Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/_LPm3i5_hUz8FhDIask4rlpIUs0.roa
File: _LPm3i5_hUz8FhDIask4rlpIUs0.roa (raw, json)
Hash identifier: r2G46RMDOZoiXQ5FImU6QYgASKS2Qdype2JjkN9ACj4=
Subject key identifier: FC:B3:E6:DE:2E:7F:85:4C:FC:16:10:C8:6A:C9:38:AE:5A:48:52:CD
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019619DD8C5084A9B62886DEB227C084B725
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/_LPm3i5_hUz8FhDIask4rlpIUs0.roa
Signing time: Wed 09 Apr 2025 09:24:31 +0000
ROA not before: Wed 09 Apr 2025 09:24:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212193
IP address blocks: 45.94.6.0/24 maxlen: 24
45.156.28.0/24 maxlen: 24
45.156.29.0/24 maxlen: 24
194.29.55.0/24 maxlen: 24
2a10:9f80::/29 maxlen: 29
2a11:4bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:dd:8c:50:84:a9:b6:28:86:de:b2:27:c0:84:b7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Apr 9 09:24:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcb3e6de2e7f854cfc1610c86ac938ae5a4852cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:13:01:85:9a:d7:bb:9b:28:89:97:29:35:
a6:d2:eb:a2:d0:c6:cb:bf:2a:8f:d9:3b:b4:80:84:
19:07:78:e3:97:6e:8d:81:d5:14:42:c1:fa:8c:86:
e3:4a:2c:cf:14:df:2f:00:bb:f2:65:7e:77:30:cc:
a6:2d:94:b9:ec:68:22:93:e0:d4:5d:c6:88:3d:dc:
00:02:8e:f1:54:4b:3e:6e:a2:ea:79:c9:64:9b:83:
30:77:1a:47:72:3f:a7:9e:bf:ab:35:be:56:f4:ee:
7c:bf:22:2a:42:fd:35:5e:0e:10:29:14:14:24:a9:
17:11:21:f2:3d:86:9f:db:d2:e3:5e:de:ee:1b:75:
f1:bb:10:66:83:32:06:be:b1:4b:b7:e8:ec:49:c6:
4b:a4:24:0c:ab:62:a1:43:25:0f:ad:0b:cf:b0:78:
3a:90:1e:c3:a6:61:cb:ff:e6:94:3a:ea:bf:57:84:
99:58:50:5a:d8:a3:07:0c:bd:18:02:63:d2:14:c3:
a8:bd:36:10:59:f0:41:61:3e:82:60:fa:2c:79:4c:
c5:8b:78:44:77:6a:bc:28:76:a5:d4:ce:18:ba:ab:
f6:1d:f7:40:28:21:4b:0f:a7:1d:2a:dd:b6:78:fa:
70:e0:01:4e:28:28:87:64:43:ca:cf:ba:e8:21:dc:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:E6:DE:2E:7F:85:4C:FC:16:10:C8:6A:C9:38:AE:5A:48:52:CD
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/_LPm3i5_hUz8FhDIask4rlpIUs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.6.0/24
45.156.28.0/23
194.29.55.0/24
IPv6:
2a10:9f80::/29
2a11:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
86:5d:f8:33:f6:d4:6b:bb:1d:f0:f6:12:56:c5:2b:e9:ed:dd:
46:24:c6:f1:6b:93:ac:56:dd:52:75:29:19:fd:25:a9:bf:43:
16:f0:65:b2:17:99:9f:26:48:c5:2a:c3:9c:b8:f7:cb:31:8d:
81:47:18:86:79:5f:43:3e:5d:a6:ea:56:cb:76:7e:92:47:b9:
2f:e0:eb:53:33:64:e2:d5:9f:b2:4a:7e:c2:b6:49:48:78:44:
eb:52:47:a1:2a:97:cc:c6:54:87:b1:54:ef:5b:fb:ce:ad:85:
12:0f:fb:ca:1e:71:1a:2d:fe:84:9e:cf:36:db:31:88:8a:60:
07:4d:e4:d6:50:da:c0:7a:01:9a:a8:97:92:58:cd:43:f3:a9:
cb:ae:a5:91:95:80:4e:a7:47:8a:41:c0:fe:e4:ee:56:2c:68:
02:e2:79:ed:3a:49:54:ab:5d:c5:26:03:81:62:92:2c:92:b3:
24:f9:4d:e5:c9:b9:7a:f0:72:39:b9:f2:d0:7b:44:27:c4:ca:
5a:ab:0e:7d:da:d8:c0:39:dd:7d:06:b3:d5:b2:ea:9c:bf:87:
42:1c:23:54:89:7c:f6:23:a3:ad:83:9b:48:96:0e:83:1a:14:
13:a5:a8:79:11:b6:cb:12:99:25:9b:2b:86:45:4e:02:70:8c:
bc:1b:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net