Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/C33FXqC7uQt2qAUvryfzquScd9A.roa
File: C33FXqC7uQt2qAUvryfzquScd9A.roa (raw, json)
Hash identifier: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=
Subject key identifier: 0B:7D:C5:5E:A0:BB:B9:0B:76:A8:05:2F:AF:27:F3:AA:E4:9C:77:D0
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 0194981AE34C5F0C69072DAA7BC51D645ED0
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/C33FXqC7uQt2qAUvryfzquScd9A.roa
Signing time: Fri 24 Jan 2025 11:38:06 +0000
ROA not before: Fri 24 Jan 2025 11:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50326
IP address blocks: 45.158.176.0/22 maxlen: 24
185.101.240.0/22 maxlen: 24
185.227.220.0/22 maxlen: 24
195.191.28.0/23 maxlen: 24
2a0c:ce00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:1a:e3:4c:5f:0c:69:07:2d:aa:7b:c5:1d:64:5e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: Jan 24 11:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b7dc55ea0bbb90b76a8052faf27f3aae49c77d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:f5:ac:94:e2:e7:47:4d:ea:cd:a1:8f:6e:
ff:21:6a:62:51:68:3c:0b:b9:1c:5b:d9:48:bc:ab:
7f:44:09:89:58:a3:e3:f0:c9:c5:4d:f2:c1:5a:2a:
7c:de:e6:b4:e2:17:a4:8f:d8:d8:da:3d:b2:a9:4d:
32:0d:8c:35:77:c5:d7:f5:c2:cb:b8:45:a7:16:ce:
85:cd:a4:e1:17:f8:38:b8:68:7a:7e:66:91:33:85:
d9:5b:15:1d:9b:8f:3a:6f:d8:e1:5f:83:4d:a1:af:
41:41:29:a3:b4:b2:f1:6e:6e:65:a5:c0:a2:a2:a0:
77:ca:7b:89:f2:b7:3a:e4:8c:da:7e:0d:01:6e:05:
a6:ab:6d:cb:0f:f9:6c:06:b8:1e:04:d7:0d:ea:c2:
24:e0:1a:b5:eb:cf:04:ff:79:90:dd:a7:24:6d:1c:
a6:d0:56:64:db:5c:71:c7:d0:5e:e0:6c:9b:74:c6:
f3:98:30:49:de:c7:bf:86:73:a9:0c:65:0a:24:7c:
69:7b:2c:bb:33:ad:81:c8:83:7d:8d:80:1e:c0:b8:
39:fd:bb:7c:cb:2a:d7:07:c3:f4:80:5c:c8:3d:20:
68:ae:b1:89:55:78:79:82:be:a5:44:b0:f7:f4:83:
b6:79:3c:c9:5d:94:82:90:25:9b:d1:7d:1d:03:e1:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:C5:5E:A0:BB:B9:0B:76:A8:05:2F:AF:27:F3:AA:E4:9C:77:D0
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/C33FXqC7uQt2qAUvryfzquScd9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.176.0/22
185.101.240.0/22
185.227.220.0/22
195.191.28.0/23
IPv6:
2a0c:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
ad:77:d7:87:2a:07:75:50:54:a9:9e:d3:fd:00:d3:67:8c:02:
90:d9:e3:7a:f1:f9:cb:42:a9:85:e4:cf:62:ff:af:dc:15:24:
09:74:09:ac:90:1f:85:81:6e:ff:60:77:b1:16:f9:db:6f:5d:
53:a9:87:87:61:61:4a:ba:51:cb:73:a7:96:fa:f4:43:99:fa:
ac:f4:03:97:04:bc:c7:46:fb:d8:b6:b2:5a:e3:03:ff:1c:28:
f2:c8:86:2e:ea:5f:65:7e:91:bf:4e:ef:de:60:3e:1b:a9:cd:
33:fa:ed:65:b7:48:13:55:9f:2b:77:3b:8b:36:56:87:f2:c4:
c6:02:0e:ca:8b:e8:6e:0d:35:42:66:13:43:c3:81:04:9c:99:
d4:c6:12:8e:f3:a5:73:d3:b2:f6:37:f2:2c:45:79:a7:30:e8:
cd:a3:b9:7e:f3:77:dd:7d:f4:b2:71:e2:0c:b3:cd:a4:17:a1:
3b:81:dc:4a:be:52:9f:a7:df:db:43:99:c4:9f:b4:fa:29:f7:
5a:36:67:b6:9d:28:a4:5f:0a:10:4b:f9:d7:19:b4:54:f6:8c:
83:81:c4:9d:32:54:a4:2c:d5:63:66:28:66:05:7f:74:99:83:
23:40:aa:44:c3:94:8b:2f:6b:4a:41:b6:a5:7f:db:b2:58:a8:
79:b4:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net