Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0OZ5El1RLnSXQQ_VoufdI0VPM3g.roa
File: 0OZ5El1RLnSXQQ_VoufdI0VPM3g.roa (raw, json)
Hash identifier: xP2ywJVi1fJBxCgLAPs2ct7ihVNuJ9qBpzpLCpL++PA=
Subject key identifier: D0:E6:79:12:5D:51:2E:74:97:41:0F:D5:A2:E7:DD:23:45:4F:33:78
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A5A54E38F002370D16F120E47F680
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0OZ5El1RLnSXQQ_VoufdI0VPM3g.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398397
IP address blocks: 45.12.161.0/24 maxlen: 32
45.13.246.0/23 maxlen: 32
185.120.20.0/23 maxlen: 32
185.207.177.0/24 maxlen: 32
194.34.231.0/24 maxlen: 32
195.85.41.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5a:54:e3:8f:00:23:70:d1:6f:12:0e:47:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0e679125d512e7497410fd5a2e7dd23454f3378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:79:95:25:0f:12:65:b5:fb:9e:1e:df:46:
f2:5e:76:1d:46:a3:92:e5:b8:a0:5d:f9:31:ad:3e:
de:f6:bd:37:2b:82:a7:95:3f:da:4c:3a:22:c3:52:
c7:40:6c:f8:29:2d:9a:6b:0b:17:a0:6b:0e:37:76:
05:bd:90:b1:6d:2a:f2:15:04:9b:93:f3:5a:cf:1d:
d5:53:63:59:dd:99:70:bc:cf:72:7c:77:30:99:70:
ca:00:8b:c8:82:2a:7c:9f:fe:2f:88:33:c1:29:70:
0b:50:41:b2:38:95:94:72:a6:3f:a5:34:f6:11:17:
48:1c:23:58:19:66:c8:28:57:29:42:c0:26:a9:6e:
81:0a:46:27:92:e6:57:d2:d0:a2:59:6a:ec:84:7f:
ac:b5:de:d1:7d:60:09:25:28:80:fa:2e:91:98:ff:
3c:9a:1c:aa:7c:14:19:f1:2e:21:1a:1a:da:83:73:
2e:d8:ae:c7:aa:f4:5d:de:b5:70:6f:f9:4f:17:f5:
a5:3a:b9:79:59:ef:cd:6e:c1:d2:5a:7c:dd:c5:2f:
bf:8a:3e:95:c5:df:81:e9:a7:e6:20:ae:54:97:59:
26:f8:0f:2f:de:36:75:e1:ff:5f:bf:c3:62:8b:89:
73:e2:08:05:45:7d:fb:d8:c9:77:c4:2a:eb:9b:29:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:79:12:5D:51:2E:74:97:41:0F:D5:A2:E7:DD:23:45:4F:33:78
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0OZ5El1RLnSXQQ_VoufdI0VPM3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
45.13.246.0/23
185.120.20.0/23
185.207.177.0/24
194.34.231.0/24
195.85.41.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ac:29:b1:85:b4:c9:f8:ff:80:d8:b5:27:22:f0:6a:12:d8:
25:cf:ae:90:01:16:63:09:94:48:37:bb:fa:a1:f8:da:b2:92:
a2:cc:b6:0b:22:9b:05:e9:61:5a:44:d3:4a:be:8a:eb:38:6b:
95:e6:e5:13:05:62:b3:ee:84:e0:22:56:69:48:ea:ea:c8:c3:
6c:5b:bc:8d:38:0f:71:5f:fe:d4:50:01:8c:55:72:34:fa:1d:
48:b0:25:bd:31:f2:0e:e8:1c:b9:d3:4e:6c:01:6e:64:60:13:
13:26:5b:ac:c7:8f:ab:a9:7c:ed:02:24:a9:ee:01:05:72:3d:
f9:5e:e8:07:03:5b:82:50:3e:d8:8f:0d:20:6c:9b:58:f7:5b:
08:32:17:56:73:ad:97:3e:c7:ce:0c:6d:cf:8c:67:fc:bf:2c:
d6:7d:ad:c8:61:a9:f4:0c:42:93:bb:3a:48:aa:f4:e9:de:af:
5a:24:74:98:77:f1:7d:f9:de:97:88:57:81:3b:45:0a:6d:1c:
73:97:e4:db:15:bc:e4:18:ed:52:ef:62:8a:1b:1f:95:02:6b:
54:48:c8:82:cf:74:1e:0f:94:46:b8:6e:80:d0:7d:72:ff:a7:
ce:b2:53:02:30:de:31:0b:35:6f:41:4e:1d:ed:c9:83:3e:b6:
cf:7b:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:07 2025 by rpki-client