Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/7zblY6BCctcdXpwbMm0_34faYRo.roa
File: 7zblY6BCctcdXpwbMm0_34faYRo.roa (raw, json)
Hash identifier: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=
Subject key identifier: EF:36:E5:63:A0:42:72:D7:1D:5E:9C:1B:32:6D:3F:DF:87:DA:61:1A
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067C14D2F71A0E693BCD683BAFAC83B
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/7zblY6BCctcdXpwbMm0_34faYRo.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138195
IP address blocks: 45.93.28.0/24 maxlen: 24
45.93.29.0/24 maxlen: 24
45.93.30.0/24 maxlen: 24
45.93.31.0/24 maxlen: 24
45.94.68.0/24 maxlen: 24
45.94.69.0/24 maxlen: 24
45.94.70.0/24 maxlen: 24
45.141.136.0/24 maxlen: 24
45.141.137.0/24 maxlen: 24
45.141.138.0/24 maxlen: 24
45.141.139.0/24 maxlen: 24
45.154.12.0/24 maxlen: 24
45.154.13.0/24 maxlen: 24
45.154.14.0/24 maxlen: 24
45.154.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c1:4d:2f:71:a0:e6:93:bc:d6:83:ba:fa:c8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef36e563a04272d71d5e9c1b326d3fdf87da611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:03:0a:57:9a:d9:b3:d6:6b:06:6f:3f:bd:
06:d0:30:95:7c:92:48:2a:8f:c3:1f:dd:46:1c:05:
6a:23:77:e4:b1:cc:83:a1:89:20:50:0e:22:56:28:
a8:78:e6:e5:e2:ce:75:8f:7e:56:a7:30:4e:e5:12:
f9:26:86:54:f8:a9:5d:e3:28:69:9a:34:fb:30:f7:
d4:c0:b9:44:e4:cc:f2:82:64:45:de:62:a8:d6:50:
1d:bd:1d:7c:1e:17:78:e3:34:90:25:9c:46:08:f0:
4d:bd:66:4b:ad:eb:91:81:f7:3d:f4:b4:06:2b:64:
77:95:18:fe:19:97:64:e6:b0:38:9c:ae:ec:dd:73:
15:7c:50:5e:5e:20:18:2f:88:e5:24:8d:fe:0a:af:
49:4a:9a:a3:72:5a:ca:6b:bc:5d:f9:cd:c6:d7:66:
87:22:dc:d0:f0:8e:53:92:84:e7:cc:38:e7:f8:1c:
2a:ba:4a:43:d6:17:ab:cd:ae:81:72:26:af:e3:a9:
04:f6:ce:89:ec:51:02:a3:af:42:d0:be:b9:98:66:
26:3f:c0:50:a0:a8:6f:a5:aa:78:99:b6:a2:6e:5d:
54:13:aa:01:ad:5d:df:04:5c:e0:98:9a:05:80:fa:
1a:8a:28:85:e2:5e:0b:dd:b8:d3:20:bf:ec:34:29:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:36:E5:63:A0:42:72:D7:1D:5E:9C:1B:32:6D:3F:DF:87:DA:61:1A
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/7zblY6BCctcdXpwbMm0_34faYRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.28.0/22
45.94.68.0-45.94.70.255
45.141.136.0/22
45.154.12.0/22
Signature Algorithm: sha256WithRSAEncryption
20:4b:a1:17:5e:0d:35:00:8d:57:77:5b:80:3c:49:52:c9:78:
c0:89:27:42:ad:6f:03:d3:d6:90:a5:09:4f:9e:21:2d:29:88:
87:0b:c2:cb:f1:cf:c1:57:23:25:6a:4e:ad:d8:99:2d:19:02:
34:7d:06:8a:27:54:31:d1:7b:89:83:63:dc:47:93:b1:e8:bb:
53:88:e4:fe:02:c3:4b:86:95:d1:80:cd:2c:f8:b2:da:01:87:
78:9a:47:e7:cb:8e:6c:22:71:86:86:84:80:31:2a:98:e2:90:
ba:d8:71:31:1d:21:fb:39:f5:e2:12:c0:e4:51:01:fd:88:c4:
5f:f8:c4:04:13:c4:e0:df:61:11:a0:61:ed:71:c0:44:f5:bd:
50:a6:fc:60:5e:83:f6:59:87:72:ee:91:9e:6b:92:f9:c2:a4:
fd:bf:4b:28:35:78:51:c8:f7:a9:78:14:32:8d:cd:51:64:d4:
ec:76:c5:fa:86:4d:ab:42:63:00:76:e4:91:bb:a7:ca:02:fc:
80:c3:2f:f9:fc:2d:10:d3:fb:ae:f3:f5:9a:e2:7d:91:12:40:
a1:6f:8a:e3:35:6c:9d:24:af:03:27:bf:f9:2a:a4:4f:86:36:
78:f2:d8:e9:09:d7:54:9b:fa:7e:b0:c2:25:0d:48:ab:fd:a4:
5a:a8:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:39 2025 by rpki-client