Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa
File: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (raw, json)
Hash identifier: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=
Subject key identifier: 4A:1E:76:E5:93:90:24:96:C7:F5:80:E1:66:B6:29:A8:FB:08:C5:FB
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 019421446D985ADB53D85ECB4D17C7DD4440
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.129.88.0/24 maxlen: 24
45.129.90.0/24 maxlen: 24
45.135.169.0/24 maxlen: 24
45.135.170.0/23 maxlen: 24
45.151.252.0/22 maxlen: 24
79.143.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6d:98:5a:db:53:d8:5e:cb:4d:17:c7:dd:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a1e76e593902496c7f580e166b629a8fb08c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f4:7c:f7:62:2c:96:2c:2a:8b:d7:f2:d8:88:
21:19:4f:49:2d:5f:e8:06:3e:96:12:66:b7:71:b5:
08:2c:b3:f9:f5:76:9e:34:0d:af:38:ca:38:1f:97:
b2:0c:9c:9c:2f:cf:16:48:43:d0:96:9a:ed:75:82:
a3:2d:39:23:a3:e6:87:0c:d9:fe:9b:56:1e:31:4a:
27:76:3f:e7:e6:a3:df:67:19:40:b2:a7:40:80:b4:
f8:3b:6d:5c:8b:24:53:74:5a:26:87:a8:01:53:0a:
c5:af:d4:79:07:05:e0:20:b0:2d:81:25:e8:cf:ce:
73:42:60:c3:18:e0:67:80:8d:98:c0:1e:aa:1a:91:
cd:31:40:76:75:73:9c:a5:e4:38:a4:6f:fd:83:29:
98:82:a5:aa:84:53:d9:04:61:3f:53:77:3c:9d:8c:
c9:70:2b:28:0d:d3:ae:d3:57:51:f5:45:32:c0:04:
38:50:5b:0f:81:c3:02:1a:f0:0b:f4:f9:c5:a1:04:
50:71:06:0e:8c:0b:ab:5e:71:a5:7f:31:34:9d:03:
79:e2:5a:ed:3e:45:b3:e7:1d:c1:02:1f:ca:80:9b:
64:97:95:3b:15:dc:49:dd:29:55:cf:e4:19:45:0d:
0e:3c:41:e3:3f:52:00:f5:5a:3a:fb:9d:1e:57:a2:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1E:76:E5:93:90:24:96:C7:F5:80:E1:66:B6:29:A8:FB:08:C5:FB
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.88.0/24
45.129.90.0/24
45.135.169.0-45.135.171.255
45.151.252.0/22
79.143.138.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bb:b0:3b:00:b6:2c:66:05:be:21:6c:8d:9f:7b:e2:8d:e6:
8b:8d:92:d4:70:1f:09:b4:78:ac:8c:f4:0d:91:b4:4c:73:6d:
f7:6c:d9:91:2c:ce:b9:1f:ef:e3:51:ed:9c:bc:48:13:52:9f:
8f:a0:c1:65:28:b1:bd:31:e9:05:de:ec:4a:37:99:24:ca:18:
5f:0c:a1:3e:75:47:68:ea:a8:db:3f:19:62:44:9c:7b:69:64:
cb:92:3a:23:93:30:46:a7:20:f7:88:9d:79:77:86:c3:63:4c:
00:f8:b3:14:74:ae:7f:4e:c4:e9:c9:10:59:b7:69:b3:82:62:
cf:a7:ea:a6:b6:c5:0d:78:8d:e4:9c:75:eb:15:a9:71:52:43:
e7:66:57:14:c0:9c:f1:02:93:ce:63:67:4d:6b:44:48:8e:05:
d9:a6:47:c4:04:c6:f5:38:34:21:b8:19:7b:fa:46:1b:4c:34:
d3:94:d2:ce:a7:58:bc:92:04:1f:2e:83:f7:67:c5:b4:9e:f2:
50:89:c5:c7:3d:0e:c9:ef:61:ed:22:7b:9d:cb:df:56:46:48:
74:7c:58:d2:a2:01:e5:e8:45:77:34:d9:ba:c3:ee:9d:37:cc:
c8:8a:11:b1:7b:c2:96:4b:a5:74:b4:55:35:5c:36:ab:e6:a6:
4c:c7:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net