Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/reJuUEdNMNkiruYWbQhm1kIeSmI.roa
File: reJuUEdNMNkiruYWbQhm1kIeSmI.roa (raw, json)
Hash identifier: 8CJvb9ghaaouJew5YVZ3ZoroGTuk3UEvbHXvmzvplXY=
Subject key identifier: AD:E2:6E:50:47:4D:30:D9:22:AE:E6:16:6D:08:66:D6:42:1E:4A:62
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0196CE78442261078213DD1FF32E18465C51
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/reJuUEdNMNkiruYWbQhm1kIeSmI.roa
Signing time: Wed 14 May 2025 11:05:10 +0000
ROA not before: Wed 14 May 2025 11:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.153.0/24 maxlen: 24
89.150.49.0/24 maxlen: 24
193.17.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:78:44:22:61:07:82:13:dd:1f:f3:2e:18:46:5c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: May 14 11:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ade26e50474d30d922aee6166d0866d6421e4a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:09:c7:76:39:7c:33:94:a2:4d:96:9d:c5:
9b:00:91:17:95:51:15:82:89:e5:b3:67:93:05:70:
6a:4b:80:bf:46:61:a5:9b:92:96:e0:9a:e0:23:10:
d0:f5:59:82:75:91:5a:c8:03:2b:77:b2:3f:43:29:
80:f9:11:cb:4a:62:fb:e1:8b:48:6f:39:b0:f3:14:
c1:99:ab:63:9c:4f:c0:a7:0d:74:02:ba:74:c8:ed:
b0:e4:b8:a8:06:0f:33:fd:90:81:9b:40:4a:f6:ae:
b5:ab:f6:0f:a7:47:6e:c7:43:2c:55:bf:74:18:38:
15:3f:4b:8e:1c:8e:c8:79:18:b0:70:dc:e5:43:3f:
3e:a1:5b:e0:4f:9f:3a:3e:7f:53:77:67:e1:f6:15:
70:27:26:c3:bf:1a:88:fd:a3:0a:88:13:8a:66:96:
f3:7e:9d:79:9d:fa:f2:af:ce:91:85:ba:67:9f:fb:
fc:64:f4:b6:99:d8:5b:99:c0:74:1e:c4:49:fa:8f:
8d:76:4f:36:06:0e:56:26:ea:6f:f2:1f:8e:3d:81:
f3:7b:c6:34:c2:94:de:19:c8:3d:ad:98:fc:94:7f:
14:db:96:0b:83:db:46:f2:11:e1:4a:fa:9c:2f:e6:
af:dd:99:c9:24:06:24:a0:ba:52:92:84:db:7d:d2:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E2:6E:50:47:4D:30:D9:22:AE:E6:16:6D:08:66:D6:42:1E:4A:62
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/reJuUEdNMNkiruYWbQhm1kIeSmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
89.150.49.0/24
193.17.95.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1e:e2:cb:b6:cd:4c:db:ab:3e:dd:a0:ad:57:8d:3c:f0:f7:
21:7b:11:a5:36:00:dd:ce:0b:38:87:80:01:d4:1f:4f:1d:7e:
fc:99:bf:60:83:85:bb:98:7c:10:e9:0e:15:b3:22:df:81:64:
56:d2:28:41:d3:24:1c:84:50:0c:61:01:e2:7f:55:9b:68:41:
a1:76:03:f5:da:4b:84:70:38:68:fc:19:47:16:82:91:3b:c1:
55:8f:9e:46:26:2f:36:fa:e2:ba:dd:81:f8:be:ad:38:f7:86:
7a:f4:de:65:13:eb:98:c7:3f:31:9b:a6:ca:b7:bd:28:b2:1a:
fa:7d:b4:3f:ca:67:4c:44:17:59:50:35:8a:25:39:c8:75:5c:
db:bd:df:e7:e8:83:93:53:91:ab:9b:46:54:5b:3e:f8:0d:e6:
04:85:b3:9f:b4:2d:38:91:73:b5:39:70:b6:11:bb:a9:52:0b:
fd:09:7b:16:08:a8:85:3e:75:11:d5:e2:67:1d:6d:04:92:12:
f3:89:cf:9b:21:4b:a7:1a:b6:6c:47:c6:6e:e0:8d:90:ca:ff:
64:75:62:fb:bf:d0:bd:28:3e:e2:5c:cf:7e:52:67:a3:f1:d1:
33:49:5e:4d:bb:8f:96:26:8f:9b:6c:e0:22:9e:28:fe:48:70:
89:e8:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:13:31 2025 by rpki-client