Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/MtzNm3AFaiQ9hwZitYp07ne4ByI.roa
File: MtzNm3AFaiQ9hwZitYp07ne4ByI.roa (raw, json)
Hash identifier: RnaPmJCIZPKxOjqc9sF1aBMH5/cdwTLmLsfA5zpCvRw=
Subject key identifier: 32:DC:CD:9B:70:05:6A:24:3D:87:06:62:B5:8A:74:EE:77:B8:07:22
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0194B7CC4B2B99AD85287BF20AEFA4645898
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/MtzNm3AFaiQ9hwZitYp07ne4ByI.roa
Signing time: Thu 30 Jan 2025 15:20:06 +0000
ROA not before: Thu 30 Jan 2025 15:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 45.138.12.0/22 maxlen: 22
152.89.28.0/22 maxlen: 22
193.135.137.0/24 maxlen: 24
193.135.157.0/24 maxlen: 24
193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:cc:4b:2b:99:ad:85:28:7b:f2:0a:ef:a4:64:58:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 30 15:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32dccd9b70056a243d870662b58a74ee77b80722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:1c:6d:ef:d8:a6:0a:e4:96:b1:ba:83:af:
47:17:70:8d:a1:33:12:e4:13:3e:cf:8e:6f:ea:8f:
a5:c5:42:c3:7f:6c:4c:7c:c2:93:63:db:ef:c9:a9:
1e:e7:c5:8f:ac:65:ce:b0:55:36:4d:68:e9:19:94:
9a:8a:08:16:05:85:7c:8f:ac:b9:37:b5:b1:95:a1:
7a:d9:74:98:2e:20:94:73:85:b4:db:08:32:4d:47:
18:f7:1a:2e:6a:fb:a3:57:6a:93:1d:70:30:b5:2e:
f2:1c:dc:7e:4b:0a:8a:72:a8:72:2f:70:08:13:47:
83:bd:d5:e1:c4:2d:35:a3:b7:98:d8:4c:d6:d7:8d:
e1:3b:78:c7:ab:e1:d7:a3:03:82:4c:cf:5e:70:ef:
9b:81:05:ae:33:4b:ab:1e:83:a7:e2:78:8e:af:ab:
84:ac:48:49:e9:64:98:07:66:06:f0:b0:43:ac:8f:
22:83:0e:a6:47:cd:ca:1f:a8:0a:af:00:1b:ea:3c:
76:c5:ae:38:46:5b:f8:af:92:6f:b5:a1:af:78:52:
3b:8a:cc:90:af:9f:3b:69:f1:63:43:71:a4:72:60:
3b:46:a2:85:20:ee:9c:b0:01:06:ef:9c:1c:3f:27:
29:96:01:82:b1:c5:6a:f3:44:b9:87:65:66:41:f5:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:CD:9B:70:05:6A:24:3D:87:06:62:B5:8A:74:EE:77:B8:07:22
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/MtzNm3AFaiQ9hwZitYp07ne4ByI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
152.89.28.0/22
193.135.137.0/24
193.135.157.0/24
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a5:d6:83:0e:6a:aa:27:db:2a:3e:ee:05:5d:07:7e:58:5d:
d1:81:c5:d8:d8:e8:8c:05:f6:44:d7:82:f4:1f:97:57:79:51:
e4:73:aa:a0:e3:f9:c6:52:e1:fe:7d:13:7d:3c:b6:df:dc:62:
23:60:12:a2:a6:53:10:e9:88:cb:9a:e3:0a:e9:c2:ef:5b:34:
84:56:69:2a:30:e0:4b:3a:86:6d:4a:de:34:ba:a6:8e:48:4a:
97:0e:35:ab:88:5f:c5:6a:d0:30:da:57:11:c4:64:33:42:cf:
2f:db:79:b5:10:ff:7d:85:b6:fa:03:c5:2a:df:28:81:3c:60:
13:4c:87:3f:99:e4:b1:f7:a2:a4:78:64:8a:63:c3:79:c1:30:
48:2e:28:70:85:6e:5d:76:da:d0:10:5e:ed:90:0c:b0:95:93:
2f:32:f4:e5:14:f6:a3:7f:7e:60:ae:77:32:73:44:8f:93:98:
9e:35:48:c9:d3:16:8a:4f:ef:02:68:1e:20:08:25:64:9e:35:
57:2d:ba:88:96:bc:72:af:a1:b5:49:90:58:c1:a9:2d:59:9c:
e3:bb:23:09:59:d3:ee:16:e4:c5:d5:92:ba:27:ce:18:ef:03:
a4:89:5e:45:1d:d6:a6:f3:46:8c:48:a4:5b:4c:ef:a8:1e:34:
6c:a3:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:21 2025 by rpki-client