Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa
File: 0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa (raw, json)
Hash identifier: k+FefGaNlibbtGtr5Aq6DThKW8SPKZcgwMtTZ3i/xpM=
Subject key identifier: D1:B5:6F:84:07:7A:6D:14:ED:A4:C8:8C:59:4E:66:EA:6F:E6:5F:AB
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 0195872565F72EB6E3EA02BBC78239578CAB
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa
Signing time: Tue 11 Mar 2025 21:38:49 +0000
ROA not before: Tue 11 Mar 2025 21:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35489
IP address blocks: 45.133.100.0/24 maxlen: 24
45.133.101.0/24 maxlen: 24
193.8.4.0/23 maxlen: 23
193.8.4.0/24 maxlen: 24
193.8.5.0/24 maxlen: 24
193.8.6.0/24 maxlen: 24
193.8.7.0/24 maxlen: 24
2a0c:7cc0::/29 maxlen: 29
2a0c:7cc0::/48 maxlen: 48
2a0c:7cc2:297::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:87:25:65:f7:2e:b6:e3:ea:02:bb:c7:82:39:57:8c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Mar 11 21:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1b56f84077a6d14eda4c88c594e66ea6fe65fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:ad:ee:87:aa:dc:c6:0d:60:4b:00:d6:d6:
1e:68:e0:1f:ab:45:60:ce:43:d2:56:59:0e:5b:b5:
5e:6c:e6:88:1e:3d:21:e3:8d:7b:87:67:a6:68:5d:
44:1f:a5:81:fa:0d:ba:95:c4:71:46:06:64:51:0e:
f9:4f:9d:70:be:70:84:d8:75:41:00:88:3c:79:92:
56:17:cd:2c:ad:06:c1:e9:04:09:99:53:f4:8a:a2:
0a:d0:ff:5b:2e:ae:c7:df:ca:af:4e:c6:8c:ae:f9:
fa:05:3d:ca:ad:33:ca:b7:97:bf:23:27:4c:74:23:
51:8e:70:7d:b4:d1:da:3c:f0:08:f1:13:df:c0:f4:
2f:88:df:0b:a2:b7:83:8f:56:2a:8d:3f:fc:b0:d9:
25:c2:d7:11:31:7d:2f:f8:2f:60:0a:42:92:dd:db:
9e:31:e2:04:5c:a1:25:36:33:54:02:6f:b8:5a:2f:
c5:01:b0:16:90:ef:0d:33:6b:d9:6e:aa:30:8c:ab:
64:67:48:d0:30:33:db:1e:86:40:47:08:0e:38:5f:
ab:09:98:dc:55:d9:8c:ed:fc:d5:38:35:21:17:60:
1f:ac:07:ad:e6:e2:3f:0f:a7:c9:e3:cc:9b:17:5d:
01:8e:d1:82:51:9d:37:5d:d1:bf:2f:69:0b:49:61:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:6F:84:07:7A:6D:14:ED:A4:C8:8C:59:4E:66:EA:6F:E6:5F:AB
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.100.0/23
193.8.4.0/22
IPv6:
2a0c:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
16:90:d4:b2:f9:cf:65:c3:d1:b4:66:5a:51:2b:ac:36:4b:1b:
16:c3:86:e4:7a:2a:b7:bd:e5:c7:58:31:7f:b1:e9:46:80:d7:
33:21:6a:ed:4f:30:b3:c0:b1:3b:55:a5:4a:f7:af:9e:0a:fa:
b6:ba:49:9a:4e:2d:af:08:1a:6d:0e:ca:d1:c4:3c:28:3d:9e:
61:1a:3d:65:91:8a:15:8e:dd:97:60:45:a6:9e:aa:02:f0:a6:
7c:df:9c:7e:5f:c5:33:5f:d1:86:84:38:33:a6:76:95:76:a6:
27:1e:25:c2:30:6b:79:c7:c9:8b:4c:dc:44:ec:3a:30:b7:77:
58:62:6f:99:20:4a:7c:7e:2f:ca:d0:2e:90:37:98:20:b7:65:
ba:c7:25:22:bf:86:31:93:46:c3:94:51:a1:06:1f:88:c6:9f:
54:6f:cf:41:fb:7c:f6:77:dc:25:8a:3b:61:b6:c1:1c:cc:ef:
54:40:e5:03:bf:4d:0b:34:0e:f4:e4:05:2e:02:de:97:9a:39:
1b:af:65:36:d8:44:09:6b:a3:60:ae:5d:6e:d0:68:99:8a:c0:
a7:b8:0e:f0:40:20:66:fc:1b:ae:46:46:f1:1e:98:5f:1e:3f:
58:d0:bd:77:8d:72:eb:c8:c4:eb:90:3b:d9:6b:63:45:4c:bc:
3b:bd:1e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net