Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/t4fAOG9AgiRHWlfB8UV9ooeeONs.roa
File: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (raw, json)
Hash identifier: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=
Subject key identifier: B7:87:C0:38:6F:40:82:24:47:5A:57:C1:F1:45:7D:A2:87:9E:38:DB
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 01942521CDE5350D1849FF1ABE507C4B8E0B
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/t4fAOG9AgiRHWlfB8UV9ooeeONs.roa
Signing time: Thu 02 Jan 2025 03:49:19 +0000
ROA not before: Thu 02 Jan 2025 03:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35394
IP address blocks: 45.85.136.0/22 maxlen: 22
80.67.44.0/22 maxlen: 22
130.185.88.0/21 maxlen: 21
185.72.44.0/22 maxlen: 22
185.79.36.0/22 maxlen: 22
185.93.44.0/22 maxlen: 22
185.93.152.0/22 maxlen: 22
185.143.96.0/22 maxlen: 22
185.172.168.0/22 maxlen: 22
185.186.28.0/22 maxlen: 22
185.196.56.0/22 maxlen: 22
185.217.204.0/22 maxlen: 22
185.220.44.0/22 maxlen: 22
185.236.168.0/22 maxlen: 22
185.240.232.0/22 maxlen: 22
185.245.176.0/24 maxlen: 24
185.245.177.0/24 maxlen: 24
185.245.178.0/24 maxlen: 24
185.245.179.0/24 maxlen: 24
193.27.246.0/23 maxlen: 23
193.27.248.0/23 maxlen: 23
193.161.220.0/22 maxlen: 22
194.61.16.0/22 maxlen: 22
213.217.24.0/22 maxlen: 22
2a03:3d60::/29 maxlen: 29
2a09:5000::/29 maxlen: 29
2a0c:8f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:cd:e5:35:0d:18:49:ff:1a:be:50:7c:4b:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Jan 2 03:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b787c0386f408224475a57c1f1457da2879e38db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:b6:5c:d5:45:63:ae:61:4f:f4:a4:0c:64:
01:be:a3:18:34:81:88:a4:06:79:d5:a8:93:bf:87:
22:28:7b:b0:20:57:fa:2a:0b:8c:a1:6d:09:84:b5:
f1:da:cf:e6:02:04:32:98:10:90:ee:7f:56:45:28:
42:8a:72:21:96:3a:33:1b:68:1f:a8:53:a0:6b:ad:
6e:c8:83:7c:b6:03:2e:62:e7:b2:d6:8a:17:9d:75:
7f:1a:1d:44:05:df:5f:09:cb:f7:74:80:d5:23:16:
9e:c4:ee:51:29:3e:76:9f:bf:27:52:57:76:3a:76:
22:4e:4d:91:12:6d:cc:ef:bc:0c:f1:41:f0:44:ef:
e5:1a:9c:77:02:3b:24:d8:b9:34:e4:b7:09:1d:a0:
38:b7:fd:ac:08:d9:3e:89:ae:9a:4f:36:21:cc:ed:
da:0d:65:d8:7c:09:f9:0c:21:c3:7b:1c:3b:65:51:
38:70:40:fc:40:e2:e9:0b:28:ab:b4:d5:73:34:54:
7f:37:fd:04:03:e2:ff:dd:51:2f:8f:32:e4:ed:85:
9a:f3:43:c5:18:a3:b0:92:0a:24:71:00:f4:98:c8:
73:3e:08:b2:b8:64:d7:4e:e2:27:85:e0:38:80:7d:
4b:d0:51:6e:a7:e1:7b:6f:0e:01:54:62:26:d9:06:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:C0:38:6F:40:82:24:47:5A:57:C1:F1:45:7D:A2:87:9E:38:DB
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/t4fAOG9AgiRHWlfB8UV9ooeeONs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.136.0/22
80.67.44.0/22
130.185.88.0/21
185.72.44.0/22
185.79.36.0/22
185.93.44.0/22
185.93.152.0/22
185.143.96.0/22
185.172.168.0/22
185.186.28.0/22
185.196.56.0/22
185.217.204.0/22
185.220.44.0/22
185.236.168.0/22
185.240.232.0/22
185.245.176.0/22
193.27.246.0-193.27.249.255
193.161.220.0/22
194.61.16.0/22
213.217.24.0/22
IPv6:
2a03:3d60::/29
2a09:5000::/29
2a0c:8f80::/29
Signature Algorithm: sha256WithRSAEncryption
b2:01:ef:33:61:38:3e:6d:69:c7:e0:0a:71:06:49:85:72:40:
be:0e:56:ab:ad:c6:3b:e1:46:ac:fe:05:b2:c0:51:00:49:17:
fb:6a:75:b0:93:10:cd:ea:9a:71:6a:a3:4b:85:05:15:ac:f0:
21:8d:ae:f6:1d:98:5c:70:1f:56:c0:1e:02:f3:0c:9c:af:29:
c3:9f:48:29:86:e2:4b:cb:08:7f:b7:26:d0:de:c5:27:e7:45:
a4:61:21:07:fb:ed:d1:f9:70:2d:89:d7:08:5f:4a:04:10:66:
ac:4a:77:98:0f:95:16:63:c1:b6:e5:1e:6a:5b:ab:76:e0:fd:
9f:22:86:7d:13:84:ed:ed:12:b8:b0:70:e0:11:0d:be:b2:14:
13:d3:ae:bd:45:3a:2e:ef:d2:56:39:f1:5e:6a:e3:01:d6:59:
99:cf:91:23:d1:8c:35:42:2d:96:7d:c7:4c:ad:14:1d:f9:4d:
01:e7:c9:12:19:5f:4e:ba:0a:2f:78:13:d2:40:8f:ae:54:43:
a8:be:e2:00:0b:c0:2b:e1:bd:be:da:12:c6:b6:dc:aa:e3:55:
c8:3e:1b:63:98:68:82:f4:cb:5b:d9:9e:4e:07:eb:a7:3e:a6:
3a:60:7b:db:d2:85:fe:dd:81:64:f1:bc:91:c7:7f:bc:60:12:
30:fd:69:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net