Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Gxv0roMYAnOhQR-aunNnb6s5ZhI.roa
File: Gxv0roMYAnOhQR-aunNnb6s5ZhI.roa (raw, json)
Hash identifier: pEFVHLhRXiNyHuejrhl4uI0CwK1ew3oE/mftnutwQxQ=
Subject key identifier: 1B:1B:F4:AE:83:18:02:73:A1:41:1F:9A:BA:73:67:6F:AB:39:66:12
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019586BB2500C622093231190DA458F5C9E0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Gxv0roMYAnOhQR-aunNnb6s5ZhI.roa
Signing time: Tue 11 Mar 2025 19:42:46 +0000
ROA not before: Tue 11 Mar 2025 19:42:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.12.61.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.141.178.0/24 maxlen: 24
93.190.246.0/24 maxlen: 24
2a07:f300::/29 maxlen: 29
2a0f:6d80::/29 maxlen: 29
2a0f:7d03::/32 maxlen: 32
2a0f:e940::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:bb:25:00:c6:22:09:32:31:19:0d:a4:58:f5:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 11 19:42:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b1bf4ae83180273a1411f9aba73676fab396612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:97:06:98:f7:7d:10:b6:e1:81:ec:57:88:
bf:50:55:4d:bb:36:c3:35:9f:76:cd:4b:6f:09:b0:
9a:ba:75:41:6f:38:18:78:6b:dd:b6:d5:fc:a9:11:
06:fc:22:8d:d9:18:2f:27:07:8e:ec:f6:3b:51:41:
b9:5a:ce:f0:d2:2b:e0:6a:27:c4:54:20:4f:bd:3f:
53:72:b6:1e:f9:4b:3f:10:0e:a2:de:5c:3e:2f:d2:
3f:50:a3:28:ae:64:73:55:75:bd:e3:07:31:4e:18:
61:66:de:79:e8:a7:25:9e:4b:61:98:59:56:4d:04:
dd:ef:9c:7a:15:a7:6b:a3:1a:65:1f:64:33:ad:2d:
7f:30:8d:d9:d2:10:cf:4c:04:51:91:24:bb:8a:3f:
8a:54:0a:d2:94:c7:de:d2:8e:b1:a2:2d:12:92:b1:
d7:13:42:6f:a5:67:a5:64:00:ff:d8:8c:49:71:04:
81:8b:31:49:d4:75:4c:29:08:f6:fd:8d:12:2e:01:
16:f1:d7:27:33:b5:76:82:f2:5e:b5:9b:20:80:33:
07:cf:25:a4:93:06:cf:6a:ff:77:27:1f:5e:22:e3:
46:15:20:fe:18:d6:20:96:59:b7:47:ac:3d:ff:c5:
80:ed:1c:0f:a9:26:58:9f:23:e3:71:0f:77:a4:ae:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:F4:AE:83:18:02:73:A1:41:1F:9A:BA:73:67:6F:AB:39:66:12
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Gxv0roMYAnOhQR-aunNnb6s5ZhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.61.0/24
45.128.79.0/24
45.141.178.0/24
93.190.246.0/24
IPv6:
2a07:f300::/29
2a0f:6d80::/29
2a0f:7d03::/32
2a0f:e940::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:33:69:50:1d:9a:6e:63:b7:9a:2b:71:1c:73:86:b9:e6:95:
7c:27:3d:53:b3:27:1b:5c:88:86:b5:47:33:56:5e:fd:bd:49:
37:ff:89:6f:b0:c0:39:ed:38:2f:52:12:f9:22:f7:e1:3f:59:
70:f2:4f:50:ab:9d:90:1d:f0:4e:d0:b2:dd:02:75:ec:f1:d2:
a3:92:23:76:7c:90:13:2c:df:ef:73:82:fc:a1:17:1d:d7:dd:
07:2f:c1:06:a3:5b:42:00:07:b3:1d:05:b5:32:35:93:c2:c1:
6d:36:90:6c:0c:6e:1a:19:a2:19:85:6c:4e:c5:aa:d3:98:94:
2b:67:5e:88:b7:48:2e:be:c4:c8:d5:fa:18:36:3c:9c:bc:63:
82:4b:1d:63:72:1d:9e:af:31:9f:1f:c0:1b:fd:c1:20:6a:10:
d2:c1:78:43:a1:fa:52:9a:06:07:64:91:9a:62:6c:20:22:95:
6c:74:6e:3d:f1:17:4c:52:ab:62:57:76:72:f6:45:8f:83:a2:
d9:47:1d:d0:c2:d5:a2:24:57:42:6d:4e:53:65:a6:5c:84:2b:
93:0a:a5:f7:aa:13:d5:c4:f5:db:03:2b:1a:64:62:6a:b0:20:
9a:a7:39:42:bc:03:fc:25:b8:4f:77:4d:92:63:dc:c1:71:72:
09:44:ab:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:36:57 2025 by rpki-client