Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/3NYFMMsqNfNq6B1YUyXTcG2g66g.roa
File: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (raw, json)
Hash identifier: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=
Subject key identifier: DC:D6:05:30:CB:2A:35:F3:6A:E8:1D:58:53:25:D3:70:6D:A0:EB:A8
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067BC8CFAD0DCED9E79B3CCCE9517A4
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/3NYFMMsqNfNq6B1YUyXTcG2g66g.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8796
IP address blocks: 45.81.128.0/24 maxlen: 24
45.91.80.0/24 maxlen: 24
45.91.81.0/24 maxlen: 24
45.91.82.0/24 maxlen: 24
45.91.83.0/24 maxlen: 24
45.135.116.0/24 maxlen: 24
45.135.117.0/24 maxlen: 24
45.140.88.0/24 maxlen: 24
45.140.89.0/24 maxlen: 24
45.153.8.0/24 maxlen: 24
45.153.9.0/24 maxlen: 24
45.155.222.0/24 maxlen: 24
45.155.223.0/24 maxlen: 24
193.227.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bc:8c:fa:d0:dc:ed:9e:79:b3:cc:ce:95:17:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcd60530cb2a35f36ae81d585325d3706da0eba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:92:af:5a:83:f0:8b:5d:e5:56:66:a9:31:
6f:a1:2f:33:cd:31:f4:37:28:95:01:7b:a3:5d:69:
84:e1:a4:31:00:ca:1a:cf:dc:0b:1f:e7:20:41:39:
ea:97:f8:a2:d1:13:c3:c6:9c:c5:d6:62:5f:73:5c:
cc:ed:d1:6c:d6:dd:cd:e7:96:3f:86:cc:ff:2e:62:
07:0e:c7:42:bd:d4:52:4e:d6:d0:7f:c9:b3:7e:b2:
26:9b:9b:f1:1d:ee:c2:9e:14:74:0c:de:d7:37:88:
20:76:cc:8a:75:14:7c:76:7b:1e:94:6e:51:5c:df:
a7:44:31:2c:3d:d9:b4:c0:c3:74:c1:cf:8e:61:8d:
a1:7f:0e:68:fa:78:90:49:8d:a9:73:5e:38:63:8f:
26:60:ec:5c:f4:ab:a8:71:02:c3:21:9b:a2:14:ca:
85:18:5f:ef:d8:4b:a7:90:d2:20:20:30:2a:a2:1c:
0b:b3:18:1d:4c:7d:9f:ea:7f:2d:1b:30:96:22:ef:
b4:d3:75:ae:9f:bb:48:9e:c2:f5:93:03:8a:27:dc:
94:82:0e:d6:0e:64:1b:5a:90:df:3c:e9:be:65:3d:
e1:f4:94:72:2d:e7:52:66:90:4b:5d:42:b4:b2:45:
c7:d8:4a:d4:45:1a:e4:09:46:e8:0a:4a:6d:de:ee:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D6:05:30:CB:2A:35:F3:6A:E8:1D:58:53:25:D3:70:6D:A0:EB:A8
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/3NYFMMsqNfNq6B1YUyXTcG2g66g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.128.0/24
45.91.80.0/22
45.135.116.0/23
45.140.88.0/23
45.153.8.0/23
45.155.222.0/23
193.227.121.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c0:8a:43:51:3e:e9:a7:19:f0:90:ae:9f:c8:20:fb:47:0e:
17:62:20:be:21:a4:bc:c1:72:75:3d:06:91:96:93:ab:37:be:
57:b6:14:1b:77:0e:3c:5e:b5:a3:f0:dc:ec:6e:87:3c:ac:ce:
97:f6:b0:51:38:dc:bf:e8:b7:90:2d:ff:77:7f:54:e8:b1:37:
be:5f:45:4f:99:79:61:1f:0a:a2:cf:25:0e:71:5b:94:c1:53:
a9:cf:79:34:8b:51:4d:32:ee:8a:48:6e:15:18:42:85:bf:39:
2a:9e:62:f8:fd:8c:19:2f:97:82:3f:64:d1:3e:6a:fc:43:75:
ed:4f:28:f4:38:02:8b:0d:7e:00:bc:05:b6:8d:e0:84:77:f6:
fa:30:c8:b8:1c:fe:27:3c:76:e7:59:7d:11:46:10:d6:71:33:
76:e4:62:8f:ee:2b:39:dd:5d:d4:9d:19:04:93:6a:95:02:57:
e0:6d:01:40:68:cb:4a:2a:9b:9a:63:84:f6:eb:e4:c2:ac:44:
a3:ce:f9:a8:21:f6:af:64:c3:62:fa:4e:ee:bd:3a:06:08:5c:
4d:26:a9:35:6f:5f:07:50:0a:db:c6:c5:e3:02:63:d9:eb:3b:
06:75:ea:71:4e:2a:b6:29:f8:a2:9e:87:92:72:00:25:9f:07:
40:06:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:43:06 2025 by rpki-client