Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pnnpmqdFExNa8-1U56jYhRjPhs0.roa
File: pnnpmqdFExNa8-1U56jYhRjPhs0.roa (raw, json)
Hash identifier: HnpaIbN0gKp58d0HvSHHDvFRsmGAm51bQWMXAkduSFo=
Subject key identifier: A6:79:E9:9A:A7:45:13:13:5A:F3:ED:54:E7:A8:D8:85:18:CF:86:CD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019537FA9221EA4B44816F88BF82F0DBCAD7
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pnnpmqdFExNa8-1U56jYhRjPhs0.roa
Signing time: Mon 24 Feb 2025 12:42:03 +0000
ROA not before: Mon 24 Feb 2025 12:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.157.0/24 maxlen: 24
45.144.226.0/24 maxlen: 24
185.192.69.0/24 maxlen: 24
185.198.240.0/24 maxlen: 24
185.198.243.0/24 maxlen: 24
185.217.117.0/24 maxlen: 24
188.213.203.0/24 maxlen: 24
193.218.35.0/24 maxlen: 24
213.109.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:fa:92:21:ea:4b:44:81:6f:88:bf:82:f0:db:ca:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 24 12:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a679e99aa74513135af3ed54e7a8d88518cf86cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:06:3c:1b:c9:48:64:24:56:c0:8e:93:38:
42:cc:3a:51:dd:ce:83:03:44:9a:da:27:f0:d8:41:
f2:d2:26:1e:88:81:e4:4e:a7:91:bd:f1:66:1e:b8:
1c:bc:30:7d:bb:fd:76:71:7d:ba:dc:69:76:15:1b:
dc:04:af:46:69:ca:45:3f:38:5d:74:bc:13:1f:f6:
1e:70:31:8c:d4:5e:41:d7:40:ca:cc:94:04:66:19:
44:d8:72:60:64:5d:af:43:9b:23:07:47:0e:0d:1f:
06:a5:c0:dd:8e:56:c8:98:9a:cc:57:d7:50:92:42:
1d:98:9a:bb:92:04:66:dc:63:d6:c7:35:f0:7b:53:
58:60:43:82:3b:28:bd:4e:e6:70:ee:6b:fe:1b:fd:
a3:26:b5:37:52:6b:7d:4e:18:c4:7d:5b:4c:8e:ee:
58:ed:b4:5f:8c:18:3d:63:19:90:90:9a:55:09:6a:
40:96:52:fb:91:69:e4:aa:25:f6:f9:4c:62:dd:bd:
59:06:04:52:00:70:ee:1c:6a:51:74:e2:e9:d8:7d:
30:d6:0a:72:1c:a7:6a:24:c6:77:d6:b8:bd:c1:3e:
49:8e:2e:80:b5:5d:f8:f9:5d:67:ed:f6:31:1b:35:
8d:72:f1:61:d0:b1:78:3d:ad:3b:29:26:f0:55:e7:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:79:E9:9A:A7:45:13:13:5A:F3:ED:54:E7:A8:D8:85:18:CF:86:CD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pnnpmqdFExNa8-1U56jYhRjPhs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.157.0/24
45.144.226.0/24
185.192.69.0/24
185.198.240.0/24
185.198.243.0/24
185.217.117.0/24
188.213.203.0/24
193.218.35.0/24
213.109.151.0/24
Signature Algorithm: sha256WithRSAEncryption
71:fc:fe:17:ca:73:d2:7e:0d:81:c4:81:9d:68:e9:f6:3e:5c:
f2:54:eb:ac:27:57:f4:56:34:52:b4:89:c4:25:19:76:3e:9d:
d3:30:5e:cc:7e:c2:99:f5:27:91:4c:5e:57:39:5d:20:4e:f9:
eb:bd:b5:30:63:97:4f:9f:79:f1:58:a1:8f:50:b9:66:17:90:
68:f5:95:7d:e4:e0:35:13:10:98:5c:46:82:f3:26:b0:0a:e9:
c4:fd:20:bc:97:e6:24:00:9e:5e:94:78:29:a7:5e:8d:43:ed:
d3:2d:f4:4b:6e:b7:b0:0a:15:2b:44:98:df:a8:85:9e:23:81:
ab:3b:f3:e5:eb:26:32:4b:8d:a2:59:25:e1:e1:42:00:a4:dd:
4c:f0:dd:85:71:dc:dd:2e:6b:9c:38:a9:fc:a2:c2:b4:be:30:
b4:0e:49:32:ab:62:cb:53:64:a2:c8:f2:fd:69:10:07:0b:45:
b1:dd:f9:4b:b9:9e:d1:63:9d:d6:da:86:2b:50:04:9e:d9:5b:
3e:2a:9e:c8:21:a3:2b:af:b3:d7:63:99:61:35:63:37:74:15:
74:24:40:96:3b:e4:45:96:41:2f:ff:44:9a:04:13:8c:e8:96:
03:2c:fa:73:7e:06:11:3c:60:7a:69:31:84:88:20:01:e6:82:
fd:9e:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:17:50 2025 by rpki-client