Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/kRCybM9VaGWIeTbBQEOq57VCpqc.roa
File: kRCybM9VaGWIeTbBQEOq57VCpqc.roa (raw, json)
Hash identifier: +N3wO9O44cICmuzQB+KKoC0SjTiKGq0APYatpiAUZBc=
Subject key identifier: 91:10:B2:6C:CF:55:68:65:88:79:36:C1:40:43:AA:E7:B5:42:A6:A7
Certificate issuer: /CN=cbc07a8aae53c641e4c5b82449dd390b08c1cd9e
Certificate serial: 018CC348E8DC79120E0E25344142F963FC97
Authority key identifier: CB:C0:7A:8A:AE:53:C6:41:E4:C5:B8:24:49:DD:39:0B:08:C1:CD:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8B6iq5TxkHkxbgkSd05CwjBzZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/kRCybM9VaGWIeTbBQEOq57VCpqc.roa
Signing time: Mon 01 Jan 2024 04:29:44 +0000
ROA not before: Mon 01 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199783
IP address blocks: 185.45.252.0/25 maxlen: 25
185.45.253.0/24 maxlen: 24
185.45.252.128/25 maxlen: 25
2a01:81e0::/48 maxlen: 48
2a01:81e0:1::/48 maxlen: 48
2a01:81e0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e8:dc:79:12:0e:0e:25:34:41:42:f9:63:fc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc07a8aae53c641e4c5b82449dd390b08c1cd9e
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9110b26ccf556865887936c14043aae7b542a6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:19:e0:1c:14:af:fb:25:45:35:42:de:87:
0f:66:04:bc:de:48:5d:85:0a:f8:cf:39:db:fc:60:
fa:19:ee:6a:49:ae:6f:e6:1c:78:25:63:b9:f3:77:
2f:ce:02:eb:6f:9c:4a:38:8e:7b:7a:d2:ba:bb:04:
81:c1:37:b7:79:2b:24:03:9f:ba:ea:f7:7c:c6:cf:
a5:ba:41:0e:ed:fd:d7:f5:cd:3e:bd:5a:0c:5e:aa:
32:3f:7f:3d:cc:b5:3f:5a:18:f7:4f:5f:33:4a:b4:
12:f9:74:26:0b:ab:0b:a2:bf:d3:c9:81:7c:7d:97:
82:e0:43:a4:68:3c:31:1d:47:8b:6d:a2:98:b4:ed:
24:7d:4a:b6:f6:7b:49:56:19:7b:5f:90:89:29:8b:
27:ce:a0:78:08:37:5d:47:29:1e:fe:0a:be:a4:85:
61:d7:af:87:5e:b6:20:4f:9e:ca:24:88:50:59:a2:
47:7f:1b:13:24:53:6d:3a:db:e2:fe:fa:19:26:24:
bf:dc:ce:32:68:3c:26:e6:80:0c:ea:03:be:6d:2a:
35:fb:1f:c4:12:a3:e9:d4:b7:d4:2b:68:b6:fd:df:
ef:d5:a7:9f:e9:88:39:b7:aa:53:7b:ea:84:21:f9:
0f:af:39:53:54:2a:59:77:0d:7e:86:a5:b6:f6:33:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:B2:6C:CF:55:68:65:88:79:36:C1:40:43:AA:E7:B5:42:A6:A7
X509v3 Authority Key Identifier:
keyid:CB:C0:7A:8A:AE:53:C6:41:E4:C5:B8:24:49:DD:39:0B:08:C1:CD:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8B6iq5TxkHkxbgkSd05CwjBzZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/kRCybM9VaGWIeTbBQEOq57VCpqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d8112a-788f-4805-b1e7-b722684c6a22/1/y8B6iq5TxkHkxbgkSd05CwjBzZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.252.0/23
IPv6:
2a01:81e0::-2a01:81e0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:a5:b1:1f:09:e5:38:5c:a8:8e:33:e8:b6:7f:df:84:fa:12:
67:ac:ed:72:8b:40:ac:7b:bf:75:37:ad:15:50:6a:70:fa:9e:
63:77:9b:f7:0f:28:9a:1f:eb:ea:b9:87:e7:c0:dc:d3:95:e2:
b9:4b:52:bf:b6:82:36:e4:26:59:16:8e:65:0e:9d:95:76:c1:
00:5c:1b:ed:2f:b2:a8:be:61:52:01:80:67:40:c1:21:02:60:
30:61:70:17:51:bf:5c:fe:d3:3e:9b:85:99:f2:a9:9d:f8:53:
53:96:28:85:95:81:a8:03:00:72:69:88:92:57:c6:30:51:91:
9b:81:5a:76:6b:ad:43:49:bc:4e:60:3c:b4:e3:49:10:2a:77:
12:c9:e0:e5:56:43:ef:89:44:51:ac:99:a9:20:a5:7c:e9:30:
07:fd:29:02:1e:f9:d5:90:c8:6e:c9:94:12:f3:35:82:4f:07:
a2:fc:09:10:53:59:88:bf:5d:2b:17:d8:5a:d6:c0:e2:dc:a8:
ca:b9:e4:98:60:de:21:ba:97:96:1d:e1:2b:f0:31:25:1b:40:
85:db:c1:86:e7:8d:63:bc:e3:f9:a4:e6:5f:ba:ab:87:5c:53:
b7:08:9f:b0:9d:8e:56:25:f2:10:f8:1f:67:f5:23:7f:cd:bb:
23:0d:ec:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:59:15 2025 by rpki-client