Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa
File: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (raw, json)
Hash identifier: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=
Subject key identifier: BD:4A:3F:BE:52:7A:B0:B5:28:4A:EB:11:F4:EC:1A:DE:A5:4E:EB:27
Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial: 019426D96E6489D40AE2201C7652F2B2152F
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa
Signing time: Thu 02 Jan 2025 11:49:31 +0000
ROA not before: Thu 02 Jan 2025 11:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208246
IP address blocks: 45.150.88.0/22 maxlen: 22
45.150.88.0/23 maxlen: 23
45.150.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6e:64:89:d4:0a:e2:20:1c:76:52:f2:b2:15:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Validity
Not Before: Jan 2 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd4a3fbe527ab0b5284aeb11f4ec1adea54eeb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:dc:ca:77:5b:e7:04:77:57:52:e4:0d:94:
1f:31:cb:6c:ff:ee:ef:29:63:b1:ab:e5:b0:4c:21:
70:36:bd:c9:98:61:9f:d3:57:de:ae:3d:5c:85:84:
f7:f1:e4:88:2a:9f:e6:81:34:c1:0c:1b:fa:b3:09:
1c:19:e8:5e:64:42:e7:02:2f:2d:1e:ff:78:5e:ef:
c4:0b:c6:1e:dd:28:f0:d3:28:28:e1:f6:47:6b:19:
10:10:21:6a:90:c3:82:c9:a7:75:79:0d:10:41:47:
50:c5:9b:f0:ce:7a:ad:55:b3:8a:9a:58:11:b8:78:
78:a0:ec:91:88:32:2d:16:ee:2f:c3:89:9a:c5:6e:
12:79:8e:8f:92:0c:fb:c0:e7:21:b3:b6:27:5f:d5:
6c:bc:d7:73:79:a7:21:c0:ba:80:3b:91:05:61:27:
48:26:b4:ed:5c:b8:8b:a6:e3:b6:4f:80:fe:88:d8:
2a:8b:bd:89:31:c2:64:df:e7:ae:a1:2e:95:12:a9:
03:77:37:76:71:83:1c:31:f4:c0:4f:b7:eb:8a:44:
d8:ca:33:47:fb:81:04:1b:e7:ad:23:94:8d:fd:d4:
74:2e:ef:81:9a:36:a1:04:84:6f:6f:f6:90:80:71:
cf:80:5d:fa:b4:d0:bb:ed:4b:ce:4a:9d:bf:15:3d:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4A:3F:BE:52:7A:B0:B5:28:4A:EB:11:F4:EC:1A:DE:A5:4E:EB:27
X509v3 Authority Key Identifier:
keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:ff:57:12:12:38:95:70:ab:14:dc:48:ee:fb:67:5f:ed:b6:
0f:c1:15:d2:de:3f:d3:2e:27:4d:d7:42:15:7d:3c:0a:7f:fc:
3c:df:2b:12:0e:23:02:13:73:9d:0e:51:f3:47:20:a9:5d:51:
a1:c3:7a:96:30:cd:b5:dd:1f:41:b5:c8:9e:1b:58:a5:b2:60:
71:66:e0:7d:c8:7d:23:bf:ad:0d:d8:90:87:8b:90:44:7c:15:
d1:41:00:eb:95:f8:14:92:90:57:82:6f:40:33:c4:e3:94:d6:
7b:58:4f:26:a7:db:cf:72:cc:40:35:47:d4:1b:fd:80:3e:a9:
d4:5c:78:47:27:00:1f:ae:34:f1:1f:c0:ee:58:44:75:de:f0:
69:a4:91:1a:36:98:7c:d5:6c:2f:80:a7:87:ef:1a:00:98:2a:
aa:77:63:9a:c1:44:9a:12:7f:94:d6:3c:b7:77:bc:aa:1b:bd:
d3:9c:ad:ff:3c:8f:cc:db:f8:33:48:5a:8d:f3:93:7e:70:42:
cf:0c:ee:0a:be:6f:a2:8d:16:30:e7:b5:95:33:1c:67:bc:4d:
82:d3:69:c3:5d:4e:98:0e:64:6a:0e:38:52:52:50:e2:ed:ca:
23:30:93:4a:c9:40:10:4f:81:bb:80:ab:cf:02:7c:66:ba:ec:
c3:bf:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:04 2025 by rpki-client on console.sobornost.net