Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/R42js5nag_6RbYvFzZ2Td6L5OKE.roa
File: R42js5nag_6RbYvFzZ2Td6L5OKE.roa (raw, json)
Hash identifier: uif0n5GqdT1ug3dzXoIN9Ez/FZp4nUhIvywhixKjTHU=
Subject key identifier: 47:8D:A3:B3:99:DA:83:FE:91:6D:8B:C5:CD:9D:93:77:A2:F9:38:A1
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B4018D84BF9B8A2603359EA5919299
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/R42js5nag_6RbYvFzZ2Td6L5OKE.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 45.14.112.0/24 maxlen: 24
45.95.184.0/24 maxlen: 24
147.189.141.0/24 maxlen: 24
193.8.173.0/24 maxlen: 24
2a0e:c80:1::/48 maxlen: 48
2a0e:c80:2::/48 maxlen: 48
2a0e:3840:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:01:8d:84:bf:9b:8a:26:03:35:9e:a5:91:92:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=478da3b399da83fe916d8bc5cd9d9377a2f938a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:c4:17:e0:6d:ec:7d:e3:0d:2b:45:b9:9c:
e1:8d:e9:22:45:a5:19:97:71:56:25:15:f5:fe:cc:
a5:d2:02:ef:0a:23:3c:67:0a:62:09:61:34:80:8d:
f7:c2:e9:44:1f:69:a1:bd:01:96:4d:0e:08:91:7f:
93:e9:1d:28:fd:0e:12:f9:5e:dc:3f:39:94:b7:9a:
fd:b3:93:16:4b:94:9a:9c:aa:01:f1:54:eb:cc:4e:
05:48:9f:fc:a2:c7:f5:bf:66:81:a1:4e:0d:b5:9b:
a1:d0:5c:17:c4:de:b5:3d:bf:52:b3:c8:29:25:40:
58:cd:da:90:c2:b5:c4:2f:b4:32:d7:05:3a:42:f2:
4d:14:7a:9d:25:cd:a3:01:e7:bd:61:5e:03:dc:e2:
65:ac:4c:86:65:ab:38:b1:a3:62:7f:79:a7:28:17:
27:70:10:30:88:0f:01:53:17:5f:f0:dc:22:57:06:
f7:0f:17:49:03:eb:3d:b8:17:c0:b2:94:df:af:e9:
5e:3c:f5:81:0e:a6:7f:27:f0:4f:35:fc:b9:d6:81:
c6:d1:56:02:39:56:63:48:a9:27:40:d3:6c:65:89:
6f:f5:dd:73:b9:69:16:ac:37:18:21:28:2c:74:27:
05:0f:3f:a5:42:ca:35:8d:fb:82:7a:62:94:20:5f:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8D:A3:B3:99:DA:83:FE:91:6D:8B:C5:CD:9D:93:77:A2:F9:38:A1
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/R42js5nag_6RbYvFzZ2Td6L5OKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.112.0/24
45.95.184.0/24
147.189.141.0/24
193.8.173.0/24
IPv6:
2a0e:c80:1::-2a0e:c80:2:ffff:ffff:ffff:ffff:ffff
2a0e:3840:1::/48
Signature Algorithm: sha256WithRSAEncryption
4f:2f:fe:2e:c1:21:01:86:5b:f2:37:55:1b:e6:99:b0:96:ec:
dc:c3:06:0d:f3:0d:27:f8:92:20:3c:88:89:56:15:cd:ed:32:
88:11:d7:64:0b:9b:52:d7:33:95:2a:c9:4e:40:b4:15:db:5c:
5c:64:72:99:c0:1b:36:93:fd:51:70:57:55:d8:54:b4:aa:1f:
ce:ab:f8:7d:28:53:61:47:00:a0:92:59:1f:24:23:95:29:0d:
58:ac:3c:30:95:92:71:11:63:29:71:01:d9:8f:d4:e4:df:50:
81:89:20:33:56:a6:4a:f4:51:27:12:ec:90:1a:85:a9:03:01:
7d:ae:d5:ac:c7:04:fc:0d:11:b4:1e:d3:3f:9f:b5:ea:d8:90:
66:b1:5d:39:0d:5b:6b:7f:e1:9d:26:16:4d:cd:a9:24:08:67:
d3:5b:6d:ed:fc:88:be:20:6a:31:6d:f4:ce:38:4f:82:fb:34:
fe:18:df:af:5b:f4:f8:65:08:fe:30:c0:83:e3:59:fb:2f:34:
7e:79:32:36:8c:97:69:4b:ac:1e:ac:64:3c:37:fe:b4:b6:b5:
3f:f5:b3:b3:10:15:98:fe:be:cd:97:a1:97:30:88:a0:71:ea:
c5:b3:9a:0c:a4:87:34:ac:9c:1a:b7:9a:dc:11:83:56:56:30:
af:65:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:14 2025 by rpki-client