:bb:
0e:10:b8:63:dc:b7:0c:c2:ad:33:36:08:e3:f8:ce:96:dd:64:
52:e7:d6:db:b8:e4:f5:1b:4a:07:d2:a9:68:5a:48:f4:8c:21:
d1:7e:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:42 2025 by rpki-client