Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/xWzDGbGdsrrm1c2Pxry9cr5ZwR4.roa
File: xWzDGbGdsrrm1c2Pxry9cr5ZwR4.roa (raw, json)
Hash identifier: IxtLyTYQXJjldHvpyfN+jxxPmjF6mTW0+d00L2iI1CQ=
Subject key identifier: C5:6C:C3:19:B1:9D:B2:BA:E6:D5:CD:8F:C6:BC:BD:72:BE:59:C1:1E
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0193DAF1DE0B9105B5E4F96535F37DF9780D
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/xWzDGbGdsrrm1c2Pxry9cr5ZwR4.roa
Signing time: Wed 18 Dec 2024 18:05:04 +0000
ROA not before: Wed 18 Dec 2024 18:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 45.91.6.0/24 maxlen: 24
45.133.152.0/24 maxlen: 24
45.133.154.0/23 maxlen: 24
45.135.224.0/24 maxlen: 24
45.145.18.0/23 maxlen: 24
45.150.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:f1:de:0b:91:05:b5:e4:f9:65:35:f3:7d:f9:78:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Dec 18 18:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c56cc319b19db2bae6d5cd8fc6bcbd72be59c11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:ed:63:e4:96:ca:3c:ab:57:d2:03:69:90:
71:01:21:b9:d5:76:6b:1f:9e:a4:55:3f:d3:9d:43:
37:9f:89:b4:11:37:a5:89:7c:9b:1b:ab:f9:61:dd:
89:86:d5:cf:05:7a:57:a8:ea:17:ea:f0:3f:a9:38:
05:2c:89:2f:57:2d:dc:be:6a:98:31:07:92:52:5b:
4e:94:54:67:f5:94:6e:f4:8a:d9:a5:62:13:e6:4e:
02:e9:cf:8f:d2:34:4a:dc:56:70:ad:78:85:69:3b:
b2:79:0a:30:b0:55:c6:bf:55:ca:be:60:ee:68:ea:
20:7c:0e:2c:3f:6e:9a:d2:40:cf:65:00:2c:56:d3:
81:db:59:43:f9:aa:89:1c:f9:6d:53:cb:e8:b8:23:
5a:7b:af:b2:ae:47:3a:fc:d8:ae:28:58:53:45:c4:
8f:eb:3a:d1:c3:f3:36:69:99:21:51:48:28:00:9c:
a5:69:b5:7f:89:c6:4f:97:e6:14:c8:bd:64:8e:b6:
6a:b1:41:62:0b:5f:c8:55:2e:6f:9f:a3:0e:2a:49:
b2:a3:9d:9f:9e:b1:6a:35:aa:d5:c5:08:d9:2c:b9:
09:02:4e:dc:26:ff:c3:a4:f9:49:59:2b:fe:7c:4d:
a9:63:73:68:b1:3f:d5:3e:25:2c:77:b2:23:b3:5c:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:C3:19:B1:9D:B2:BA:E6:D5:CD:8F:C6:BC:BD:72:BE:59:C1:1E
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/xWzDGbGdsrrm1c2Pxry9cr5ZwR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.6.0/24
45.133.152.0/24
45.133.154.0/23
45.135.224.0/24
45.145.18.0/23
45.150.82.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:0e:e7:3e:18:a3:cc:7a:eb:39:79:21:39:96:ca:d1:2a:95:
15:25:02:ab:ef:c0:c7:98:07:b0:60:80:5b:d7:dc:0f:26:36:
99:2d:b1:1b:2f:a7:d6:2c:eb:12:76:1f:0f:4e:32:02:d0:a9:
71:82:5e:86:3f:af:65:17:69:bc:aa:f6:2f:d6:b7:28:b7:40:
0f:0c:eb:b8:39:c6:53:81:25:1a:d9:ef:f3:7f:67:7f:cf:f1:
b0:58:d7:54:c4:18:b5:df:ac:3f:1d:70:52:31:e5:94:5c:3f:
96:a2:37:42:94:f4:af:37:14:75:60:e7:7a:d1:0c:73:f9:e5:
b9:a1:34:d2:4c:7c:10:5a:18:57:bb:fa:2b:7a:d4:83:0c:ab:
37:bf:27:5d:d9:c8:a1:b3:eb:a9:bd:e4:f6:b4:c7:6e:9f:e7:
f6:68:0e:85:a7:c7:83:bc:5d:1b:9c:2e:ee:63:ce:9d:65:fd:
f1:27:72:60:c9:db:68:02:29:fa:a0:41:1f:21:5c:c0:50:7c:
4e:36:01:f8:16:28:c7:de:c3:a7:b8:f5:ea:37:ef:14:63:d1:
e5:b2:00:1c:f7:2e:b6:1d:90:30:1a:9e:a3:71:ab:ac:42:88:
02:8b:70:e6:4b:84:00:29:30:9c:3e:11:4f:0f:1a:1c:ff:e0:
6b:9a:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:31 2025 by rpki-client