Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa
File: 8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa (raw, json)
Hash identifier: yrQsFc8W4TPUkwunx5GCuvi5bxPjLTa5VSHSj8PIIVA=
Subject key identifier: F2:E1:0C:FF:53:79:A8:95:1D:CC:08:BD:BB:BC:D3:62:FE:7F:37:B7
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019513744837A6C4E73B70D8C746C8307F13
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa
Signing time: Mon 17 Feb 2025 10:29:02 +0000
ROA not before: Mon 17 Feb 2025 10:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61955
IP address blocks: 45.159.212.0/22 maxlen: 22
45.159.212.0/24 maxlen: 24
45.159.213.0/24 maxlen: 24
45.159.214.0/24 maxlen: 24
45.159.215.0/24 maxlen: 24
185.54.108.0/22 maxlen: 22
185.54.108.0/24 maxlen: 24
185.54.109.0/24 maxlen: 24
185.54.110.0/24 maxlen: 24
185.54.111.0/24 maxlen: 24
2a02:44a0::/48 maxlen: 48
2a02:44a0::/64 maxlen: 64
2a02:44a0:1::/48 maxlen: 48
2a02:44a0:2::/48 maxlen: 48
2a02:44a0:3::/48 maxlen: 48
2a02:44a0:4::/48 maxlen: 48
2a02:44a0:5::/48 maxlen: 48
2a02:44a0:6::/48 maxlen: 48
2a02:44a0:7::/48 maxlen: 48
2a02:44a0:8::/48 maxlen: 48
2a02:44a0:9::/48 maxlen: 48
2a02:44a0:a::/48 maxlen: 48
2a02:44a0:b::/48 maxlen: 48
2a02:44a0:c::/48 maxlen: 48
2a02:44a0:d::/48 maxlen: 48
2a02:44a0:e::/48 maxlen: 48
2a02:44a0:f::/48 maxlen: 48
2a02:44a0:10::/48 maxlen: 48
2a02:44a0:11::/48 maxlen: 48
2a02:44a0:12::/48 maxlen: 48
2a02:44a0:13::/48 maxlen: 48
2a02:44a0:14::/48 maxlen: 48
2a02:44a0:15::/48 maxlen: 48
2a02:44a0:16::/48 maxlen: 48
2a02:44a0:17::/48 maxlen: 48
2a02:44a0:18::/48 maxlen: 48
2a02:44a0:19::/48 maxlen: 48
2a02:44a0:1a::/48 maxlen: 48
2a02:44a0:1b::/48 maxlen: 48
2a02:44a0:1c::/48 maxlen: 48
2a02:44a0:1d::/48 maxlen: 48
2a02:44a0:1e::/48 maxlen: 48
2a02:44a0:1f::/48 maxlen: 48
2a02:44a0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:74:48:37:a6:c4:e7:3b:70:d8:c7:46:c8:30:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Feb 17 10:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2e10cff5379a8951dcc08bdbbbcd362fe7f37b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:68:5f:7c:14:10:6b:52:7a:f7:43:11:79:
71:24:a8:61:dd:60:bc:63:28:86:ed:34:81:7a:23:
54:56:eb:93:bd:95:e0:6b:57:9e:9c:c8:59:4c:0f:
0e:54:56:bc:65:83:8b:72:8c:78:e2:da:57:c7:32:
10:07:51:00:d1:de:fa:45:f3:3e:4c:aa:cf:90:42:
0e:51:29:3c:c7:1c:27:68:32:01:8f:a2:ac:d7:52:
de:8a:f2:17:53:61:33:f9:9c:79:93:fc:ee:0b:d7:
5e:a9:4e:bb:a8:ac:0f:df:41:2a:ff:dd:f5:95:7c:
71:17:3c:66:0f:72:9e:24:16:d6:6e:ab:e8:c0:71:
b4:17:b7:c9:22:9a:2a:23:ec:15:53:44:1c:c6:10:
c7:99:9f:86:47:da:c6:6f:8f:fd:97:d8:56:a3:55:
d4:2c:37:70:9c:e5:ad:53:56:a5:02:74:88:48:9c:
2a:29:70:eb:4b:a7:e6:ba:04:5d:16:8d:42:b3:6e:
13:8b:4c:ad:5e:e1:cb:4a:da:bc:8a:13:e3:fb:92:
3c:d2:89:3c:79:c7:fe:17:27:96:5a:d4:d4:25:64:
9d:07:ab:3b:9e:81:7a:49:40:ab:b8:cd:0b:28:4b:
51:c6:b6:ca:de:41:00:f1:38:b9:b4:4c:88:0e:70:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:0C:FF:53:79:A8:95:1D:CC:08:BD:BB:BC:D3:62:FE:7F:37:B7
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.212.0/22
185.54.108.0/22
IPv6:
2a02:44a0::/43
2a02:44a0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
35:12:25:90:a3:3a:12:b1:8c:c2:9d:79:f9:ba:87:99:b7:9c:
26:8a:0f:60:e4:1a:6e:32:94:f7:42:99:b5:09:47:d6:c6:99:
c5:66:cf:84:70:10:77:da:d4:0f:0d:4f:40:ae:4d:16:5d:0a:
0e:8c:2d:60:d7:c1:06:74:1b:b3:6c:8c:26:0e:99:db:b0:da:
bf:d4:85:39:31:af:05:dd:9f:d7:c7:e1:6c:8e:74:dd:2d:f9:
1f:af:f6:7d:0a:35:92:a2:45:fd:e5:2e:cf:25:29:8f:13:d8:
37:3b:07:af:f5:e8:46:72:4f:71:00:69:54:5f:d4:61:d0:82:
2f:24:69:f1:b9:c7:89:22:10:d0:32:49:de:9c:af:33:6c:fa:
31:58:9b:76:a5:a5:5b:40:8b:e9:4a:a9:46:62:e2:53:b6:68:
ea:83:fa:dc:15:f0:a4:7d:77:ed:c5:14:f1:7b:27:f5:4c:1b:
21:d0:7e:0f:37:02:55:37:48:cd:31:75:7e:b0:1a:0a:08:2b:
08:77:47:04:64:03:cf:c7:4c:da:28:bf:26:1a:1b:e5:fc:50:
bf:5a:cb:50:9a:d8:b5:36:8c:5f:c7:37:bf:a8:04:b8:35:13:
b9:c7:e3:36:9d:5c:67:d5:99:1a:af:58:01:8c:91:65:0f:4d:
96:3e:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net