Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/C0P7fdeMbUq_SUkoUNzucceRO_o.roa
File: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (raw, json)
Hash identifier: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=
Subject key identifier: 0B:43:FB:7D:D7:8C:6D:4A:BF:49:49:28:50:DC:EE:71:C7:91:3B:FA
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 0194266AAFDFD58CD7F85B0AB32F5A18FCDF
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/C0P7fdeMbUq_SUkoUNzucceRO_o.roa
Signing time: Thu 02 Jan 2025 09:48:33 +0000
ROA not before: Thu 02 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 45.93.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:af:df:d5:8c:d7:f8:5b:0a:b3:2f:5a:18:fc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Jan 2 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b43fb7dd78c6d4abf49492850dcee71c7913bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:51:ad:09:9a:80:41:49:31:92:0d:a3:f8:
12:1f:ea:7c:f2:91:9f:1a:72:4e:12:b5:7a:6a:61:
77:72:82:60:54:d1:bc:8a:fa:0c:a1:4e:64:8b:51:
0a:d8:54:3f:8e:29:25:38:02:ef:b5:47:49:78:22:
8c:68:e1:10:a1:e6:a6:63:f3:61:b7:19:48:61:26:
b2:fa:71:7e:9b:72:79:90:1e:75:0c:a7:ee:63:c5:
2c:5e:3e:00:3d:b7:d1:78:90:21:10:23:dd:3b:b3:
64:e4:07:b7:0e:34:53:c4:ba:d8:7c:48:76:90:2b:
51:4c:83:ad:e1:a0:87:47:b0:b6:53:5b:3f:34:57:
80:6d:ec:99:0d:ea:1c:f0:cb:b8:b2:69:ef:54:ae:
83:87:69:1a:9b:de:da:9c:df:a3:34:d7:52:73:d3:
3e:0f:4f:92:04:d3:c1:0b:26:2e:aa:eb:d2:d1:cb:
86:a7:fe:d2:e6:e0:80:28:cc:d1:e4:1d:f8:5f:f2:
ec:72:98:74:50:46:f7:24:08:64:ec:8e:8d:f5:4d:
09:c6:45:a9:9b:94:cc:33:e1:01:64:b3:8d:4d:fd:
4c:9a:3b:2a:52:0e:a2:16:12:99:b0:13:58:87:cf:
f5:70:09:f6:1a:5b:e1:64:70:07:36:11:03:8e:92:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:43:FB:7D:D7:8C:6D:4A:BF:49:49:28:50:DC:EE:71:C7:91:3B:FA
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/C0P7fdeMbUq_SUkoUNzucceRO_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.144.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:24:e2:c7:39:fd:20:fc:d2:3e:d9:5b:9e:d9:5d:cf:e7:a8:
9a:ec:ab:4e:9e:33:f2:25:50:61:2e:f1:76:cb:15:5e:7e:79:
30:21:e0:42:69:77:60:99:c4:35:dd:85:6b:10:d9:46:6c:0e:
65:09:fd:d5:21:f2:96:3c:d2:9c:c8:20:ca:d9:07:47:c5:8b:
95:93:35:86:eb:1d:6b:ca:29:47:57:7d:53:ba:45:ed:26:a1:
ea:ad:6b:f9:48:63:a7:22:89:ed:44:55:0d:54:fd:04:3b:49:
e6:da:a1:16:60:f1:f9:c3:23:4a:90:e4:63:24:07:73:21:f2:
48:2f:87:78:49:ff:f7:d2:be:33:32:66:51:8a:9a:ba:3b:c3:
ff:6f:16:2d:ea:cb:db:99:bd:17:9b:81:ea:85:b4:1f:b3:22:
d3:ba:2b:8b:3a:8d:4a:a1:3d:82:42:8b:57:a9:b1:17:49:16:
7f:fc:9e:74:94:a5:b4:5f:aa:8d:9e:64:fe:b8:91:6f:8d:5b:
55:73:a5:59:d6:24:6f:e9:48:0d:87:ac:55:cf:6c:0e:63:cf:
e4:0c:cd:0d:2e:0c:d8:6b:32:08:14:73:4e:c0:e3:b3:69:e4:
11:06:a9:df:8d:fd:87:9c:46:bc:b6:ca:18:0d:fc:04:0b:62:
07:63:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:19 2025 by rpki-client on console.sobornost.net