Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa
File: AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa (raw, json)
Hash identifier: 6Kj79eLeBWoibWni/+p7vdKVc5LjnECRVHDoIBU87h8=
Subject key identifier: 01:D4:C2:F3:33:9A:EB:4C:AD:6D:49:EF:C9:6A:D8:6F:3E:53:F8:19
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 0194266BB72254AA14A141801F5BB107B407
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397735
IP address blocks: 45.142.248.0/24 maxlen: 24
45.142.249.0/24 maxlen: 24
45.142.250.0/24 maxlen: 24
45.142.251.0/24 maxlen: 24
193.53.2.0/24 maxlen: 24
193.53.5.0/24 maxlen: 24
193.53.7.0/24 maxlen: 24
193.53.12.0/24 maxlen: 24
2a0e:dd40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b7:22:54:aa:14:a1:41:80:1f:5b:b1:07:b4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d4c2f3339aeb4cad6d49efc96ad86f3e53f819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:d7:29:d9:4c:91:aa:7a:79:d1:f4:7e:57:
3d:e1:64:48:ed:3c:bd:ba:7b:bf:1d:c0:23:a2:4f:
6a:49:67:44:bb:b5:17:b7:f3:3f:50:56:08:5b:d4:
c2:b1:1e:97:e7:64:e0:b1:a0:1a:36:ee:a6:4e:9d:
d3:be:79:b1:85:1f:71:02:d6:9c:32:78:f7:12:33:
71:df:26:3d:64:8a:16:a5:56:2d:a7:18:ac:fd:72:
5d:a6:cc:46:37:3b:93:47:57:10:bb:a0:c6:3c:68:
82:f8:28:c1:04:c0:df:d5:14:17:14:07:3c:c6:ce:
d2:d5:18:c4:e9:7a:aa:4e:cd:1b:80:92:e4:64:ba:
cf:6f:8e:01:ef:76:90:de:dd:ad:14:08:da:ad:a5:
20:d8:c0:e2:72:26:63:5b:99:b4:e3:5f:06:34:9e:
80:e5:09:59:f9:84:83:01:38:84:86:3b:49:ee:af:
75:68:58:9c:2f:14:29:0e:32:04:15:9b:d4:d6:9a:
50:8d:64:9a:5d:fa:d1:02:74:f9:7a:36:af:76:0b:
9f:c4:f5:5f:a1:60:c8:c7:8e:86:36:18:30:8f:04:
9d:af:e0:ed:6b:44:6d:92:be:b9:aa:99:3e:f4:13:
4e:c8:f1:60:19:bb:f6:9c:88:96:b9:44:da:e1:e1:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D4:C2:F3:33:9A:EB:4C:AD:6D:49:EF:C9:6A:D8:6F:3E:53:F8:19
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.248.0/22
193.53.2.0/24
193.53.5.0/24
193.53.7.0/24
193.53.12.0/24
IPv6:
2a0e:dd40::/32
Signature Algorithm: sha256WithRSAEncryption
3b:d9:ec:de:1e:9a:0b:25:d4:c4:c0:d5:be:42:12:93:2d:7d:
3e:88:08:5a:32:80:94:f8:96:44:63:a1:64:5c:65:88:43:eb:
1e:36:78:cc:d8:21:fa:d7:b6:23:d8:7e:80:76:8b:87:95:7d:
f0:1d:6f:d4:e4:03:11:b6:af:30:83:f5:87:c2:05:64:28:62:
cf:7e:f1:37:65:c6:cd:52:de:39:b9:7f:4a:70:8b:f0:e7:b4:
27:2e:47:73:51:29:7d:83:57:43:6c:92:9c:cf:c5:d6:8f:a1:
2d:ac:ca:16:4a:d1:90:48:80:85:ab:43:27:99:91:78:13:5e:
ab:71:58:a3:17:50:2e:1a:89:4b:6b:d0:e9:fe:07:aa:f0:c9:
64:b0:a7:4f:70:1f:14:2f:72:60:ec:13:62:3b:a9:52:56:45:
71:57:a9:e7:f2:25:a3:86:89:a5:8e:42:e8:98:77:1c:31:97:
5a:ca:b6:58:ef:60:65:00:d5:c1:1a:13:6a:48:f0:6e:85:17:
34:74:eb:c4:e2:85:a0:ec:58:b9:bf:11:4d:5e:fa:4b:55:1a:
7b:97:e6:c3:df:3b:0a:59:da:db:8c:c4:dd:d3:44:1e:eb:a6:
c4:78:dc:27:2b:9d:df:02:fa:d9:52:8d:0d:8d:27:8a:55:40:
83:08:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net