Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/9KZb39IEb0WWPyuJulLlRX0ZLfI.roa
File: 9KZb39IEb0WWPyuJulLlRX0ZLfI.roa (raw, json)
Hash identifier: YnpShdCnZX/ire+BXl4T51E6H78mElMjOB6jDczjp6M=
Subject key identifier: F4:A6:5B:DF:D2:04:6F:45:96:3F:2B:89:BA:52:E5:45:7D:19:2D:F2
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 0195C6F6FB5DCB6E6B2943658096F843FDBF
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/9KZb39IEb0WWPyuJulLlRX0ZLfI.roa
Signing time: Mon 24 Mar 2025 07:03:49 +0000
ROA not before: Mon 24 Mar 2025 07:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.136.36.0/24 maxlen: 24
45.136.37.0/24 maxlen: 24
45.136.39.0/24 maxlen: 24
185.38.26.0/24 maxlen: 24
185.38.27.0/24 maxlen: 24
194.31.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:f6:fb:5d:cb:6e:6b:29:43:65:80:96:f8:43:fd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Mar 24 07:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4a65bdfd2046f45963f2b89ba52e5457d192df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:78:d3:e6:79:be:f9:87:2b:2d:ee:7c:b5:
55:66:4e:f7:97:bd:ec:b9:cc:50:57:e7:b7:4b:cc:
5c:c5:02:c8:ef:e8:5f:61:db:39:e7:35:05:a5:17:
75:99:69:cf:56:92:fc:96:e2:d1:7d:63:de:cd:65:
9f:ef:c6:9c:39:b3:da:55:6b:6f:88:67:a8:ac:79:
4c:d2:d6:ee:d6:9e:18:a3:d3:dd:1b:3e:fb:66:41:
a2:91:46:f1:76:fa:ec:d3:82:7f:4f:dc:6a:dc:c0:
13:ae:36:26:52:c4:9e:ee:45:5c:7e:bf:cb:e7:82:
12:ba:94:52:83:31:2a:32:c1:3b:7e:de:31:85:c8:
da:15:75:18:83:ba:fc:ea:6b:05:c3:8b:ed:a2:6d:
d9:81:0f:8f:95:db:a9:19:69:23:6e:43:7f:2a:1b:
40:40:77:54:40:ff:61:b7:04:d5:21:f0:a2:82:2e:
12:0b:76:9e:5c:91:01:23:50:3c:2b:ae:02:a4:97:
00:21:00:7e:66:6f:81:fa:46:48:17:0e:57:4b:86:
72:26:1c:22:1f:0e:ad:d0:29:1c:6a:54:3e:a8:a4:
d5:46:3e:38:93:49:26:69:78:23:c1:c3:63:1e:3a:
33:69:fa:e1:91:f7:58:23:11:31:05:b8:bc:5d:1e:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:5B:DF:D2:04:6F:45:96:3F:2B:89:BA:52:E5:45:7D:19:2D:F2
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/9KZb39IEb0WWPyuJulLlRX0ZLfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.36.0/23
45.136.39.0/24
185.38.26.0/23
194.31.167.0/24
Signature Algorithm: sha256WithRSAEncryption
82:56:6b:a3:c8:97:93:45:a6:1d:9b:1a:db:35:52:f6:a4:5b:
19:18:8c:fb:0f:67:fa:a4:e6:05:56:86:52:b4:e6:27:09:53:
ee:ff:cb:e1:33:a8:89:1f:a7:25:28:b1:8d:59:9c:93:b6:c8:
dc:50:91:11:59:ba:6d:7f:d6:e8:04:eb:10:09:9a:16:37:da:
9e:d1:00:aa:93:a8:cc:3e:80:8a:bd:59:6c:0e:aa:90:c4:d5:
42:e9:7f:07:cf:48:77:ec:38:07:2e:60:23:04:09:50:09:56:
e2:44:73:0c:01:10:54:22:c2:a2:14:6a:62:eb:af:d7:74:db:
8c:4a:d4:76:05:fb:ce:21:21:99:14:2d:f2:46:45:39:02:09:
05:85:be:25:b9:3c:41:a8:2a:88:37:54:d0:52:09:82:ba:8d:
8d:4c:e3:30:0b:07:42:10:bf:14:c1:ae:4f:0d:44:ce:54:8d:
a5:d6:e0:fa:50:ed:1b:5b:c1:d8:8c:cb:5e:ce:61:da:15:ba:
db:45:e3:b0:fb:32:54:ab:3d:7b:5c:0a:f6:24:74:f7:76:93:
0d:b6:87:d7:da:8a:c7:f4:f6:46:79:73:bb:47:ce:d9:b2:06:
18:5b:64:35:bf:9d:e7:3f:f9:26:b9:81:6e:18:a4:bd:9c:b1:
25:ca:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:25 2025 by rpki-client