Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/M9qNJvC_kcwpwY04nD9scW455qU.roa
File: M9qNJvC_kcwpwY04nD9scW455qU.roa (raw, json)
Hash identifier: 3RMJRIwbxzvUUPiZWVxoeQuqeF3pwso/hbH6wuXsN8I=
Subject key identifier: 33:DA:8D:26:F0:BF:91:CC:29:C1:8D:38:9C:3F:6C:71:6E:39:E6:A5
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 019425FC468C576338D9A6BF76C231CDF132
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/M9qNJvC_kcwpwY04nD9scW455qU.roa
Signing time: Thu 02 Jan 2025 07:47:57 +0000
ROA not before: Thu 02 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207903
IP address blocks: 45.81.168.0/24 maxlen: 24
185.88.64.0/22 maxlen: 22
185.88.64.0/24 maxlen: 24
185.88.65.0/24 maxlen: 24
185.88.66.0/24 maxlen: 24
185.88.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:46:8c:57:63:38:d9:a6:bf:76:c2:31:cd:f1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Jan 2 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33da8d26f0bf91cc29c18d389c3f6c716e39e6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:ab:c7:9f:c6:be:e5:c1:00:ee:34:46:ca:
19:01:a3:fd:4d:f6:74:2b:18:0f:f1:22:30:5d:67:
97:33:12:68:50:2b:b9:7f:be:d0:7f:3b:54:2a:1a:
0b:87:5b:57:f9:0d:6f:6c:a2:37:d6:62:0a:d6:0b:
f0:d5:14:0c:ea:42:69:7a:59:9a:fc:16:65:62:c2:
61:b3:ab:82:43:e9:be:35:f0:c7:63:e0:cc:2b:99:
91:7d:e9:8a:92:98:90:21:d0:02:13:5e:00:53:8d:
11:e1:19:7c:e6:28:23:97:3d:85:a0:70:b1:c3:f9:
b9:6b:1b:3a:7b:d8:65:51:b1:44:0a:f8:70:92:af:
e0:0a:8e:98:8c:16:97:c1:b9:b5:e7:33:3f:85:c2:
2d:3d:40:18:4b:f6:22:d9:0d:74:bd:08:0e:e9:35:
80:2d:d5:50:ca:2e:ec:48:c5:06:2f:0a:75:e4:dd:
ec:a4:19:f2:2e:a8:d4:67:9c:93:d9:c6:6d:0a:87:
78:2e:98:5c:0e:f9:e2:4c:ea:8d:43:7a:7f:1d:18:
d4:f6:bb:8a:ec:66:7b:67:82:6a:80:ef:4b:d6:ed:
a8:81:af:b9:f1:e3:74:bd:69:b9:84:8a:2d:3f:2a:
27:ee:51:25:68:a8:28:c4:2e:5a:f2:1a:ec:71:00:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:8D:26:F0:BF:91:CC:29:C1:8D:38:9C:3F:6C:71:6E:39:E6:A5
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/M9qNJvC_kcwpwY04nD9scW455qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.168.0/24
185.88.64.0/22
Signature Algorithm: sha256WithRSAEncryption
13:35:25:40:b2:35:aa:67:02:13:5c:c7:de:25:29:3b:13:87:
11:b4:b0:8b:db:31:aa:5e:5e:36:73:a1:25:4f:9a:e4:b5:3f:
7c:06:85:77:60:44:0a:1b:cc:4b:51:e8:f5:f9:32:1a:09:45:
d4:8f:0b:63:5b:55:4a:9e:d2:08:a5:5f:83:de:c7:d5:ab:f6:
d6:6d:8c:5c:30:38:28:67:d1:d0:cb:82:0e:f9:1b:0c:53:dd:
e4:b0:22:c1:2e:8f:14:88:52:0e:ba:54:ca:4b:96:3e:ab:f1:
3d:b6:14:75:25:5c:60:7d:34:ae:b1:3b:44:1c:81:f6:c2:1e:
bb:5e:7d:52:9a:3f:d1:40:3f:bc:03:c6:bd:c6:db:63:85:1b:
12:09:4d:61:86:0c:2d:88:bd:1b:98:a1:fd:8d:96:92:32:04:
52:97:c4:02:4e:a5:41:c0:27:b6:36:90:93:9c:54:b3:13:93:
bc:09:2b:66:3b:d4:93:44:fd:17:0e:76:b4:35:75:1c:a1:fe:
68:db:ed:71:23:75:29:78:35:fa:98:28:17:3e:ac:3e:09:3a:
d7:90:0d:71:06:10:a1:a7:af:ff:3f:53:58:a3:ae:b8:9a:67:
30:07:8e:c9:17:e4:77:5c:f5:3d:d3:d8:0f:0f:a2:8a:a5:b8:
dc:85:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:22:09 2025 by rpki-client