Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/Ta7kjalga1V_Unp7oAdLuMVKQlI.roa
File: Ta7kjalga1V_Unp7oAdLuMVKQlI.roa (raw, json)
Hash identifier: dKUmdkq/PNVI9kf9ZPvt3TbaX6jLwhovvL+xksxf48k=
Subject key identifier: 4D:AE:E4:8D:A9:60:6B:55:7F:52:7A:7B:A0:07:4B:B8:C5:4A:42:52
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01961FE261A22912DDA10ACCB8E79E26BF7A
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/Ta7kjalga1V_Unp7oAdLuMVKQlI.roa
Signing time: Thu 10 Apr 2025 13:27:31 +0000
ROA not before: Thu 10 Apr 2025 13:27:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22427
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:e2:61:a2:29:12:dd:a1:0a:cc:b8:e7:9e:26:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Apr 10 13:27:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4daee48da9606b557f527a7ba0074bb8c54a4252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:2c:43:dd:90:c0:23:fb:e1:7b:03:a2:e2:
5c:74:5c:6f:d9:32:95:e0:74:44:53:b6:cc:01:14:
4a:f8:2a:02:48:96:4a:ae:bf:e7:6c:8c:7d:da:ef:
1c:d0:36:76:c4:72:c3:18:24:43:46:38:3d:8c:cb:
9e:41:57:7a:9f:91:e4:cb:b4:a0:b6:a9:73:52:52:
5a:32:e2:19:2c:04:c2:d5:6b:f6:4e:64:4c:51:c2:
f3:e9:08:13:13:c0:f5:86:4b:33:80:bf:18:5c:c2:
da:e9:c6:6f:c8:56:b3:63:7c:6b:24:61:bc:9f:ad:
36:9e:88:01:0f:05:78:25:ea:57:b1:54:1b:6c:72:
b5:70:97:a6:96:bf:b5:7d:36:c2:3a:37:28:b6:43:
39:7a:5d:88:25:6c:fe:67:84:16:a8:b6:13:e0:22:
65:3b:10:20:17:4f:a8:7c:c2:2e:74:d1:78:46:ec:
f8:ea:9e:1a:b5:88:f9:b9:f0:13:76:30:21:5f:f7:
4d:f6:1c:69:e4:83:0d:29:3f:26:43:7f:f9:43:b3:
c0:bf:ac:da:8f:7d:a9:6a:4e:c0:b1:19:27:f7:2d:
03:9a:da:83:10:6d:b6:ea:92:a9:ca:b2:eb:92:bd:
4b:07:9b:6d:7d:45:41:b2:1e:97:85:dc:72:81:f6:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AE:E4:8D:A9:60:6B:55:7F:52:7A:7B:A0:07:4B:B8:C5:4A:42:52
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/Ta7kjalga1V_Unp7oAdLuMVKQlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fd:a8:13:06:6e:2f:ba:61:34:78:66:9a:da:e6:e9:2d:7f:
0a:14:3d:88:95:28:94:12:9b:06:ac:b3:95:6c:2d:fa:b6:dd:
12:7d:e2:1f:0d:c8:0d:c0:6e:1d:52:12:83:c8:f3:48:e5:7f:
c8:ce:db:0a:ed:5b:77:20:f3:f4:0c:32:7e:83:69:ae:9c:a2:
e0:70:fe:eb:f9:de:be:10:a9:ca:4b:3e:ae:2e:26:1a:ff:a8:
7a:51:c2:3a:e3:fe:64:07:4c:e8:62:8c:0a:64:fc:a7:8f:73:
79:bc:7d:43:77:bd:3d:08:fe:c3:8e:99:15:4d:b0:c8:24:c1:
88:6f:54:f0:cb:bc:96:20:f6:34:cd:b7:36:00:a8:46:b1:d5:
cf:f2:6f:2e:f1:b0:6a:a0:d6:f9:ca:d6:95:2e:e8:fc:f0:f1:
3e:71:2e:95:1f:06:e9:9f:4f:7b:bc:ea:36:dc:d4:08:9a:97:
b0:29:64:da:e8:26:62:7d:d5:56:7f:54:59:aa:ad:f5:a8:20:
da:41:a9:19:49:ed:49:b1:c5:a6:26:c2:bc:86:14:4e:89:29:
f5:0f:9a:83:5f:17:46:dc:88:e5:83:27:4a:40:df:b2:2f:2a:
2c:53:c4:44:5e:b7:c5:73:a5:2a:d8:46:29:9f:dd:77:80:b6:
17:1e:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net