Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/M2mOMQLtFaBtBAq51rKwx5mar9g.roa
File: M2mOMQLtFaBtBAq51rKwx5mar9g.roa (raw, json)
Hash identifier: fsRRSj5eCOYCu+4tgdCSFS2tSzIACANnUkdawUpalXw=
Subject key identifier: 33:69:8E:31:02:ED:15:A0:6D:04:0A:B9:D6:B2:B0:C7:99:9A:AF:D8
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 019423D721864D3A16FFFF46C113BB1BA770
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/M2mOMQLtFaBtBAq51rKwx5mar9g.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 45.85.216.0/22 maxlen: 24
45.89.140.0/22 maxlen: 24
2a0e:cb80::/29 maxlen: 29
2a12:3e80:100::/48 maxlen: 48
2a12:3e80:400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:21:86:4d:3a:16:ff:ff:46:c1:13:bb:1b:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33698e3102ed15a06d040ab9d6b2b0c7999aafd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:df:3d:84:55:d3:9b:d7:c1:8a:16:4b:d3:
57:bd:b9:aa:ae:29:cc:84:3e:68:d4:de:d7:53:8d:
29:a0:4b:cd:ee:f8:4b:3b:84:81:73:16:3b:cc:49:
40:c0:96:73:3d:d5:2e:09:26:f4:1c:3b:5b:2e:89:
2c:6c:03:88:17:85:7b:d0:55:e6:d2:46:a7:5b:83:
66:fc:a7:68:f4:2b:36:6f:c4:9f:eb:59:b4:7f:61:
40:1b:23:45:81:66:5e:4d:83:9b:46:13:84:6b:e0:
fa:ed:0f:fd:6e:df:12:b4:c8:c1:ef:0e:83:3a:c1:
02:b4:cc:14:89:83:c5:9f:68:2d:e4:fc:79:71:97:
51:39:9e:34:c3:41:f5:5b:fa:bb:0a:96:2e:fd:da:
4d:df:69:3b:91:ec:35:d6:42:6d:4f:3d:d2:8e:b9:
e2:43:7b:c2:e6:74:bd:a2:f0:83:1c:a7:86:b5:13:
57:0d:41:aa:58:57:3b:34:d7:7f:ae:93:dd:2d:a0:
1c:86:cc:35:85:ee:32:99:97:0a:32:16:64:78:98:
b7:7b:23:f8:40:6f:1f:c5:cb:18:57:4a:15:1f:b1:
34:02:0e:b1:5b:ae:f2:ba:65:eb:16:e5:07:ec:dc:
2f:98:d6:24:19:b6:ac:16:cc:19:02:02:6c:d9:7b:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:8E:31:02:ED:15:A0:6D:04:0A:B9:D6:B2:B0:C7:99:9A:AF:D8
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/M2mOMQLtFaBtBAq51rKwx5mar9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.216.0/22
45.89.140.0/22
IPv6:
2a0e:cb80::/29
2a12:3e80:100::/48
2a12:3e80:400::/48
Signature Algorithm: sha256WithRSAEncryption
83:3b:a0:b0:35:d2:25:4f:d9:b2:6b:2d:df:b0:13:8e:b1:d5:
25:05:6c:8f:64:b1:32:1b:8a:e0:22:af:08:f1:29:48:45:8f:
c2:6a:ff:ee:b8:33:b8:8d:b4:29:23:b6:6e:14:85:d1:93:73:
d8:a8:bc:a7:b1:c8:dc:ba:43:f6:d9:4b:11:e1:c6:0f:31:0c:
1b:9f:b9:89:e7:e8:f7:c3:03:6e:1c:e7:af:2d:96:0e:eb:bf:
3a:7e:41:03:35:bc:37:f7:d7:2a:bb:d5:7e:1c:23:7a:73:a5:
35:cb:4c:09:1a:4a:bb:03:2b:4f:10:5d:2a:1d:2b:18:5d:e4:
ff:05:6c:54:5e:e0:2e:2e:e9:4c:23:59:1e:1d:41:81:22:dd:
24:b5:ab:74:6e:b6:85:76:cc:89:4f:df:77:71:94:07:67:48:
ce:f6:f3:d3:a8:ab:0b:8f:79:63:86:90:84:af:7d:fc:89:f4:
07:e7:e4:8b:a9:a4:1c:d9:61:4e:45:af:d9:a1:6b:54:a1:2f:
e1:20:ed:b9:11:c1:3c:ea:31:11:56:bf:34:9b:1b:d9:5a:05:
69:77:da:85:37:0b:2c:e7:38:87:20:17:f7:c7:7d:03:ee:af:
e0:5a:17:e3:a3:9e:73:59:0d:b2:dd:b8:20:4c:86:5c:d3:c1:
20:f4:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:42 2025 by rpki-client