Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/bLrmjl2GMuMNqs1G0LT53g53-ZA.roa
File: bLrmjl2GMuMNqs1G0LT53g53-ZA.roa (raw, json)
Hash identifier: tpqIJ5bi9hVMacfYB9kAsI6kEy/LwhJy29fmCmnY5UE=
Subject key identifier: 6C:BA:E6:8E:5D:86:32:E3:0D:AA:CD:46:D0:B4:F9:DE:0E:77:F9:90
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019039DBA6F828E642F756CBAE4C25A57A35
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/bLrmjl2GMuMNqs1G0LT53g53-ZA.roa
Signing time: Fri 21 Jun 2024 08:13:34 +0000
ROA not before: Fri 21 Jun 2024 08:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.139.68.0/23 maxlen: 24
45.150.80.0/23 maxlen: 24
193.36.162.0/24 maxlen: 24
193.36.163.0/24 maxlen: 24
212.87.200.0/24 maxlen: 24
212.87.201.0/24 maxlen: 24
212.87.202.0/24 maxlen: 24
212.87.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:db:a6:f8:28:e6:42:f7:56:cb:ae:4c:25:a5:7a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jun 21 08:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cbae68e5d8632e30daacd46d0b4f9de0e77f990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:bd:98:40:6a:97:34:03:b9:bf:74:b5:b8:
b9:6a:70:b7:f0:bd:61:23:a0:d5:13:4f:e5:c3:6c:
83:f1:e6:64:66:b3:34:89:3f:65:10:03:76:89:72:
8d:75:3b:cd:d3:1d:04:d2:69:44:55:73:6e:52:7f:
36:20:ae:e8:6c:9c:81:ba:ab:ce:29:c0:57:89:e6:
97:c6:db:28:bc:08:7e:8d:93:57:08:38:28:4f:b7:
96:04:ae:a3:1f:ac:75:fa:c5:75:46:cf:48:15:a5:
9e:2c:94:f0:b1:1f:fd:a1:3d:a6:4a:0a:f4:cc:02:
c6:bc:eb:90:72:31:a8:f7:b9:26:2e:9e:b9:d3:0e:
01:15:74:d0:b0:30:65:ac:b3:7e:83:38:94:b1:42:
77:21:d6:4f:ef:46:b8:13:b6:07:94:c5:95:a7:2b:
f3:f1:83:0b:6d:f3:26:20:6a:b2:f6:7d:7c:fd:d8:
e6:1d:bb:22:02:c3:c4:f8:5d:04:f2:08:d7:59:17:
74:01:c6:b4:b3:51:c8:6c:1e:b3:11:25:d2:e3:56:
f2:25:f7:75:20:0b:5a:6c:7c:04:20:57:0b:7d:9c:
cb:e0:2e:74:75:e4:c1:f7:d0:f9:d0:6a:b8:99:25:
78:7b:89:05:83:ae:b1:aa:0d:ac:0a:05:3d:f4:55:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BA:E6:8E:5D:86:32:E3:0D:AA:CD:46:D0:B4:F9:DE:0E:77:F9:90
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/bLrmjl2GMuMNqs1G0LT53g53-ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.68.0/23
45.150.80.0/23
193.36.162.0/23
212.87.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:da:31:c2:95:b0:00:91:be:9d:0d:43:7b:b2:40:ad:e4:cd:
cb:e1:7c:79:d7:76:42:ce:98:35:6e:a7:8a:42:c1:26:0f:d7:
a8:4a:1f:71:70:57:08:53:2f:3e:63:cd:c7:20:5d:40:47:08:
2f:6a:50:c5:9f:d9:22:70:62:85:8d:0c:f0:3f:f5:46:6b:25:
3f:a6:bc:45:08:c8:e0:c5:20:ea:a9:2d:2b:90:39:14:3c:ee:
f2:ad:eb:10:be:a8:55:87:83:ab:45:61:36:16:bf:d3:e2:77:
b3:e9:fb:e1:65:2e:c9:cb:a4:12:c9:d0:31:fe:b7:59:71:8e:
ac:0e:28:23:e3:c1:20:06:4c:83:1d:34:bb:69:58:15:4b:3c:
22:ed:f1:18:b1:01:b3:c4:8e:a6:79:42:24:02:aa:c7:3f:29:
f0:ce:f7:91:d7:42:5e:86:21:af:de:7f:2d:d1:89:24:b2:c3:
f2:bb:1b:11:c6:b2:f7:b3:a4:f4:88:b4:83:b5:74:6e:1d:44:
56:00:35:c1:19:08:e1:86:73:bf:49:10:55:73:02:90:a6:e8:
c7:57:92:94:92:75:99:83:01:07:87:b9:9a:1c:37:0b:76:29:
03:98:07:72:7d:00:79:fd:bf:58:51:d7:95:c6:57:05:83:7c:
b7:c0:40:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:51 2025 by rpki-client