Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WxQKM9h9AjlRHS_5TMYC6VmBveg.roa
File: WxQKM9h9AjlRHS_5TMYC6VmBveg.roa (raw, json)
Hash identifier: kz8whmQDHDEo5HjJAWi7XhXO8iWlaV6gu8aE4hKPQpI=
Subject key identifier: 5B:14:0A:33:D8:7D:02:39:51:1D:2F:F9:4C:C6:02:E9:59:81:BD:E8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D73279D54A2C2A18CF74111FBBDE7E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WxQKM9h9AjlRHS_5TMYC6VmBveg.roa
Signing time: Wed 01 Jan 2025 21:48:13 +0000
ROA not before: Wed 01 Jan 2025 21:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 45.142.122.0/24 maxlen: 24
185.17.0.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
185.174.136.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
194.67.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:32:79:d5:4a:2c:2a:18:cf:74:11:1f:bb:de:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b140a33d87d0239511d2ff94cc602e95981bde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:a0:65:43:25:f9:4b:c0:56:68:50:57:25:
dc:75:45:e9:ce:c8:a5:ed:c7:29:e4:36:ad:ed:f3:
ca:99:45:38:09:ac:2a:71:78:51:25:d4:7e:b5:2f:
ad:f0:7e:c5:4f:61:a0:03:e8:c7:e4:23:6d:9a:cb:
9c:a2:49:a3:40:9e:fe:5b:9a:dc:d1:f0:36:19:cc:
64:d0:c7:8c:6f:fd:c9:ea:ef:96:87:90:e1:7e:e7:
55:a2:2b:12:e7:d6:2b:74:87:cd:ca:3b:f8:d7:05:
ca:ff:d2:9f:96:5f:6d:6a:a3:23:51:7f:e4:c2:9e:
d3:4c:8b:2c:73:09:6e:23:a3:92:ff:15:a8:7e:ff:
6f:87:ec:d7:1c:d0:b2:b2:9b:74:27:db:0f:87:cd:
c5:e0:97:96:9b:a5:57:1f:cb:2c:48:a2:ff:23:69:
52:0d:c5:be:a2:b2:b6:0b:d6:c2:c7:6b:c2:8e:fd:
15:b8:77:6b:09:29:d5:4b:84:4d:fa:92:d2:65:69:
0c:d6:11:5d:d9:52:ef:ae:35:80:9f:ce:df:88:80:
e3:bf:9c:0c:49:d7:71:18:7b:f3:e3:19:d6:08:86:
46:58:26:de:a5:e9:09:0a:a8:97:90:ab:ed:04:b7:
4a:e0:af:45:48:82:9a:fe:ec:f7:cd:e6:20:9b:8f:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:14:0A:33:D8:7D:02:39:51:1D:2F:F9:4C:C6:02:E9:59:81:BD:E8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WxQKM9h9AjlRHS_5TMYC6VmBveg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.122.0/24
185.17.0.0/24
185.112.83.0/24
185.174.136.0/24
185.229.66.0/24
194.67.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:06:f1:3a:56:09:7e:2f:e3:67:e9:ae:8d:88:74:c6:49:9a:
41:fd:e7:ac:bc:e1:f2:99:1e:55:86:e0:04:48:e1:9f:5a:21:
e4:98:3d:13:6d:13:4e:a6:74:dc:30:3c:02:fc:6d:3e:00:96:
14:a8:fd:66:86:c1:e4:7f:21:c0:82:33:67:12:41:60:3e:16:
44:b2:2d:59:bd:a8:d7:80:51:35:68:89:38:f0:31:bd:bc:63:
b1:96:b9:36:0e:c6:0e:8d:a0:70:e0:ae:40:5a:d2:b7:f2:32:
71:94:51:60:b3:08:12:32:27:a6:45:d9:06:53:a1:13:f2:53:
2b:e2:82:55:bb:4c:eb:36:34:80:71:92:35:2a:a4:f9:2a:0a:
2e:2d:7c:62:15:d0:14:aa:0d:fe:c1:66:14:b1:23:61:88:0e:
c0:9c:ba:6e:18:dd:ec:82:a5:44:57:91:21:c3:e4:e4:8b:5c:
66:dd:41:da:1c:97:11:f9:63:10:95:04:24:62:14:39:bf:89:
89:bd:92:f4:1a:db:6f:b9:97:14:67:83:05:56:75:e7:9d:ea:
ea:c5:c3:3d:a7:a4:f8:78:f6:bb:d3:6d:1a:c9:5e:c1:64:24:
7b:20:1c:e2:e3:ec:d0:3d:ab:f2:47:9b:71:2c:d9:bd:dd:82:
47:72:84:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:45 2025 by rpki-client