Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/RUlZLbYGgWXcsTdrQpjEqzld-Qw.roa
File: RUlZLbYGgWXcsTdrQpjEqzld-Qw.roa (raw, json)
Hash identifier: BjakYLfSwBbERmfPPgZfdKvEAOhhbXThCyTm1bb6gC4=
Subject key identifier: 45:49:59:2D:B6:06:81:65:DC:B1:37:6B:42:98:C4:AB:39:5D:F9:0C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 019442475800B1B5F4702D40ED41EFF33971
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/RUlZLbYGgWXcsTdrQpjEqzld-Qw.roa
Signing time: Tue 07 Jan 2025 19:39:19 +0000
ROA not before: Tue 07 Jan 2025 19:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.132.80.0/22 maxlen: 24
91.238.92.0/24 maxlen: 24
91.239.149.0/24 maxlen: 24
91.244.198.0/24 maxlen: 24
176.105.228.0/24 maxlen: 24
185.177.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:47:58:00:b1:b5:f4:70:2d:40:ed:41:ef:f3:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 7 19:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4549592db6068165dcb1376b4298c4ab395df90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:18:5d:c3:ac:10:02:b7:33:1c:da:7b:a2:
ef:e2:08:4b:21:eb:72:95:54:44:47:37:60:b5:58:
64:bf:15:7c:33:b3:30:de:db:a3:4a:cf:a4:a0:05:
4d:c0:df:f9:56:fc:39:73:01:cc:d8:8d:1d:e2:68:
74:f3:30:e4:0b:e8:5b:d4:0c:c1:bd:53:42:12:56:
6a:29:29:be:da:f6:18:85:42:8f:ad:9a:50:b1:68:
ab:9f:f1:1a:59:3b:c0:8b:a5:49:3c:9c:76:02:72:
94:b0:bd:d2:90:40:ca:29:24:97:51:54:01:3d:9a:
1d:b2:ba:ad:75:87:51:e4:77:e8:66:e6:67:c4:a8:
75:0b:63:8f:2d:62:b3:61:25:8d:5e:3b:cb:13:71:
f6:24:30:78:3e:0f:36:0e:31:66:b7:0b:fb:9c:81:
96:f0:68:17:85:4c:52:96:07:bc:fa:df:ea:da:20:
57:59:ab:7c:22:3b:13:62:68:c6:43:1b:a6:58:b8:
c2:e4:d2:b8:b0:7e:a3:26:3d:f8:c9:90:db:45:4b:
e0:ee:c7:84:ba:36:6c:27:b7:4b:e3:0c:01:9a:1c:
b4:97:18:18:98:d7:34:af:25:9d:06:4a:b3:d9:af:
8b:e7:af:ce:30:d1:16:f4:8b:98:8e:44:7e:ce:8f:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:59:2D:B6:06:81:65:DC:B1:37:6B:42:98:C4:AB:39:5D:F9:0C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/RUlZLbYGgWXcsTdrQpjEqzld-Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
91.238.92.0/24
91.239.149.0/24
91.244.198.0/24
176.105.228.0/24
185.177.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:94:6e:07:49:02:d9:bb:eb:c6:44:c6:a5:6c:f1:c3:ed:0b:
f1:26:e7:a7:86:64:5e:ba:37:f5:4b:98:d6:04:d9:5e:4a:fe:
9c:b0:18:9b:e6:b8:7e:d5:ba:32:37:fa:5c:d2:9c:b6:23:c4:
4c:5c:12:27:9a:77:0e:0b:45:f7:4d:a8:57:9e:30:65:9d:11:
4f:80:62:16:23:bb:1b:de:de:89:53:94:ce:06:65:a9:d8:91:
a8:e1:4b:bf:91:f1:df:3f:27:56:87:ca:af:35:5c:d9:75:cf:
a8:a2:4c:c1:f2:d6:26:f9:57:67:57:7c:91:00:a7:6a:02:7d:
26:dd:59:ea:97:9f:d1:8c:43:06:7d:0c:fa:c2:e3:ae:55:1c:
4b:f2:51:a6:1d:55:55:f9:e3:f7:6a:42:03:60:22:01:6b:bb:
9d:62:5b:76:42:1b:a6:b7:31:c9:2e:14:c9:9c:7a:7d:d1:27:
ee:31:fc:5e:d1:ac:25:99:af:f6:1c:b7:64:c3:bf:c1:75:92:
59:0e:92:7d:a3:09:e4:79:9c:92:bf:de:c7:23:f7:b9:63:dc:
63:58:22:00:aa:7b:50:dd:71:ad:4c:03:97:d6:93:1e:4a:11:
ec:82:cd:09:c6:86:5c:fb:e2:a7:79:3d:8f:b6:35:ba:a0:9e:
eb:a0:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:07:01 2025 by rpki-client