Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/GLK5rLBpcotlXv6u3BzUtElJxSU.roa
File: GLK5rLBpcotlXv6u3BzUtElJxSU.roa (raw, json)
Hash identifier: vjQSgOgjQHvsGQUUXoXmlZlIzp5Z2dfHij1oA8lSNbk=
Subject key identifier: 18:B2:B9:AC:B0:69:72:8B:65:5E:FE:AE:DC:1C:D4:B4:49:49:C5:25
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01942220071FE5F94793432DBA6851381666
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/GLK5rLBpcotlXv6u3BzUtElJxSU.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 45.93.213.0/24 maxlen: 24
45.93.214.0/24 maxlen: 24
45.151.234.0/24 maxlen: 24
45.151.235.0/24 maxlen: 24
77.83.246.0/24 maxlen: 24
160.20.156.0/24 maxlen: 24
160.20.157.0/24 maxlen: 24
185.68.186.0/24 maxlen: 24
185.68.187.0/24 maxlen: 24
185.71.214.0/24 maxlen: 24
185.71.215.0/24 maxlen: 24
185.73.180.0/24 maxlen: 24
185.73.181.0/24 maxlen: 24
185.75.132.0/24 maxlen: 24
185.77.138.0/24 maxlen: 24
185.77.139.0/24 maxlen: 24
185.79.132.0/24 maxlen: 24
185.79.133.0/24 maxlen: 24
185.88.98.0/24 maxlen: 24
185.88.99.0/24 maxlen: 24
185.95.228.0/24 maxlen: 24
185.100.156.0/24 maxlen: 24
185.102.114.0/24 maxlen: 24
185.111.24.0/24 maxlen: 24
185.182.130.0/24 maxlen: 24
185.182.131.0/24 maxlen: 24
193.38.228.0/24 maxlen: 24
193.38.229.0/24 maxlen: 24
193.38.230.0/24 maxlen: 24
193.38.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:07:1f:e5:f9:47:93:43:2d:ba:68:51:38:16:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18b2b9acb069728b655efeaedc1cd4b44949c525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:74:e2:22:54:09:4c:11:61:78:83:03:16:
0d:84:ed:25:1b:59:fd:60:96:53:fe:c2:0d:7e:55:
6d:11:41:e4:c7:df:bd:cb:4a:9a:89:17:01:c7:00:
02:a8:42:18:f0:e5:d9:9e:b0:20:7d:b0:eb:c2:57:
d3:a4:c2:3b:ce:38:dd:c6:28:25:2e:ff:0e:c1:ab:
af:ec:b2:2f:98:6d:e9:08:3e:c7:5e:d6:a9:6b:1b:
b0:0e:42:04:c6:7f:cd:92:3a:c5:cf:a3:98:23:11:
27:eb:d3:dd:ad:0d:b6:5a:05:3d:a0:8f:a3:c2:b1:
57:8c:48:d1:c2:be:05:5b:79:a3:28:99:59:7f:25:
56:0d:26:d5:60:0e:96:7f:8b:88:90:52:e1:41:a3:
6e:ea:c6:24:78:8b:17:bf:d1:ea:32:79:c6:89:ca:
71:43:d4:47:24:37:0e:c3:23:00:43:96:fa:56:88:
9e:60:b3:45:bf:45:fb:c0:8b:64:71:a6:f2:f9:98:
21:18:42:e3:48:09:45:cc:28:ce:dc:46:10:4d:78:
e0:5a:8e:4a:dc:70:7b:6f:e8:e3:21:49:14:89:f7:
a9:4b:ea:e0:97:1c:1c:74:8a:2e:eb:a9:8f:e0:f3:
38:f6:04:73:d0:91:15:bd:b3:ed:56:e8:a9:ae:5c:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B2:B9:AC:B0:69:72:8B:65:5E:FE:AE:DC:1C:D4:B4:49:49:C5:25
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/GLK5rLBpcotlXv6u3BzUtElJxSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.213.0-45.93.214.255
45.151.234.0/23
77.83.246.0/24
160.20.156.0/23
185.68.186.0/23
185.71.214.0/23
185.73.180.0/23
185.75.132.0/24
185.77.138.0/23
185.79.132.0/23
185.88.98.0/23
185.95.228.0/24
185.100.156.0/24
185.102.114.0/24
185.111.24.0/24
185.182.130.0/23
193.38.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:a7:8c:2d:a0:49:c1:9e:b1:8b:28:f8:8a:13:69:9a:fb:d8:
a8:ed:94:11:b2:ff:71:9c:63:e7:59:eb:f8:62:39:bd:b1:9a:
b6:a7:dc:2b:a0:11:42:6c:61:e5:80:7b:b0:5f:27:9e:b6:1c:
43:9c:81:b8:bd:48:09:aa:b2:29:94:4a:41:bb:37:4d:24:e9:
45:78:f4:61:7f:1b:0e:d9:08:38:d0:b4:55:3b:d6:d4:84:80:
a6:f1:63:6c:58:ad:0f:ae:8d:87:07:e0:cf:27:41:26:ff:36:
2b:51:67:16:8a:b7:04:e5:25:d0:71:28:bf:4e:1a:19:17:16:
3b:eb:25:22:eb:3b:da:9e:c2:00:ca:56:c3:19:72:b4:e9:49:
de:5b:4b:49:60:1a:e3:98:25:3b:f3:bd:0e:7c:9b:d8:6d:7d:
b7:26:7c:cc:85:77:15:82:f6:4f:c5:e7:88:12:2f:8d:67:7d:
dc:cc:02:42:ea:3e:3a:06:83:bf:c5:7f:5a:38:7c:d1:13:4e:
b2:2d:c3:0e:99:50:ab:78:2c:73:a1:6a:14:30:7c:e7:ad:34:
dd:a7:90:26:cb:92:0e:dc:e1:91:18:5c:b0:79:7c:8a:88:22:
e4:00:03:f9:a7:64:f0:a4:76:cb:cd:0a:54:ef:4b:39:9a:a0:
08:dc:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:29:36 2025 by rpki-client