Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/bUoZvbmgcraJKvVfwugDf_XV1qI.roa
File: bUoZvbmgcraJKvVfwugDf_XV1qI.roa (raw, json)
Hash identifier: KM7cAoksI+SfSyprwj6veh21z+OW6NvV+vKykqT89Lw=
Subject key identifier: 6D:4A:19:BD:B9:A0:72:B6:89:2A:F5:5F:C2:E8:03:7F:F5:D5:D6:A2
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018D595947B9A5E2B3AD574F8355BE52F878
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/bUoZvbmgcraJKvVfwugDf_XV1qI.roa
Signing time: Tue 30 Jan 2024 07:50:39 +0000
ROA not before: Tue 30 Jan 2024 07:50:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34568
IP address blocks: 45.157.137.0/24 maxlen: 24
77.87.248.0/21 maxlen: 24
84.246.120.0/21 maxlen: 24
185.217.192.0/22 maxlen: 24
193.28.228.0/24 maxlen: 24
193.138.81.0/24 maxlen: 24
194.116.234.0/23 maxlen: 24
2a01:1f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:59:47:b9:a5:e2:b3:ad:57:4f:83:55:be:52:f8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 30 07:50:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d4a19bdb9a072b6892af55fc2e8037ff5d5d6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:0e:52:62:f2:cf:13:b8:67:c9:9f:ee:ef:
2b:5d:22:c2:18:f7:08:89:4a:68:28:ad:a6:f7:82:
1f:a4:20:6c:d7:ed:d8:7e:4d:03:d1:db:32:0e:d7:
5d:b7:e2:b4:0b:4b:71:bb:f2:f3:fe:52:55:7e:71:
18:93:b6:02:25:05:d9:a5:44:cf:83:84:56:aa:d6:
c6:6d:97:77:d9:25:29:16:80:50:37:dd:d5:08:5f:
01:6f:2a:54:33:74:a6:ad:9e:07:66:c5:0e:49:6e:
e1:56:19:55:d7:e9:ec:46:47:0b:2f:c3:da:76:73:
44:a7:af:d9:50:68:79:de:c6:38:bd:1f:fb:d0:95:
f1:46:0b:70:8f:30:56:8a:38:ce:fb:d7:6b:36:0e:
61:35:92:9a:47:3f:88:7d:29:bc:89:6c:ca:e6:16:
7d:3d:0b:d9:b4:1c:83:89:f9:6c:72:16:10:39:0e:
9e:26:0a:53:45:96:bf:df:13:c7:91:51:09:6d:44:
0d:fa:de:bd:fa:dd:ad:a2:97:c1:02:93:b1:b8:bf:
5f:34:11:1d:43:49:a0:e3:ea:c8:7b:9b:63:ae:f2:
00:cb:d7:a1:41:d9:bb:68:a9:e0:d7:55:7c:ff:41:
64:67:c4:8e:89:38:43:a1:44:5e:2f:81:40:e3:47:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4A:19:BD:B9:A0:72:B6:89:2A:F5:5F:C2:E8:03:7F:F5:D5:D6:A2
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/bUoZvbmgcraJKvVfwugDf_XV1qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.137.0/24
77.87.248.0/21
84.246.120.0/21
185.217.192.0/22
193.28.228.0/24
193.138.81.0/24
194.116.234.0/23
IPv6:
2a01:1f8::/32
Signature Algorithm: sha256WithRSAEncryption
1b:73:f5:11:11:4d:94:19:e9:8d:16:74:47:60:48:5c:ab:de:
fd:77:44:d2:0e:84:a4:79:8f:94:10:f2:25:cb:cb:37:40:ec:
6e:63:11:30:6b:73:f1:d1:d9:54:1b:4c:5a:f5:b9:37:2d:fa:
b2:63:59:b8:59:e0:90:d0:da:51:4f:e0:cd:75:61:9d:95:79:
d3:ac:75:9c:cf:03:98:60:44:12:4d:51:74:79:f1:48:94:2f:
42:fa:f1:09:67:f9:c2:1a:54:e0:36:58:8c:8b:c9:d9:e0:35:
45:69:43:02:7b:93:9c:56:62:09:63:55:9f:cb:28:ad:8d:fe:
fb:4f:4c:a3:3c:6b:27:4f:bf:1c:07:54:1f:91:3a:de:dd:f0:
d4:6d:3a:f1:dc:57:b4:48:d7:ac:11:52:af:98:05:2b:61:7a:
c1:7f:b6:c3:32:da:40:4c:04:e8:b2:f6:8a:aa:a7:25:a9:3d:
79:1d:27:64:43:87:f2:97:cc:62:8c:e4:b3:66:76:60:1c:87:
6c:eb:be:04:da:a1:6d:ab:c7:90:25:10:99:cf:a0:7b:69:33:
4c:cb:c4:5b:83:ea:24:38:7a:9c:c4:12:1b:c5:73:ba:dd:48:
13:6a:9a:30:ff:d0:35:d4:4f:dc:7b:05:d1:77:6a:e3:3c:8a:
55:bb:f3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:57 2025 by rpki-client