Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/MAzNFV2te9n7kjEaFpStK8vBowc.roa
File: MAzNFV2te9n7kjEaFpStK8vBowc.roa (raw, json)
Hash identifier: cw6Ks/U2S63sovwgOc3pI9cS6N4rqlfzqVdKZqK6qIU=
Subject key identifier: 30:0C:CD:15:5D:AD:7B:D9:FB:92:31:1A:16:94:AD:2B:CB:C1:A3:07
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 019421439139C3618FC13F50B8062FAD6CAD
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/MAzNFV2te9n7kjEaFpStK8vBowc.roa
Signing time: Wed 01 Jan 2025 09:47:43 +0000
ROA not before: Wed 01 Jan 2025 09:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64458
IP address blocks: 45.90.72.0/24 maxlen: 24
45.90.73.0/24 maxlen: 24
45.90.74.0/24 maxlen: 24
45.90.75.0/24 maxlen: 24
185.81.97.0/24 maxlen: 24
194.59.170.0/24 maxlen: 24
2a05:8640::/29 maxlen: 48
2a05:8641::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:91:39:c3:61:8f:c1:3f:50:b8:06:2f:ad:6c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Jan 1 09:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=300ccd155dad7bd9fb92311a1694ad2bcbc1a307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:0a:30:36:e1:7e:5c:8d:24:e0:8f:88:4b:
9b:d6:98:db:50:85:d6:94:27:34:56:ce:2f:d3:dc:
11:e5:a2:a9:5e:0e:b2:bc:d6:fc:e6:64:73:2b:7d:
ac:d9:b9:d0:3e:27:a4:10:3e:8f:1a:85:d9:dc:37:
1d:9c:a4:3e:dd:f3:5a:2f:18:af:90:4c:ce:f8:06:
9f:82:d6:f6:7a:54:9f:69:03:03:85:7f:5c:02:28:
8a:38:f9:26:ac:70:c7:15:73:0a:55:5e:b2:76:5b:
fe:17:7e:fb:98:69:9b:bd:91:ae:83:c3:c5:8e:49:
b7:5e:f9:60:1f:35:75:c7:d6:cf:8b:d1:32:e8:e6:
f9:59:fb:14:a6:ff:60:ef:28:ce:b6:87:34:bc:c2:
07:15:1d:7c:76:7b:a4:db:64:56:2f:c2:ed:f8:05:
54:d4:e3:71:47:19:a1:68:d1:ff:74:dd:83:f2:4e:
d7:65:c8:92:9c:f5:7e:66:3d:cf:3b:18:65:5e:c5:
e2:57:92:42:37:a1:18:b3:5b:eb:2b:26:3e:a8:44:
e9:03:95:94:c2:f8:58:4c:73:dd:e5:60:4d:80:dc:
46:a1:48:44:ff:fa:01:80:ab:59:a1:fb:71:ce:39:
82:fa:89:ae:06:b4:c5:2a:1b:3f:fb:ff:d3:cf:5b:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0C:CD:15:5D:AD:7B:D9:FB:92:31:1A:16:94:AD:2B:CB:C1:A3:07
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/MAzNFV2te9n7kjEaFpStK8vBowc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.72.0/22
185.81.97.0/24
194.59.170.0/24
IPv6:
2a05:8640::/29
Signature Algorithm: sha256WithRSAEncryption
00:0a:c3:45:79:87:29:e0:30:de:92:fb:b9:e8:83:1b:9a:1f:
55:f6:1d:16:96:35:9a:3e:e1:80:32:4e:01:5c:6c:38:e0:64:
32:a2:e7:8b:de:31:6c:9c:a2:1b:4b:c0:7d:69:8b:57:48:f4:
40:0e:a6:9c:f8:e1:20:81:cb:87:7c:6d:85:c5:59:0d:87:e0:
cf:2b:a0:96:ca:42:c1:67:a9:94:b5:cb:a2:5d:8a:92:bc:ea:
a4:79:e6:89:4a:15:4b:cc:ee:c3:58:c8:94:2f:42:d5:f1:b2:
32:fe:d5:eb:76:a4:58:63:df:d1:a7:cc:43:e6:7f:b1:f0:81:
11:5c:05:b7:06:20:3e:65:ff:ef:47:25:87:cd:b4:21:fd:c2:
e2:84:2a:50:c2:5a:ba:22:80:9f:62:d2:3e:33:8a:37:5a:ff:
01:bd:d8:5f:a1:73:ab:60:cc:be:15:08:03:1b:01:9d:db:43:
2b:bc:a8:76:63:53:4b:36:84:09:6f:31:5e:4e:d9:06:f4:64:
7d:14:ee:97:95:22:33:91:dc:89:28:7f:34:c8:b4:ba:8c:67:
55:52:f5:3b:63:2d:a5:09:a2:d8:9b:31:ce:fe:a5:22:64:4c:
86:8a:11:88:76:c9:3a:25:61:b8:81:b3:8b:51:15:ea:2c:05:
10:fa:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:03 2025 by rpki-client