Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/t3V2XksncnMtarNJHykdbMqlo9o.roa
File: t3V2XksncnMtarNJHykdbMqlo9o.roa (raw, json)
Hash identifier: jdefJLdn5DCr5WN27XqdJNb9gXHa4PLfYtnsyReX6GQ=
Subject key identifier: B7:75:76:5E:4B:27:72:73:2D:6A:B3:49:1F:29:1D:6C:CA:A5:A3:DA
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0195E396DCE37B800ABC72C3657EC9D9B0AD
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/t3V2XksncnMtarNJHykdbMqlo9o.roa
Signing time: Sat 29 Mar 2025 20:27:49 +0000
ROA not before: Sat 29 Mar 2025 20:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e3:96:dc:e3:7b:80:0a:bc:72:c3:65:7e:c9:d9:b0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Mar 29 20:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b775765e4b2772732d6ab3491f291d6ccaa5a3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:a0:9c:b7:35:c9:7d:91:0c:bd:c5:8c:4d:
dd:c2:a2:71:14:fa:ac:c0:95:78:2d:98:ae:0d:d9:
f8:b3:8c:32:a1:dc:3b:7c:70:d5:ce:5e:68:df:f0:
bd:57:3a:13:a9:4e:d3:01:55:d5:7b:2f:03:22:81:
4b:4b:29:e5:99:5a:09:e0:c7:81:77:53:f0:e8:87:
ec:06:0e:98:51:98:c9:84:47:79:ba:99:00:4d:48:
56:8e:c3:f3:1e:ad:60:f5:d8:15:f5:72:6a:08:61:
ee:cc:8f:71:34:44:35:cc:c0:4e:fa:74:a1:ac:8a:
d2:e5:c4:de:52:c8:9a:bd:74:49:da:13:b8:20:c6:
e4:ee:23:33:90:d4:b0:e3:37:d9:45:75:8e:44:60:
89:95:c5:79:7f:81:47:c9:9c:ec:cb:70:aa:3b:a2:
96:64:e9:fa:20:44:4b:83:b5:83:18:70:c8:e5:75:
89:c5:76:af:c4:a6:de:4d:56:cd:38:7f:13:9d:1f:
45:12:71:69:47:4a:fe:79:c8:96:2c:ee:1d:86:a3:
bd:f7:55:12:24:2e:e8:40:3a:5f:7d:67:0f:80:e7:
01:b9:8f:04:07:88:dd:0c:cb:e7:60:d1:36:e0:a3:
28:f3:21:da:8f:19:be:c3:70:29:9a:93:e9:05:c8:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:75:76:5E:4B:27:72:73:2D:6A:B3:49:1F:29:1D:6C:CA:A5:A3:DA
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/t3V2XksncnMtarNJHykdbMqlo9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
11:d7:03:f0:0e:09:12:82:34:ac:79:30:47:bd:11:28:f3:68:
98:97:a1:51:d8:a5:34:4c:41:ac:b5:2c:6f:8b:e7:bc:3e:1a:
21:1e:8a:b2:aa:7a:cb:46:91:ee:5f:17:e5:a3:43:58:de:45:
b4:ec:22:80:fe:32:c0:3d:55:a8:ce:78:47:73:09:6d:09:6f:
89:1b:85:33:31:95:cf:ea:ac:8c:58:0c:9f:b0:eb:21:be:65:
8a:fd:75:03:dd:a2:6e:1e:80:84:cd:3e:cf:bb:4f:9e:16:e6:
91:c4:c8:23:bd:2e:08:b8:a0:7a:a9:19:ff:5a:89:a5:ad:fc:
cd:00:09:0b:16:09:1e:43:56:2f:03:c1:ef:80:29:80:65:a8:
3d:04:1d:54:ec:1a:39:27:f6:4c:8c:98:47:36:79:ba:1c:97:
5a:68:8f:2e:67:aa:58:eb:4b:6c:b0:a1:bd:01:7d:6e:60:34:
0a:e7:38:77:c6:2b:06:b2:f3:6b:b0:47:7c:dc:4e:8b:39:56:
5f:78:d5:24:67:73:0e:54:b0:8d:b8:a9:47:cd:c1:c3:d1:e3:
33:67:2c:5e:d1:5c:ec:06:77:82:66:f9:c5:d6:2c:5c:72:c0:
1e:2c:46:f1:f4:cc:20:44:b8:fa:09:21:47:01:58:72:5d:0d:
31:f1:43:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:46:21 2025 by rpki-client on console.sobornost.net