Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa
File: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (raw, json)
Hash identifier: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=
Subject key identifier: C2:DA:CE:C7:2F:82:AA:B7:F8:C8:F2:7D:D8:D6:C3:F8:4D:F7:04:FF
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 0194282782C20661A14FDE94398C76226BDB
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa
Signing time: Thu 02 Jan 2025 17:54:25 +0000
ROA not before: Thu 02 Jan 2025 17:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208899
IP address blocks: 45.15.228.0/24 maxlen: 24
45.15.229.0/24 maxlen: 24
45.15.230.0/24 maxlen: 24
45.15.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:82:c2:06:61:a1:4f:de:94:39:8c:76:22:6b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Jan 2 17:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2dacec72f82aab7f8c8f27dd8d6c3f84df704ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:09:36:5f:6a:a7:31:99:af:ca:76:e9:e6:
40:7f:a1:95:f3:f9:fd:91:96:f4:93:df:41:19:52:
f8:e7:6e:ff:57:b3:11:a4:45:01:95:2f:73:ad:db:
d4:a4:9f:a4:59:35:5b:a9:70:14:db:bf:cf:08:03:
5f:65:ee:e9:92:0b:b3:c1:20:f1:26:67:b3:9b:5f:
3d:6c:93:40:05:a7:a2:ee:b3:e8:1e:ad:50:3d:7d:
90:d1:cb:ca:d7:83:3e:37:a6:21:fb:22:6e:8e:4e:
a4:75:8c:9e:0a:93:3f:b8:9b:71:bb:0f:c6:04:0f:
05:9f:4f:6d:40:b0:1c:b6:b8:45:14:b9:74:99:5d:
e1:48:ca:ad:80:aa:c9:a3:cf:27:e1:4d:04:cf:f2:
c3:ff:49:1c:e9:d9:7b:2b:b3:d4:34:5d:2a:9c:62:
5d:3a:73:5d:fc:32:8b:77:c8:ae:f3:be:69:1f:2a:
44:a0:49:6d:04:e5:29:51:32:50:c7:3b:07:7d:0b:
16:f9:82:5e:e5:d3:43:65:7a:e5:8e:5f:d5:d5:c4:
5a:2e:d2:01:6b:4a:44:d2:08:a6:5c:90:0d:8e:c9:
9d:0a:b5:70:56:e6:b9:4e:e3:82:24:41:a6:95:22:
38:7c:cd:f9:5b:64:35:6f:5b:b1:51:8d:bd:32:ff:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DA:CE:C7:2F:82:AA:B7:F8:C8:F2:7D:D8:D6:C3:F8:4D:F7:04:FF
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.228.0/22
Signature Algorithm: sha256WithRSAEncryption
38:fb:d5:39:ab:66:c7:65:e1:f6:3b:fd:97:3e:78:bb:cd:40:
d1:ca:27:26:a4:75:fd:5d:3c:f5:d2:ca:22:34:ff:ba:07:e9:
34:02:be:fd:81:c6:db:20:ab:e6:ab:b2:0d:16:6c:64:34:bf:
65:56:90:38:b0:58:67:ae:8a:10:0c:94:45:e9:7f:31:f4:e9:
ea:3a:d2:53:7d:06:1b:28:1d:1e:72:52:98:fb:f4:80:8c:ef:
28:5d:f7:7c:4f:7d:d9:56:0e:f2:fc:32:0d:f9:bf:19:84:7d:
be:ac:ab:09:f7:8b:1c:1b:61:19:4d:b7:2d:86:fc:6e:0d:2c:
e4:13:82:99:22:28:66:fa:0b:19:b3:a2:33:dd:61:41:44:3b:
5a:62:54:98:64:61:3a:44:41:b1:13:1b:fe:fd:e0:63:e2:21:
f5:cd:5a:0b:4b:4a:e6:bf:b6:33:62:94:6b:9c:75:f9:cc:3c:
2e:54:fa:3b:50:f2:e7:9f:72:33:97:5a:3e:6b:24:b1:75:6f:
49:26:78:6a:3a:4e:ab:dc:ca:13:06:1f:40:82:56:09:87:78:
33:84:c3:8a:fc:e0:51:77:3c:df:69:c3:65:87:57:ff:f5:01:
09:03:eb:42:45:8b:ec:ad:0e:aa:db:4b:62:1c:2e:13:b9:f3:
2a:d6:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net