Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CfJ9xEDV4pQ-4UesQjtXS_UNjTk.roa
File: CfJ9xEDV4pQ-4UesQjtXS_UNjTk.roa (raw, json)
Hash identifier: iHwRsiNm9D6CNS7YSp5y3V4eYKoV5H7s0T3DvsWBta4=
Subject key identifier: 09:F2:7D:C4:40:D5:E2:94:3E:E1:47:AC:42:3B:57:4B:F5:0D:8D:39
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01962F113A611EB85788A9A44C748406E8AF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CfJ9xEDV4pQ-4UesQjtXS_UNjTk.roa
Signing time: Sun 13 Apr 2025 12:13:00 +0000
ROA not before: Sun 13 Apr 2025 12:13:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 45.66.230.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:11:3a:61:1e:b8:57:88:a9:a4:4c:74:84:06:e8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 13 12:13:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09f27dc440d5e2943ee147ac423b574bf50d8d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:60:65:12:de:8f:1f:10:2e:5c:60:aa:d2:
87:68:ec:89:18:fd:9e:1a:92:56:50:07:9a:2d:e6:
c2:18:91:38:c5:32:ea:ff:0b:95:a6:30:db:b6:be:
ca:18:d8:91:e8:7e:2c:62:06:38:91:7c:21:6c:11:
54:7d:0e:86:63:f6:a9:5e:65:08:6f:06:a5:57:a0:
42:0e:55:60:e7:59:42:e5:d8:29:13:64:a6:6b:6a:
c2:39:78:55:18:a5:36:01:56:54:9b:10:69:a4:d3:
f1:51:a8:08:f7:0d:85:f7:46:ae:61:9e:b6:e2:5f:
2b:55:90:8a:89:95:5c:2d:72:67:23:ef:54:70:fd:
c8:0a:79:49:5a:31:64:7b:91:b2:13:a4:18:df:0c:
4d:c5:dd:3d:3e:b0:f1:e7:cf:63:c7:d0:c0:cf:55:
2c:71:2e:a7:62:43:5d:f2:6f:a9:eb:10:80:83:fe:
70:8e:c4:43:a0:49:35:ed:07:7a:2a:01:19:10:75:
d2:78:a0:19:25:89:65:2c:01:cf:c2:dd:06:71:7c:
30:d3:2b:e2:bf:03:bf:2c:5e:38:38:7b:a0:15:00:
04:1c:db:82:3a:62:e7:cf:39:af:0e:5c:23:6b:cc:
ba:a4:e8:52:5e:d9:8d:c6:ce:f3:87:b9:b6:1d:92:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:7D:C4:40:D5:E2:94:3E:E1:47:AC:42:3B:57:4B:F5:0D:8D:39
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CfJ9xEDV4pQ-4UesQjtXS_UNjTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.230.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
141.98.6.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:7a:de:aa:6d:55:b2:0a:1e:61:ad:f6:4e:4e:e9:66:27:68:
1b:4e:eb:7f:52:77:41:7a:13:bc:e1:a7:b7:f5:fb:b7:02:2d:
89:4d:09:82:3c:3b:07:29:76:82:dd:7d:d8:1b:ae:ac:7c:7c:
a9:90:5a:29:9b:1c:7e:db:17:40:40:68:a6:26:9f:7c:ba:70:
25:1f:fd:51:53:79:3f:98:b3:25:6a:c1:d3:a2:40:d2:ce:72:
e9:52:49:d0:92:eb:15:a0:ba:3d:92:ec:71:52:9c:a1:e5:73:
a3:65:8d:b7:2c:a0:6b:60:56:84:27:23:ed:e4:7d:0b:f9:e7:
c0:3b:99:cf:d6:94:b1:78:d6:c3:5f:79:27:19:21:a2:6e:6f:
c5:cb:a0:14:75:89:2c:ea:11:80:2b:f4:bb:18:e5:03:36:36:
95:3e:ed:41:56:a3:6d:d6:79:16:49:ea:c7:6d:53:07:f1:ee:
82:98:3e:f0:cd:df:41:61:43:a6:21:02:d7:01:5f:c2:dd:66:
8a:95:4d:01:96:9f:cd:52:a8:be:db:21:35:10:3b:f4:96:74:
e2:7d:1e:63:fb:7f:81:81:66:41:69:bb:fe:fd:ac:94:19:23:
b5:bf:4f:78:93:6a:42:d6:4b:2d:60:cb:11:f9:78:72:d9:14:
12:d3:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net