Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/cg3A8o35m_8hDqb8q7_7RpZJWbk.roa
File: cg3A8o35m_8hDqb8q7_7RpZJWbk.roa (raw, json)
Hash identifier: BeneRgXggV9Vi4WHz0BVe0u1BRCc1B2iTIyF12OUqFM=
Subject key identifier: 72:0D:C0:F2:8D:F9:9B:FF:21:0E:A6:FC:AB:BF:FB:46:96:49:59:B9
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0196D822EFB13DA9565921E32DC9EDD0D249
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/cg3A8o35m_8hDqb8q7_7RpZJWbk.roa
Signing time: Fri 16 May 2025 08:08:10 +0000
ROA not before: Fri 16 May 2025 08:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.153.0/24 maxlen: 24
89.150.49.0/24 maxlen: 24
185.162.176.0/24 maxlen: 24
193.17.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:22:ef:b1:3d:a9:56:59:21:e3:2d:c9:ed:d0:d2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: May 16 08:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=720dc0f28df99bff210ea6fcabbffb46964959b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cc:c5:ff:03:e2:0b:a2:f6:a8:aa:b2:47:67:
49:c1:12:80:ee:1c:43:de:f7:92:ac:84:a5:4b:e9:
89:75:4c:dc:b7:c5:49:1c:68:03:b9:fc:2b:18:32:
66:de:39:2a:f9:bd:c2:ff:08:14:f8:d3:04:d0:c4:
9f:ef:55:6a:01:0f:92:1f:c0:77:0a:61:4b:9b:76:
9c:21:93:33:8d:b0:a7:9a:a1:47:a7:be:fa:72:20:
53:c3:7c:bf:73:93:b6:15:75:d2:36:13:b2:e6:63:
b3:44:d4:7f:dd:6e:3d:bb:af:b5:82:a2:05:30:f3:
ad:8d:ef:c0:44:a8:62:f1:11:51:06:a9:26:2d:8d:
f7:fe:61:e2:9a:78:be:9d:1c:a0:af:77:c8:49:13:
f1:ba:4d:1b:69:04:1c:d0:c2:99:17:5e:1e:42:bf:
59:81:a3:2c:06:d7:c5:dc:5c:33:c2:32:22:72:a0:
a8:78:9c:25:e1:fe:82:7e:93:4c:d5:35:09:00:97:
b6:7a:74:50:ad:d6:a6:a0:59:6a:5e:f7:9d:65:4e:
bd:52:d2:a5:9c:52:21:9d:b9:a3:59:30:f9:52:ca:
cf:e5:a8:6e:d8:d6:ef:26:e8:fa:34:e1:c4:1b:53:
72:65:b0:65:f6:5f:7d:05:51:f4:07:e3:fb:a1:3c:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0D:C0:F2:8D:F9:9B:FF:21:0E:A6:FC:AB:BF:FB:46:96:49:59:B9
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/cg3A8o35m_8hDqb8q7_7RpZJWbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
89.150.49.0/24
185.162.176.0/24
193.17.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3a:6c:dd:6e:e6:b8:d4:5f:59:62:17:ab:f9:5c:e5:5b:1d:
2f:26:0c:93:2c:04:ef:1c:9a:48:19:7a:5e:7a:57:da:e8:26:
93:de:19:e9:6f:a4:e8:59:7b:99:f8:e0:91:5c:37:4d:dc:02:
99:80:fa:96:38:ca:c3:d7:3f:b4:7c:46:ac:f9:3e:56:17:73:
af:b9:a8:a5:04:4b:26:f7:df:36:79:b0:14:f0:cf:3b:52:1b:
c9:6d:4a:d9:10:94:35:d9:20:7e:12:c4:18:31:eb:12:5a:e2:
27:f6:12:8b:ae:d4:29:de:a5:4a:11:cb:fc:1f:34:1a:82:7b:
0f:a9:7b:17:3d:29:3c:ad:67:f8:2f:8f:2d:ad:03:fb:0a:d7:
8d:7d:e4:82:97:e7:a8:79:67:4b:d2:95:33:f1:28:c1:7f:70:
7b:e7:b4:62:55:ae:a4:9d:f5:3f:e7:db:eb:6f:87:5f:1a:8a:
ce:b8:a0:ee:4e:da:ae:cb:3f:07:39:be:a3:db:1e:ce:97:f2:
f4:58:36:74:07:e7:57:8e:45:e3:7d:9a:9e:bd:19:ea:6a:d3:
ba:3e:fb:d7:ba:d7:36:f8:fd:22:ee:be:46:ea:c8:3e:23:7f:
d4:bf:4f:1e:ac:f5:81:ca:11:2e:f6:b1:61:0f:f0:ed:75:d1:
a1:9c:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:28:53 2025 by rpki-client