Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/33xoh2Mhe12KC-0rM7-N2OC8juY.roa
File: 33xoh2Mhe12KC-0rM7-N2OC8juY.roa (raw, json)
Hash identifier: WHxjyT3+EtMIryAC/JwnPc9urARuQ9qJ9/o50uStOZk=
Subject key identifier: DF:7C:68:87:63:21:7B:5D:8A:0B:ED:2B:33:BF:8D:D8:E0:BC:8E:E6
Certificate issuer: /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial: 019423D744574086167DB3D86EF5F2ABD547
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/33xoh2Mhe12KC-0rM7-N2OC8juY.roa
Signing time: Wed 01 Jan 2025 21:48:17 +0000
ROA not before: Wed 01 Jan 2025 21:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137443
IP address blocks: 45.86.140.0/22 maxlen: 24
45.133.228.0/22 maxlen: 24
45.138.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:44:57:40:86:16:7d:b3:d8:6e:f5:f2:ab:d5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df7c688763217b5d8a0bed2b33bf8dd8e0bc8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:04:94:47:dc:fa:09:be:46:5e:66:00:ed:
de:a9:b4:a8:af:87:fe:3b:bd:1d:c4:f0:56:57:18:
a5:72:7c:6d:90:96:25:e7:63:d3:c1:b2:56:6a:28:
11:8f:17:a8:25:a4:c0:24:5a:14:9b:bc:c6:fe:aa:
a2:c8:72:90:56:e7:66:5b:ea:9f:be:02:32:75:27:
b6:5c:e4:2f:7c:99:f2:8b:6b:33:fb:2e:30:fb:41:
fb:7d:e6:0e:f4:af:65:4e:80:c7:88:d1:12:05:9b:
f0:c1:12:4c:eb:14:48:66:9e:0f:66:6b:25:c1:99:
66:d5:5a:29:f9:fa:75:cc:49:d4:0e:2b:cc:f0:89:
b7:66:80:a1:ee:a2:64:63:43:4c:31:aa:e8:f5:be:
76:88:7c:62:5e:20:93:fc:4c:ca:c7:51:50:a6:ee:
11:8c:63:d5:fe:c6:e8:0c:ae:a3:10:54:e4:8e:d5:
87:47:28:e8:91:2c:40:41:9b:b8:0b:53:37:83:6e:
83:89:08:b1:2a:0e:cf:35:0c:55:a1:9d:97:9d:af:
c3:60:b7:6f:56:72:51:93:e5:a5:02:4d:b0:b6:59:
43:26:17:0a:53:e0:78:9c:6a:e6:f1:60:f7:89:f5:
ae:c4:f4:e0:14:44:1b:b3:a3:80:d9:cb:10:a5:ff:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7C:68:87:63:21:7B:5D:8A:0B:ED:2B:33:BF:8D:D8:E0:BC:8E:E6
X509v3 Authority Key Identifier:
keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/33xoh2Mhe12KC-0rM7-N2OC8juY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.140.0/22
45.133.228.0/22
45.138.80.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:2d:1f:3f:ab:98:c2:89:fb:41:e5:54:6f:cd:23:29:39:3e:
05:3b:14:c5:98:fe:09:68:86:a3:33:90:cf:b7:54:c6:25:f7:
68:5f:a5:47:e6:15:11:11:1d:6f:b7:40:a9:47:20:09:9d:4f:
79:a8:88:35:cb:30:df:61:db:9f:66:91:11:19:88:df:16:bd:
8d:2b:71:68:43:9a:e3:62:67:cc:f1:18:5e:7b:75:ac:ee:f8:
91:13:d1:cf:66:58:26:00:cd:0f:ab:39:65:6c:14:5c:df:f0:
90:fb:b7:5c:9d:30:8d:4e:33:b5:f3:cb:fc:c9:ed:9d:f5:2f:
50:ab:34:c3:97:78:20:90:24:1c:df:21:21:e2:f8:b5:71:be:
69:ec:a9:6e:fc:60:10:e6:9a:d8:6a:fc:1b:e0:55:e8:c7:93:
2d:05:ce:c6:3a:a7:ec:af:03:7f:8a:47:32:9e:28:d6:9e:29:
b2:ae:c5:be:ce:c4:c5:5b:91:88:61:49:a0:95:2a:19:81:60:
19:cb:57:60:74:00:48:1b:ed:75:4a:25:e4:2b:8e:ee:2f:81:
4a:00:dd:5b:17:d5:2a:26:42:a7:43:95:b3:1e:cc:6a:83:1f:
86:a9:13:8c:57:c9:99:ce:90:98:1c:33:a8:a8:00:8d:e5:ce:
17:98:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:21 2025 by rpki-client