Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/aBfkfMsI6RfN5EaoDQWlcn2H95I.roa
File: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (raw, json)
Hash identifier: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=
Subject key identifier: 68:17:E4:7C:CB:08:E9:17:CD:E4:46:A8:0D:05:A5:72:7D:87:F7:92
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 0194236A1FFDF6D55E78EB0E33ECE392B096
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/aBfkfMsI6RfN5EaoDQWlcn2H95I.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35261
IP address blocks: 45.138.64.0/23 maxlen: 23
45.138.66.0/23 maxlen: 23
193.239.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1f:fd:f6:d5:5e:78:eb:0e:33:ec:e3:92:b0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6817e47ccb08e917cde446a80d05a5727d87f792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:4f:7f:f9:3c:09:2e:6b:71:33:a9:d3:c8:
71:49:f2:e6:f4:cb:2f:c4:81:8a:3e:1d:7e:f1:f2:
84:49:1a:9a:02:73:21:40:04:d2:56:34:33:c4:0c:
b7:9c:54:0d:d1:13:63:8c:6c:e7:4d:87:7e:0a:1a:
96:8f:42:5d:15:5e:0c:6f:7f:d0:fa:58:b8:37:5d:
14:70:a8:4c:cc:b3:c6:c0:62:20:89:e7:87:e3:c5:
a2:80:0e:40:6b:ef:97:49:8a:96:30:1b:fc:dd:cc:
a8:17:31:e8:d8:cf:f3:f5:3c:e2:4f:45:40:00:12:
87:f1:94:cb:74:c5:e8:0d:09:e7:22:74:b4:dd:2f:
b7:d1:05:a5:95:26:86:e3:17:8a:a0:d8:4d:2b:92:
7f:60:69:7a:d2:93:ad:e3:9a:dd:3c:42:d6:75:e0:
24:cb:21:2e:aa:ba:40:2d:3e:9f:29:56:65:aa:3f:
ea:89:cc:2e:27:6e:0b:60:9c:42:bb:bb:ad:6f:09:
9f:52:ca:6d:6d:f7:4f:5b:04:c4:46:43:6d:bf:6e:
49:f4:f5:0b:13:70:bd:19:81:a3:cb:57:e6:93:1d:
f8:cf:34:37:63:a1:db:5f:4b:97:18:c6:4e:6a:90:
30:26:ec:d2:18:4f:3b:00:6e:cf:ea:19:94:53:68:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:E4:7C:CB:08:E9:17:CD:E4:46:A8:0D:05:A5:72:7D:87:F7:92
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/aBfkfMsI6RfN5EaoDQWlcn2H95I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.64.0/22
193.239.212.0/23
Signature Algorithm: sha256WithRSAEncryption
53:1b:f4:c7:52:9f:b9:72:d6:09:67:d9:c7:a2:72:3f:be:89:
18:82:28:f9:b3:9d:83:be:c3:83:94:6e:d2:a9:3b:bc:59:60:
bd:76:20:cc:06:15:2c:82:e2:c0:05:64:34:a1:cb:32:56:87:
a7:31:6f:d7:a2:2e:19:4e:82:5e:68:b4:d2:bb:5b:33:b2:6b:
98:15:82:99:0b:d3:ef:7f:1e:55:7e:9c:01:9e:a8:d8:35:6b:
98:bc:0e:ea:89:4f:2c:9e:37:c5:ae:f9:71:95:4d:c4:3f:65:
33:2f:e5:42:8e:5b:f4:0a:19:91:cc:80:c6:7e:d0:2a:24:d8:
b4:bd:a7:1a:81:0d:3f:d1:9f:57:86:ad:c6:68:04:d3:98:f6:
49:e8:61:0a:24:90:2f:09:f6:2d:f6:6e:2b:93:7a:fb:67:c1:
b8:07:b5:09:4d:16:36:2c:4c:d9:2e:c4:fc:95:ab:49:31:9c:
a2:25:54:f9:d0:e7:e7:4d:11:d1:c0:4f:ee:a4:c5:f8:42:4e:
55:bc:96:66:c1:cb:e2:8f:e1:14:41:bb:da:40:f7:bc:e1:44:
ba:d0:2e:92:ea:a2:3d:04:dd:28:fd:1e:48:4e:56:af:7c:67:
04:54:88:d2:83:9e:5b:d8:55:bf:c2:1f:1c:0e:7d:7e:ca:15:
ee:96:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net