Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/9kT63E1Hq-NW4s4Rb3qzFTAeg1k.roa
File: 9kT63E1Hq-NW4s4Rb3qzFTAeg1k.roa (raw, json)
Hash identifier: hmCEGTgpkmU4eQgFza4HWKwTEeuDB37LWsnmVF3dmUI=
Subject key identifier: F6:44:FA:DC:4D:47:AB:E3:56:E2:CE:11:6F:7A:B3:15:30:1E:83:59
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019473B1E79C11499C0CC0EB6BF622746AFF
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/9kT63E1Hq-NW4s4Rb3qzFTAeg1k.roa
Signing time: Fri 17 Jan 2025 09:57:06 +0000
ROA not before: Fri 17 Jan 2025 09:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 145.0.0.0/16 maxlen: 24
145.2.0.0/15 maxlen: 24
145.9.0.0/16 maxlen: 24
145.19.0.0/16 maxlen: 24
145.19.0.0/24 maxlen: 24
145.20.0.0/16 maxlen: 24
145.23.0.0/16 maxlen: 24
145.23.0.0/19 maxlen: 24
145.24.0.0/16 maxlen: 24
145.28.0.0/15 maxlen: 24
145.33.0.0/16 maxlen: 24
145.37.0.0/16 maxlen: 24
145.38.0.0/15 maxlen: 24
145.44.0.0/16 maxlen: 24
145.48.0.0/15 maxlen: 24
145.51.0.0/16 maxlen: 24
145.52.0.0/16 maxlen: 24
145.74.0.0/15 maxlen: 24
145.76.0.0/16 maxlen: 24
145.81.0.0/16 maxlen: 24
145.85.0.0/16 maxlen: 24
145.85.0.0/24 maxlen: 24
145.88.0.0/15 maxlen: 24
145.90.0.0/16 maxlen: 24
145.90.10.0/23 maxlen: 24
145.91.0.0/16 maxlen: 24
145.91.0.0/24 maxlen: 24
145.92.0.0/15 maxlen: 24
145.95.0.0/16 maxlen: 24
145.96.0.0/16 maxlen: 24
145.97.16.0/22 maxlen: 24
145.97.16.0/24 maxlen: 24
145.97.20.0/22 maxlen: 24
145.97.24.0/21 maxlen: 24
145.97.48.0/20 maxlen: 24
145.97.64.0/18 maxlen: 24
145.97.128.0/18 maxlen: 24
145.97.128.0/24 maxlen: 24
145.97.192.0/18 maxlen: 24
145.98.0.0/16 maxlen: 24
145.100.0.0/15 maxlen: 24
145.102.0.0/16 maxlen: 24
145.103.0.0/16 maxlen: 24
145.107.0.0/16 maxlen: 24
145.108.0.0/16 maxlen: 24
145.109.128.0/17 maxlen: 24
145.116.0.0/20 maxlen: 24
145.116.16.0/21 maxlen: 24
145.116.24.0/21 maxlen: 24
145.116.64.0/18 maxlen: 24
145.116.128.0/18 maxlen: 24
145.116.192.0/20 maxlen: 24
145.116.224.0/19 maxlen: 24
145.117.0.0/16 maxlen: 24
145.118.0.0/16 maxlen: 24
145.120.0.0/14 maxlen: 24
145.124.0.0/15 maxlen: 24
145.126.0.0/16 maxlen: 24
145.127.0.0/17 maxlen: 24
145.136.0.0/15 maxlen: 24
145.137.128.0/18 maxlen: 24
145.138.0.0/16 maxlen: 24
145.140.0.0/14 maxlen: 24
145.144.0.0/12 maxlen: 24
145.144.0.0/24 maxlen: 24
145.146.0.0/16 maxlen: 24
192.87.0.0/16 maxlen: 24
194.171.0.0/16 maxlen: 24
195.169.0.0/16 maxlen: 24
2001:610::/29 maxlen: 29
2001:610::/32 maxlen: 48
2001:610:130::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:b1:e7:9c:11:49:9c:0c:c0:eb:6b:f6:22:74:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 17 09:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f644fadc4d47abe356e2ce116f7ab315301e8359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:c9:e0:83:f8:4d:da:c4:43:89:ea:88:54:
54:82:ef:8d:49:44:c7:f2:bd:89:3a:cc:5c:bb:bd:
50:7f:6a:71:f4:54:15:c1:e8:f0:26:31:7d:f4:cd:
48:60:94:ee:1c:26:7b:65:fe:14:61:67:ff:e6:76:
45:8c:07:1f:07:9c:f6:3f:bd:e1:87:33:1b:f3:ea:
cd:91:55:7e:3b:a0:c8:e9:1d:78:e5:65:41:99:0d:
52:d2:ab:87:da:cc:fe:59:92:e7:14:9b:c1:7b:31:
3b:56:84:65:db:d9:7f:18:0d:66:02:df:89:25:17:
61:85:40:6d:59:5d:9f:3b:37:7f:7a:4b:7c:2f:fc:
a1:1d:d6:c1:0c:64:34:48:8f:1f:4f:de:48:ad:32:
50:41:0d:00:23:f6:14:ed:2d:1b:3a:f4:b6:4e:1e:
12:61:5f:1c:1d:90:e8:57:91:53:f8:b6:9e:56:c9:
af:32:22:b0:5d:a1:fd:95:78:2e:6c:19:df:47:6e:
74:e8:bc:5c:30:44:57:34:96:9b:c3:38:52:8f:22:
71:b5:1a:fc:f1:78:2a:24:9d:6a:a7:b8:71:c0:ab:
a2:f6:b8:c2:98:fd:dc:f3:da:ed:d6:c9:1a:7d:2d:
6c:7b:ce:37:ee:6a:a0:09:90:cc:90:3e:32:e6:c3:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:44:FA:DC:4D:47:AB:E3:56:E2:CE:11:6F:7A:B3:15:30:1E:83:59
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/9kT63E1Hq-NW4s4Rb3qzFTAeg1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.0.0.0/16
145.2.0.0/15
145.9.0.0/16
145.19.0.0-145.20.255.255
145.23.0.0-145.24.255.255
145.28.0.0/15
145.33.0.0/16
145.37.0.0-145.39.255.255
145.44.0.0/16
145.48.0.0/15
145.51.0.0-145.52.255.255
145.74.0.0-145.76.255.255
145.81.0.0/16
145.85.0.0/16
145.88.0.0-145.93.255.255
145.95.0.0-145.96.255.255
145.97.16.0/20
145.97.48.0-145.98.255.255
145.100.0.0/14
145.107.0.0-145.108.255.255
145.109.128.0/17
145.116.0.0/19
145.116.64.0-145.116.207.255
145.116.224.0-145.118.255.255
145.120.0.0-145.127.127.255
145.136.0.0-145.138.255.255
145.140.0.0-145.159.255.255
192.87.0.0/16
194.171.0.0/16
195.169.0.0/16
IPv6:
2001:610::/29
Signature Algorithm: sha256WithRSAEncryption
2f:f6:d2:d8:50:1a:c0:d9:a0:cd:76:b3:86:9c:fb:ea:20:79:
62:3e:a3:a6:98:34:e2:b7:86:a2:e1:43:d5:13:2f:84:69:b1:
8a:50:69:4b:7a:b6:1d:7a:9f:21:84:60:d5:cc:74:67:e4:a6:
2e:ff:af:81:74:1c:20:e5:5e:6e:8a:71:26:e0:65:56:1d:04:
b1:69:f4:6c:ce:e9:ac:a1:24:e1:64:5f:ee:88:65:37:85:b6:
94:16:b1:50:bc:5a:f5:bd:2c:70:70:43:04:5b:6c:57:72:8d:
cb:b0:8c:45:fa:0e:2a:42:4e:92:47:de:92:bf:ba:ce:98:74:
5b:31:7f:9b:a9:c8:f0:81:88:70:3f:7a:28:ad:bd:6c:74:cc:
cc:76:7e:04:54:ca:95:e2:7f:22:90:90:a3:ae:c4:d9:41:73:
eb:d4:b9:84:d4:d1:22:bb:69:e6:b9:d9:e7:56:ff:f0:1d:25:
fb:f2:fd:e5:0a:2d:26:33:62:9f:97:7a:db:b5:ac:92:f0:6f:
f1:05:58:5f:f4:78:83:9f:2a:c8:f3:c7:7d:b1:bb:83:80:38:
78:5d:5f:12:90:0b:6b:9d:a9:90:c0:37:f8:c1:3e:b7:d9:81:
6c:22:80:a2:4a:91:48:c8:94:2c:60:3a:7c:e6:f7:e9:ab:bc:
87:72:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:15:42 2025 by rpki-client