Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_MibQqlWOEEuFt6inkiAiL99Zv8.roa
File: _MibQqlWOEEuFt6inkiAiL99Zv8.roa (raw, json)
Hash identifier: 0roKYKMTei5xWSOszlb7JKkSPVyeff7bPFS0Xf7/Nx4=
Subject key identifier: FC:C8:9B:42:A9:56:38:41:2E:16:DE:A2:9E:48:80:88:BF:7D:66:FF
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0190462826D3A242488A00623A7F32F138FF
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_MibQqlWOEEuFt6inkiAiL99Zv8.roa
Signing time: Sun 23 Jun 2024 17:32:34 +0000
ROA not before: Sun 23 Jun 2024 17:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.139.68.0/23 maxlen: 24
45.150.80.0/23 maxlen: 24
80.91.221.0/24 maxlen: 24
193.36.162.0/24 maxlen: 24
193.36.163.0/24 maxlen: 24
212.87.200.0/24 maxlen: 24
212.87.201.0/24 maxlen: 24
212.87.202.0/24 maxlen: 24
212.87.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:46:28:26:d3:a2:42:48:8a:00:62:3a:7f:32:f1:38:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jun 23 17:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcc89b42a95638412e16dea29e488088bf7d66ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:75:79:ae:3a:2c:44:fe:f5:bb:06:cc:ea:
2d:47:67:32:88:26:69:61:05:2c:39:6e:34:e3:f2:
66:7a:9a:dd:b3:ec:7d:18:75:42:71:05:1b:85:57:
44:63:e1:76:09:30:81:23:61:ab:d0:c4:81:de:2f:
57:b8:1d:0a:07:5d:e6:2b:69:ca:15:0d:7f:8e:c0:
fb:09:95:34:0f:b6:da:54:d6:cb:59:fb:0b:81:b6:
1f:8b:d6:2d:3c:08:d6:5e:78:fc:15:9e:93:1b:f1:
75:b7:2e:89:2d:9a:b6:c0:a1:0e:19:cb:d7:3c:eb:
ae:f0:91:aa:22:25:f9:79:e1:1a:c9:b9:7e:a5:c8:
ce:d7:32:79:ec:3c:34:ad:71:fc:43:24:ba:dc:d7:
48:3d:86:44:e3:a6:89:30:26:41:ca:27:73:0a:e7:
c4:87:10:26:95:39:76:7d:9a:3d:43:55:68:fa:c4:
ed:0d:dc:51:95:fc:70:1b:88:bf:ca:c0:e8:cf:f3:
c7:d4:c0:91:2b:c8:17:d3:e9:87:07:12:39:9a:6e:
ce:20:65:1b:ba:6b:ac:ad:81:7e:0d:59:03:2c:f1:
85:11:1c:37:97:7c:dc:83:11:f9:07:f2:02:2d:11:
52:0c:88:ef:ce:60:9f:91:33:3f:5f:fd:9e:01:f1:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C8:9B:42:A9:56:38:41:2E:16:DE:A2:9E:48:80:88:BF:7D:66:FF
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_MibQqlWOEEuFt6inkiAiL99Zv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.68.0/23
45.150.80.0/23
80.91.221.0/24
193.36.162.0/23
212.87.200.0/22
Signature Algorithm: sha256WithRSAEncryption
32:3c:f0:ac:a6:01:a2:59:c6:3e:a7:c7:25:97:84:5e:1c:94:
7b:0d:82:ff:6d:48:32:58:77:a9:3c:14:73:fd:c1:fc:bb:60:
0d:a3:59:98:e0:16:5e:09:a8:12:58:32:65:08:11:ed:7a:45:
70:2d:4e:d7:1e:92:6b:5f:ab:a5:51:84:e1:36:33:b8:97:67:
1f:dc:c0:ee:bb:3d:00:76:9c:51:c6:d4:81:65:39:76:05:08:
0d:cb:cf:06:24:a3:86:0d:22:04:9c:e9:ce:64:b1:f7:f0:da:
17:f4:d1:8f:5e:29:e6:15:73:c3:14:14:77:ab:ad:66:17:12:
91:c8:89:ab:93:59:31:b0:3f:cd:df:2c:c6:f7:8f:07:07:0a:
c7:23:3a:c1:63:77:99:7c:23:76:a1:15:f5:95:dd:79:28:44:
be:0d:99:0f:40:2c:c2:e4:2a:7f:e2:e3:d1:8d:cc:da:31:df:
3c:cf:de:f3:13:ba:91:eb:d9:6e:68:8a:1c:a2:f2:5f:5b:ab:
5b:ab:14:2d:48:9d:ef:b0:7a:aa:e3:28:2e:55:84:6c:43:1e:
c3:90:03:2b:ef:30:84:c5:3e:28:6b:b9:fc:40:b2:7c:2f:28:
95:31:2e:40:f8:6c:d3:28:d1:96:e1:a2:b4:93:cd:cf:3f:57:
4a:be:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:03 2025 by rpki-client