Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/cM8VCwAToYUay8Cs8r_uqKsIbSU.roa
File: cM8VCwAToYUay8Cs8r_uqKsIbSU.roa (raw, json)
Hash identifier: 6pPF0krqdzFpgqEz+0MFM0HfAkc4fzw70yHfP6Ohc+4=
Subject key identifier: 70:CF:15:0B:00:13:A1:85:1A:CB:C0:AC:F2:BF:EE:A8:AB:08:6D:25
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 019425FDC810F1297593C586D5974F13CABB
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/cM8VCwAToYUay8Cs8r_uqKsIbSU.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57391
IP address blocks: 45.140.28.0/23 maxlen: 23
45.140.30.0/23 maxlen: 23
89.44.112.0/23 maxlen: 24
89.44.118.0/23 maxlen: 24
89.45.68.0/23 maxlen: 24
89.45.126.0/23 maxlen: 24
185.46.0.0/23 maxlen: 23
185.46.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c8:10:f1:29:75:93:c5:86:d5:97:4f:13:ca:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70cf150b0013a1851acbc0acf2bfeea8ab086d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:fd:03:7f:47:a3:80:71:4f:58:13:4f:7c:
36:ce:35:36:e3:b1:d3:34:19:4c:f6:52:b6:c2:7d:
6d:bf:42:0e:20:70:35:30:a0:5f:ed:ce:da:7f:c5:
d4:46:69:ff:22:32:77:c4:96:87:01:0e:b8:c8:a6:
ee:1b:8b:51:dd:a1:8c:d2:53:b5:a2:c8:04:a1:35:
25:95:1f:78:ce:39:f3:6b:23:7a:8d:ac:3d:bd:6e:
ea:46:a1:74:bf:3a:8e:dc:0a:07:80:30:2a:3d:97:
e6:ff:4c:d3:46:7f:fb:6e:bb:cc:55:c4:db:97:fc:
9c:48:d5:b6:24:0e:8a:72:22:40:ae:b7:9c:7e:8a:
0b:09:16:a9:fb:1e:e1:bc:1d:b5:6b:65:a7:5d:23:
47:c8:ed:3f:de:d4:4d:4c:63:1e:60:9e:d4:6f:cf:
69:92:9b:ab:2e:a2:1a:d6:53:53:a7:c9:db:7a:85:
b3:37:46:65:22:1f:0a:e3:fc:78:de:2f:e5:7f:ef:
5d:83:52:16:c6:a8:ec:49:b3:af:22:5c:b7:ef:21:
b7:1d:07:9a:27:3f:6d:14:46:11:9a:c5:69:70:b0:
42:3d:ea:2e:04:de:63:f5:a0:2e:36:53:6e:67:03:
df:8a:ff:c7:58:fb:58:54:be:a2:71:e1:06:11:8a:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CF:15:0B:00:13:A1:85:1A:CB:C0:AC:F2:BF:EE:A8:AB:08:6D:25
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/cM8VCwAToYUay8Cs8r_uqKsIbSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
89.44.112.0/23
89.44.118.0/23
89.45.68.0/23
89.45.126.0/23
185.46.0.0/22
Signature Algorithm: sha256WithRSAEncryption
20:d1:17:fe:43:52:ef:a0:f3:2e:7e:57:31:10:e8:41:d3:b4:
7f:ed:2d:e4:71:85:6b:23:7d:a5:f3:4b:61:3c:34:e4:76:cf:
69:7d:c8:03:c2:ae:fe:bf:38:c5:69:90:d3:30:c3:fc:93:8b:
69:08:de:58:d3:5b:d8:f8:36:e1:93:71:9d:79:dc:33:e6:86:
dd:d9:ee:70:64:59:ff:c9:1c:b4:0c:8a:ee:6f:20:57:03:43:
88:d3:5c:f1:2a:b8:fc:f5:4a:f0:42:73:29:57:55:a7:03:cb:
bb:9e:51:5a:36:5d:45:eb:c2:fd:12:4c:11:21:40:e8:32:1a:
c1:5a:fa:6c:75:9d:22:f7:0f:a1:ec:f3:94:39:12:15:d8:2f:
64:df:f4:fa:1a:94:e7:bd:41:4e:4e:15:fd:8d:24:67:ba:13:
35:92:58:ed:ff:07:15:76:0b:91:85:90:51:7e:1b:c8:1e:f8:
7f:7a:a9:11:e8:3c:21:be:0f:aa:5b:8d:7b:fd:11:b0:db:ab:
ec:df:57:b0:10:d4:3b:a0:81:6f:8f:f3:80:0f:bd:74:de:20:
a4:66:d3:5f:25:55:9e:8f:06:05:64:9a:41:ed:03:7c:2f:2f:
8f:df:96:5d:98:eb:e7:6e:fb:22:23:51:7e:6d:93:c8:70:84:
e8:b5:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:27:13 2025 by rpki-client