Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/F9CWod6HsfhT_7cNwyegAQvLtv4.roa
File: F9CWod6HsfhT_7cNwyegAQvLtv4.roa (raw, json)
Hash identifier: FwytFrQeraLRHloNcRVAtdoVjnz3pt9CNrkshIDuHKQ=
Subject key identifier: 17:D0:96:A1:DE:87:B1:F8:53:FF:B7:0D:C3:27:A0:01:0B:CB:B6:FE
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 01941FFA63ABE0C30D2599363654280F3964
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/F9CWod6HsfhT_7cNwyegAQvLtv4.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62113
IP address blocks: 45.136.36.0/22 maxlen: 24
185.38.24.0/22 maxlen: 24
194.31.164.0/22 maxlen: 24
2a00:fbe0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:63:ab:e0:c3:0d:25:99:36:36:54:28:0f:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d096a1de87b1f853ffb70dc327a0010bcbb6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:3d:94:05:f0:f3:fd:21:81:4c:1f:0d:a9:
7f:5f:a4:cb:02:1b:2f:ba:cf:80:11:0f:49:4f:6c:
ad:35:f2:4e:7e:bb:43:b9:fa:36:ce:09:36:88:e1:
0d:d6:96:24:c8:63:eb:96:39:59:db:56:be:df:38:
d6:69:ac:90:5f:e8:d3:25:e2:76:5c:d6:e6:03:20:
46:ff:2b:c1:3f:8f:78:43:bd:0c:3d:a4:f5:34:9a:
f5:2e:7e:24:78:01:8e:2f:6d:02:7a:0e:5e:2d:14:
55:55:04:74:63:59:45:7b:b1:62:4c:a3:63:0d:7f:
04:78:65:06:22:8d:c1:92:27:1f:34:4c:d0:22:42:
82:96:29:ea:3f:91:64:01:b8:b7:a9:71:bf:ee:9d:
0c:16:11:f5:e5:f5:43:f3:74:1b:81:8d:50:78:95:
1c:b2:ca:8d:2a:36:7d:e7:dc:66:0a:f5:5e:ee:30:
2d:8b:65:b3:13:6c:98:3d:94:37:72:d2:f5:32:b2:
8e:c4:9e:66:aa:4d:e5:60:af:66:8a:ce:24:21:4c:
f9:20:df:49:52:ba:a4:2d:31:41:4f:5b:6b:1c:d3:
6e:28:ca:a5:ce:92:f5:4e:59:7a:65:6e:a8:03:78:
09:85:66:f4:26:5b:c3:ad:56:a3:9f:e2:84:ee:21:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:96:A1:DE:87:B1:F8:53:FF:B7:0D:C3:27:A0:01:0B:CB:B6:FE
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/F9CWod6HsfhT_7cNwyegAQvLtv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.36.0/22
185.38.24.0/22
194.31.164.0/22
IPv6:
2a00:fbe0::/29
Signature Algorithm: sha256WithRSAEncryption
bb:e7:a8:ca:c2:12:0b:d7:0e:6c:d2:c1:dd:a2:36:98:01:ab:
01:10:30:f6:53:a0:c8:47:97:b1:f2:94:bb:b5:5d:da:d6:f1:
65:d7:14:10:5b:2f:5a:88:07:0a:25:d7:9c:00:87:26:f2:67:
0c:39:78:65:fb:57:f7:b0:7d:1d:aa:79:19:ed:f2:22:d6:af:
32:d7:5f:27:7f:40:46:06:b6:47:27:bd:5e:d8:d4:c5:51:8d:
65:4d:be:f2:7d:64:7f:15:78:40:63:c9:2a:fc:d4:dd:a2:a4:
9b:fa:0e:51:20:c1:ed:45:03:23:13:b3:4f:2d:b1:54:6b:47:
29:ec:92:8d:33:17:f9:13:3c:ee:1f:b3:9d:63:9e:2a:92:64:
b5:d6:74:a7:9e:10:0e:9c:7f:47:36:a6:a4:9d:b1:fe:92:00:
2c:64:0b:b1:28:1e:04:bc:77:00:c0:b6:96:09:84:a4:65:80:
bc:30:6d:75:38:1a:e7:b5:81:5d:8a:f0:f7:af:bd:35:9d:52:
f2:3a:22:c8:6e:80:4e:3c:68:03:16:bd:cd:75:b3:d4:c6:9a:
73:12:41:bb:62:8c:92:f9:f3:ac:e8:8c:27:c9:c9:84:f2:59:
30:09:a4:6b:bf:49:1f:7b:1f:c2:5d:f6:4c:1f:eb:16:28:1b:
80:7d:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:11:24 2025 by rpki-client