Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/4ztGIasVEwEbakF0ec-7K0e5IU4.roa
File: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (raw, json)
Hash identifier: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=
Subject key identifier: E3:3B:46:21:AB:15:13:01:1B:6A:41:74:79:CF:BB:2B:47:B9:21:4E
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 019424B3B31C20431C626307FB0E022DFA77
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/4ztGIasVEwEbakF0ec-7K0e5IU4.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201155
IP address blocks: 45.143.212.0/22 maxlen: 24
45.157.224.0/22 maxlen: 24
185.84.4.0/22 maxlen: 24
2a05:a1c0::/29 maxlen: 48
2a0f:6cc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b3:1c:20:43:1c:62:63:07:fb:0e:02:2d:fa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e33b4621ab1513011b6a417479cfbb2b47b9214e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:04:9b:09:8b:35:88:2c:95:09:cc:bb:9a:
d3:54:18:8d:9a:90:f6:59:f4:d7:16:c9:ab:db:01:
5e:29:ba:20:75:29:da:29:16:99:72:46:a3:c6:ca:
5d:d9:3b:d8:f6:14:f9:d0:33:80:da:2f:ba:4b:9f:
3e:5d:50:40:d2:77:21:d9:c4:d5:31:2a:9d:62:78:
7e:6c:9e:6e:8e:7f:67:45:78:6d:84:3a:c8:b8:fd:
74:97:50:88:99:d5:4c:d6:66:06:47:27:af:c8:69:
77:85:6d:db:0f:3a:bf:12:3e:64:d4:44:50:83:9d:
b4:7e:a6:dd:82:26:7b:aa:c2:a4:a8:ab:f3:da:eb:
9b:0d:0d:50:5d:af:20:80:de:0f:21:69:ba:3e:7e:
a2:33:4c:2a:df:63:9e:6a:0e:59:a9:76:69:d8:0b:
2d:85:d4:1f:31:98:de:2d:59:f5:0d:d8:f2:4b:43:
55:d6:6a:4e:00:7a:b6:e9:0a:4e:70:33:37:20:f2:
60:ee:56:a3:ce:db:e3:42:30:19:a3:6c:91:98:f4:
28:f9:14:d1:69:89:2b:ec:1a:c6:6a:86:b4:c5:ac:
1e:75:a1:b9:ca:08:ee:bd:eb:60:53:fe:48:53:20:
d6:9f:dd:40:3d:14:cd:06:44:f6:ad:13:10:c5:45:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3B:46:21:AB:15:13:01:1B:6A:41:74:79:CF:BB:2B:47:B9:21:4E
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/4ztGIasVEwEbakF0ec-7K0e5IU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.212.0/22
45.157.224.0/22
185.84.4.0/22
IPv6:
2a05:a1c0::/29
2a0f:6cc0::/29
Signature Algorithm: sha256WithRSAEncryption
14:a9:a7:d2:2f:03:d7:5a:97:fe:29:40:c0:96:9a:80:ba:b3:
a4:8d:97:53:10:58:05:b9:99:5f:29:08:6d:78:18:08:8c:ab:
98:37:3c:7f:58:4a:39:3e:f5:76:a1:87:c8:b8:0e:42:97:4e:
49:ef:af:eb:b6:40:ba:ee:9d:71:38:04:0c:c4:2a:de:26:ef:
98:50:a3:83:64:21:9e:d8:8f:67:6b:06:2b:03:e1:66:7d:47:
72:cb:75:6a:4d:cc:4b:51:33:81:d0:e8:b6:23:03:c0:2f:db:
29:88:72:8b:55:fc:f5:1c:dc:5f:6c:5e:c6:2b:f7:a5:16:5d:
48:b9:74:99:dd:39:94:53:99:20:c1:80:44:11:8b:1a:d8:c6:
ce:08:b3:01:c3:f8:0b:72:53:f0:aa:ca:5f:47:06:b6:66:dd:
e5:94:e5:4d:4f:ee:ea:b6:c2:e2:15:8a:9b:3b:85:90:af:f9:
67:4f:51:d7:7a:44:6c:16:1a:4b:31:77:86:ba:a3:d7:1a:b8:
6c:e5:14:43:cd:38:d6:23:19:ae:d7:8b:61:43:85:80:dd:83:
40:9c:ee:2d:bb:ce:71:fb:1e:45:8e:d2:60:b0:de:20:77:51:
ae:da:78:a7:be:8f:c6:9a:d0:56:72:d2:8b:2c:1b:a0:43:68:
89:7e:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:30 2025 by rpki-client