Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/MT4hr9PSkUajZkci1pWS9v2orok.roa
File: MT4hr9PSkUajZkci1pWS9v2orok.roa (raw, json)
Hash identifier: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=
Subject key identifier: 31:3E:21:AF:D3:D2:91:46:A3:66:47:22:D6:95:92:F6:FD:A8:AE:89
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 01942368FA8686CA132CEE478B02C14F043A
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/MT4hr9PSkUajZkci1pWS9v2orok.roa
Signing time: Wed 01 Jan 2025 19:47:49 +0000
ROA not before: Wed 01 Jan 2025 19:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134589
IP address blocks: 145.34.0.0/21 maxlen: 24
145.34.4.0/24 maxlen: 24
145.34.8.0/21 maxlen: 24
145.34.32.0/21 maxlen: 24
145.34.32.0/24 maxlen: 24
145.34.128.0/21 maxlen: 24
145.34.136.0/21 maxlen: 24
145.34.144.0/24 maxlen: 24
145.34.145.0/24 maxlen: 24
145.34.148.0/24 maxlen: 24
145.34.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fa:86:86:ca:13:2c:ee:47:8b:02:c1:4f:04:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Jan 1 19:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=313e21afd3d29146a3664722d69592f6fda8ae89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:f7:20:61:0f:7a:0b:54:9a:46:4b:c3:5a:
2d:ea:a4:46:fa:a2:64:84:65:c5:82:51:10:e5:e8:
06:04:38:b9:6c:51:90:56:b2:d7:df:2b:fe:00:d7:
5e:9d:24:5e:82:f1:07:0a:1f:c0:59:12:c6:f7:77:
9d:2b:20:1f:2b:44:26:29:8f:a5:54:99:54:f9:20:
0d:8a:d5:14:19:97:5e:13:48:2d:e0:c3:bc:0d:2b:
7e:fe:06:3d:6c:0f:90:33:1a:b2:32:1d:88:66:26:
f2:a7:e0:93:87:1c:72:41:9e:66:fe:b3:87:3f:18:
fd:72:ae:c7:87:5e:7b:ee:a5:9d:c8:a9:e6:22:1b:
b1:df:f5:f9:3b:68:29:06:d6:fd:ca:4f:57:d9:c4:
6f:aa:2f:ef:81:01:8f:64:56:13:49:41:cb:ad:6a:
19:ec:d3:83:9f:d9:24:2e:a5:a6:1e:ba:6d:e5:24:
dc:a6:e4:d0:aa:12:25:79:c7:6f:5b:24:cc:63:89:
4a:f7:ae:09:62:dc:81:f1:07:80:3f:b4:24:fc:63:
29:28:d5:bd:96:f7:67:8e:cb:c4:a4:28:2c:51:9b:
66:15:a3:19:64:de:ca:4f:5e:c1:70:97:c1:ff:ba:
37:1c:97:06:ba:02:2e:31:9f:29:86:8c:86:ea:7d:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:21:AF:D3:D2:91:46:A3:66:47:22:D6:95:92:F6:FD:A8:AE:89
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/MT4hr9PSkUajZkci1pWS9v2orok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.34.0.0/20
145.34.32.0/21
145.34.128.0-145.34.145.255
145.34.148.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:bf:68:c1:2f:1e:df:0a:55:3a:56:bf:89:32:b6:25:e3:69:
55:ae:a3:4f:65:f6:34:bd:e1:27:d4:a9:2b:a5:49:3b:8f:86:
89:05:4c:ab:4b:fa:59:27:a6:93:01:85:bf:b6:20:c8:da:6a:
9e:bd:14:24:bc:8e:c4:a5:c1:c1:65:96:67:82:46:71:de:8a:
0e:15:5c:77:b2:e0:6d:bd:18:6e:f3:fb:a8:1e:b0:76:3d:37:
a2:ec:7b:a7:e6:d3:77:68:69:66:01:1e:7c:35:1a:df:2a:e0:
fb:0f:bd:4b:bf:9e:86:b1:2d:9e:93:b3:05:4d:f4:cf:04:3e:
6e:4a:97:a3:5c:69:ea:6a:2a:64:d7:b3:03:e7:aa:ca:3c:cd:
19:8e:21:f4:71:17:79:fc:64:7b:39:92:91:38:78:ca:d2:aa:
1b:f8:60:df:f3:a4:9e:10:75:5b:f8:ed:19:86:5d:8a:97:67:
7f:d3:eb:76:ca:87:c8:3c:47:7c:9c:89:dc:3b:b4:e6:c1:ad:
ee:87:36:f9:ae:17:9e:78:23:42:47:d5:8b:8e:e4:34:e9:d5:
af:74:87:0e:75:2d:75:f1:7b:55:9b:c3:f7:a7:02:25:10:f9:
3e:18:be:87:42:a1:92:3d:6e:7e:9d:a2:3b:ee:c3:37:f7:38:
76:98:16:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:16 2025 by rpki-client