Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/UoDvXAabOFEhN_Ur6iO6IlEoQNY.roa
File: UoDvXAabOFEhN_Ur6iO6IlEoQNY.roa (raw, json)
Hash identifier: C2nYBT6rKIdGBRSYm5JfeMMp+MUUrWzb3x2zB3OMlgE=
Subject key identifier: 52:80:EF:5C:06:9B:38:51:21:37:F5:2B:EA:23:BA:22:51:28:40:D6
Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial: 019427B621270C85E6BCAC05FEB8C62A04F2
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/UoDvXAabOFEhN_Ur6iO6IlEoQNY.roa
Signing time: Thu 02 Jan 2025 15:50:34 +0000
ROA not before: Thu 02 Jan 2025 15:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60917
IP address blocks: 45.158.0.0/22 maxlen: 22
45.158.0.0/24 maxlen: 24
45.158.1.0/24 maxlen: 24
45.158.2.0/24 maxlen: 24
45.158.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:21:27:0c:85:e6:bc:ac:05:fe:b8:c6:2a:04:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Validity
Not Before: Jan 2 15:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5280ef5c069b38512137f52bea23ba22512840d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:27:38:94:b1:f8:7a:70:a1:50:65:31:89:
77:4f:3f:51:c0:3b:78:45:bf:48:76:2b:5d:46:49:
4f:74:cf:88:95:87:7b:95:6f:b8:ad:7f:58:da:26:
e1:07:8d:10:6a:a2:8e:43:af:67:ec:a8:0d:02:0c:
7d:55:4f:9f:62:b3:95:4c:0f:b9:b5:91:93:ae:20:
d2:b1:5d:a4:18:14:e1:c7:fa:8d:2b:63:34:ea:db:
e5:2c:b1:f5:d2:8c:e0:97:81:de:ce:97:61:33:6f:
90:db:9e:af:90:9b:54:b3:80:56:91:01:c5:fc:dd:
b8:a7:5b:90:a5:2d:89:49:47:80:44:b8:96:27:d0:
53:a9:e9:5a:af:a8:b7:31:d1:e7:41:d0:c2:49:ae:
28:9b:71:80:6e:69:00:ca:eb:b8:3d:3c:96:c5:e1:
91:c0:7b:d5:a9:35:3e:58:47:fd:4b:e4:76:f6:ba:
e0:22:f0:b2:52:ec:bc:e1:9a:50:75:c5:f5:a5:7e:
57:5e:90:60:71:a4:25:66:65:37:00:ee:d3:81:10:
dc:e1:e2:1f:ad:cd:bc:ac:72:0b:51:7b:55:9c:4e:
f9:57:4f:53:56:dc:ff:b7:b5:c8:57:7d:15:5e:db:
3f:58:f5:88:31:08:45:08:e9:da:6c:64:de:5f:74:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:80:EF:5C:06:9B:38:51:21:37:F5:2B:EA:23:BA:22:51:28:40:D6
X509v3 Authority Key Identifier:
keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/UoDvXAabOFEhN_Ur6iO6IlEoQNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.0.0/22
Signature Algorithm: sha256WithRSAEncryption
64:d4:1f:f7:46:1f:51:f7:af:19:ec:44:66:05:bd:27:c2:fc:
2b:f3:91:e3:05:d0:96:1c:e7:8e:42:b3:34:8e:4a:5c:8c:62:
0b:34:74:a2:f8:f5:e5:da:5b:7e:dc:de:be:4f:31:9f:b1:9e:
4b:a2:f9:05:10:d5:79:17:af:e3:88:90:60:c9:d6:94:97:dd:
a9:60:8a:5f:80:9b:d2:5f:4e:06:61:4d:72:47:cf:a2:aa:95:
ca:ad:36:2e:9c:81:c9:70:f4:da:42:2a:9b:25:3a:6c:1e:c5:
f7:94:3a:53:30:4d:e1:7a:18:aa:36:74:11:09:ba:9b:26:3d:
87:25:4c:4b:d9:36:f0:c0:08:82:bb:e3:f0:5c:96:0b:6c:8c:
c6:44:1a:b0:aa:f8:5c:b5:13:62:8d:af:ea:81:5b:0f:29:62:
27:62:9e:04:52:4e:52:fb:96:1c:30:8d:1a:70:3a:a7:dd:82:
24:2b:8e:6e:c9:11:4d:fd:5f:9d:60:de:c3:d2:4c:ab:57:82:
78:5f:83:f6:52:17:73:37:99:ac:87:b0:25:41:de:0b:83:0e:
a4:01:57:c4:c2:14:42:09:02:b6:20:99:19:95:dd:8c:3b:b6:
e8:d4:f0:dd:4b:6b:ee:1e:2b:e9:d4:bd:2a:5b:d4:48:3a:7b:
72:63:81:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntiEnDIXmvKwF/rjGKgTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWNiODg5M2U5NDE4MDc0N2VlYzE5NzVlZDU2MDRjNGRk
YmUwYzUwHhcNMjUwMTAyMTU1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjgwZWY1YzA2OWIzODUxMjEzN2Y1MmJlYTIzYmEyMjUxMjg0MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1wnOJSx+HpwoVBlMYl3Tz9RwDt4
Rb9IditdRklPdM+IlYd7lW+4rX9Y2ibhB40QaqKOQ69n7KgNAgx9VU+fYrOVTA+5
tZGTriDSsV2kGBThx/qNK2M06tvlLLH10ozgl4HezpdhM2+Q256vkJtUs4BWkQHF
/N24p1uQpS2JSUeARLiWJ9BTqelar6i3MdHnQdDCSa4om3GAbmkAyuu4PTyWxeGR
wHvVqTU+WEf9S+R29rrgIvCyUuy84ZpQdcX1pX5XXpBgcaQlZmU3AO7TgRDc4eIf
rc28rHILUXtVnE75V09TVtz/t7XIV30VXts/WPWIMQhFCOnabGTeX3QJIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFKA71wGmzhRITf1K+ojuiJRKEDWMB8GA1UdIwQY
MBaAFImsuIk+lBgHR+7Bl17VYExN2+DFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wY2Q0YmUtMjQ3Zi00ZGUyLTkzOGMt
ZjBjZDhiYjU1MmUwLzEvVW9EdlhBYWJPRkVoTl9VcjZpTzZJbEVvUU5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wY2Q0YmUtMjQ3Zi00ZGUyLTkzOGMtZjBjZDhiYjU1MmUw
LzEvaWF5NGlUNlVHQWRIN3NHWFh0VmdURTNiNE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ4AMA0G
CSqGSIb3DQEBCwUAA4IBAQBk1B/3Rh9R968Z7ERmBb0nwvwr85HjBdCWHOeOQrM0
jkpcjGILNHSi+PXl2lt+3N6+TzGfsZ5LovkFENV5F6/jiJBgydaUl92pYIpfgJvS
X04GYU1yR8+iqpXKrTYunIHJcPTaQiqbJTpsHsX3lDpTME3hehiqNnQRCbqbJj2H
JUxL2TbwwAiCu+PwXJYLbIzGRBqwqvhctRNija/qgVsPKWInYp4EUk5S+5YcMI0a
cDqn3YIkK45uyRFN/V+dYN7D0kyrV4J4X4P2UhdzN5msh7AlQd4Lgw6kAVfEwhRC
CQK2IJkZld2MO7bo1PDdS2vuHivp1L0qW9RIOntyY4Hp
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net