Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/rLFXbl__3TAOb3S5Cx0KvKn5se8.roa
File: rLFXbl__3TAOb3S5Cx0KvKn5se8.roa (raw, json)
Hash identifier: JoWfelx8Wab0+mon7O7zO9ngmwLQkIC05SIGqXCeWe8=
Subject key identifier: AC:B1:57:6E:5F:FF:DD:30:0E:6F:74:B9:0B:1D:0A:BC:A9:F9:B1:EF
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067BF5753E743A6BE33C1E681877079
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/rLFXbl__3TAOb3S5Cx0KvKn5se8.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55933
IP address blocks: 45.153.128.0/22 maxlen: 22
45.153.128.0/23 maxlen: 23
45.153.130.0/23 maxlen: 23
193.42.24.0/22 maxlen: 22
193.42.24.0/23 maxlen: 23
193.42.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bf:57:53:e7:43:a6:be:33:c1:e6:81:87:70:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acb1576e5fffdd300e6f74b90b1d0abca9f9b1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:17:42:c7:ca:25:f0:d5:7d:46:d4:70:d1:
86:62:14:13:90:24:49:ff:80:be:c6:f4:b3:06:a7:
1c:86:3e:16:f4:b5:d5:9b:33:4a:99:2a:69:d8:2f:
72:7e:5f:30:30:59:91:bc:c2:96:7c:8c:6a:f9:df:
04:20:c4:2f:f0:c4:b4:4a:b4:3d:d9:fe:6d:34:9b:
16:17:c7:76:bb:88:40:ef:fe:a3:6b:93:ad:31:49:
f6:db:7f:54:d9:2a:d9:04:fa:bc:48:40:b8:c2:3a:
6e:70:01:98:10:70:08:38:0a:5e:14:ae:6a:4d:d9:
78:35:03:a1:14:39:38:63:01:41:c1:42:9a:a8:12:
a8:00:22:7c:e5:e6:2f:15:e3:a6:80:8c:b4:0d:55:
cf:80:7d:d1:a1:92:89:2a:eb:12:70:49:02:49:b3:
40:cc:f5:7e:35:0f:c5:54:28:04:08:17:ba:c8:f4:
40:89:bf:30:ee:2d:65:0f:e5:eb:0c:91:24:b2:c7:
11:f8:15:ac:65:2e:b6:f7:b0:95:3a:75:ac:93:cc:
f9:b5:9d:b1:ee:10:2d:e3:5f:4c:89:29:4e:40:74:
84:2a:d0:97:20:c9:bd:7c:9b:1e:17:ee:6e:e2:f5:
47:53:fd:f1:e1:b7:78:a8:de:a6:9b:8a:77:15:2f:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:57:6E:5F:FF:DD:30:0E:6F:74:B9:0B:1D:0A:BC:A9:F9:B1:EF
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/rLFXbl__3TAOb3S5Cx0KvKn5se8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.128.0/22
193.42.24.0/22
Signature Algorithm: sha256WithRSAEncryption
28:3d:b6:84:45:37:ff:31:e9:e7:22:c7:b2:9f:d4:e4:2a:17:
da:22:ae:b8:2d:cd:2a:16:e6:e9:6d:76:3a:4e:13:28:33:62:
ec:32:3c:0a:88:14:71:9c:e7:b8:df:4d:19:a9:10:72:07:d3:
7d:bf:c9:05:cb:05:2c:c3:f2:10:d5:32:a7:9c:ea:e2:b6:33:
c2:21:a8:40:d8:83:70:59:cd:0c:c0:bd:31:9a:0f:2f:1e:47:
6c:55:42:41:48:8c:a8:66:db:a8:f7:b9:65:6d:50:91:1b:d4:
7f:a5:22:03:d9:cc:e6:2e:ec:37:28:e4:23:17:31:2f:58:62:
a6:d8:a4:36:49:64:14:fa:a7:79:ee:38:81:77:a8:99:06:e6:
fe:3e:63:dc:52:9d:e0:c2:a6:ac:ef:0b:8b:f7:31:60:4b:bb:
94:e8:fd:78:36:2f:40:87:a8:89:43:0a:d5:a4:95:dc:12:7e:
82:44:08:aa:4b:9e:c9:ab:3e:4d:91:fe:20:b6:5f:2e:82:19:
de:a9:06:e9:03:86:8d:92:d8:ce:a9:6b:75:4c:ce:2e:27:a8:
22:19:70:56:7a:23:91:7c:75:18:6d:fd:82:3d:15:05:79:b0:
ed:f7:e5:ee:3a:4a:83:be:32:ff:6a:a3:a8:68:aa:eb:48:54:
a4:29:58:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:54 2025 by rpki-client