Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/xsgEU3dHT5B7ULvO2I18cCtWRow.roa
File: xsgEU3dHT5B7ULvO2I18cCtWRow.roa (raw, json)
Hash identifier: I2qMXldtUVyW+cEln/+2+iEy+fa7hvDlTadTEfdVy2I=
Subject key identifier: C6:C8:04:53:77:47:4F:90:7B:50:BB:CE:D8:8D:7C:70:2B:56:46:8C
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01961ADFBB10BF9ACBB1BAE7EAE03AD357ED
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/xsgEU3dHT5B7ULvO2I18cCtWRow.roa
Signing time: Wed 09 Apr 2025 14:06:32 +0000
ROA not before: Wed 09 Apr 2025 14:06:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.11.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:df:bb:10:bf:9a:cb:b1:ba:e7:ea:e0:3a:d3:57:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Apr 9 14:06:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6c8045377474f907b50bbced88d7c702b56468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:f9:61:b0:de:6c:4a:ad:43:67:f7:b5:b7:
cb:f3:35:32:43:24:93:ce:ad:f5:63:8b:fb:ea:73:
27:42:98:64:44:b3:19:bd:81:e5:5b:9b:67:8e:91:
1a:2b:19:a1:51:04:cf:1e:1a:08:45:54:56:3a:e1:
16:4f:3d:af:ac:4a:dc:24:60:26:e0:68:ed:c7:5a:
cf:fb:a7:b3:18:89:5f:ac:fb:9a:28:05:d2:8e:77:
6b:ce:72:4c:f1:c7:e3:f8:37:9d:3d:7d:62:04:f3:
71:26:8b:fd:bd:e2:dd:d9:7f:1a:ff:31:b4:cc:6d:
5f:d9:39:85:47:9a:16:d2:eb:10:ff:d7:d5:01:f6:
25:be:c7:2e:dd:3c:0e:ab:aa:9b:1f:72:3d:d8:87:
21:a9:b0:f8:13:8c:6d:83:59:63:50:3c:4c:78:11:
af:6f:e5:cf:fc:97:72:c0:15:44:59:69:37:b7:d1:
e5:73:0e:e5:ed:c4:64:85:4b:3a:59:9f:55:57:45:
7b:20:cd:0b:f4:df:7a:08:8e:8c:34:2f:9d:b9:c6:
91:43:88:4b:ef:ed:84:9f:8e:7f:44:0c:39:39:39:
23:0b:d6:6b:45:1f:38:dd:c3:77:b6:f8:99:80:64:
ea:3b:af:ff:93:31:b8:0e:5c:dc:25:a0:f3:a6:8f:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C8:04:53:77:47:4F:90:7B:50:BB:CE:D8:8D:7C:70:2B:56:46:8C
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/xsgEU3dHT5B7ULvO2I18cCtWRow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ef:dd:75:df:78:33:af:65:bf:1e:3d:89:1a:b4:c2:3e:0a:
a8:e7:c5:a3:02:9c:69:a9:c9:d8:34:42:a4:c7:6a:6e:93:fb:
fe:cd:7d:63:04:c7:da:05:eb:d2:14:d2:ae:b0:2c:cb:96:85:
87:ca:79:af:5b:55:07:00:ce:bc:5f:2b:46:2e:68:7f:27:27:
ac:67:0f:33:68:57:64:2e:69:5e:70:81:ab:e3:be:48:d4:4b:
e5:f2:16:7d:84:43:b8:ed:d2:2d:b9:fe:9f:5d:50:22:ce:a1:
50:73:73:e9:8d:57:c0:09:4a:33:ed:d4:2a:7f:4b:9c:b0:b1:
77:db:00:dc:11:04:c0:9e:9b:07:7d:89:bf:dc:c9:1e:b1:94:
30:d3:c0:25:39:28:61:da:a4:5f:07:4d:a5:f5:f7:40:83:16:
2b:ab:d3:9d:6a:e8:45:a9:be:f8:84:7e:13:2a:d8:f9:79:ab:
34:a5:1e:06:8a:d1:2e:83:2d:e6:b7:79:ce:c4:f6:18:4c:fb:
e9:dd:99:a1:06:8e:4f:4e:fa:bf:50:ff:90:34:c2:0a:59:2f:
6f:ab:ed:87:c5:86:a7:d6:45:c0:51:85:31:fe:18:13:dd:30:
34:2b:a3:00:b8:bb:9a:25:26:f9:2b:34:7a:7b:0c:fb:85:34:
62:ea:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net