Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/WUxc8OaDvlLuIRaGhHw99-2pQV8.roa
File: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (raw, json)
Hash identifier: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=
Subject key identifier: 59:4C:5C:F0:E6:83:BE:52:EE:21:16:86:84:7C:3D:F7:ED:A9:41:5F
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 0194266AC6FFCA43766F4856D3D87D08B973
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/WUxc8OaDvlLuIRaGhHw99-2pQV8.roa
Signing time: Thu 02 Jan 2025 09:48:39 +0000
ROA not before: Thu 02 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202548
IP address blocks: 45.130.45.0/24 maxlen: 24
185.42.160.0/24 maxlen: 24
185.212.185.0/24 maxlen: 24
2a0f:a040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:c6:ff:ca:43:76:6f:48:56:d3:d8:7d:08:b9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Jan 2 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=594c5cf0e683be52ee211686847c3df7eda9415f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:65:4e:aa:f9:05:61:78:1b:a8:9c:c3:f1:
fe:62:72:bc:d0:57:5c:8a:5a:82:2c:af:0d:85:ea:
14:41:4d:47:93:b0:45:9d:13:98:5a:18:a8:b7:1a:
a9:e0:d7:89:99:b9:07:45:1a:d4:16:b8:34:cc:ac:
89:08:b2:93:d4:1a:c7:0d:0f:38:39:3a:35:0f:7e:
93:7b:1f:8f:6c:74:d4:20:b4:d3:5c:10:af:c9:af:
90:60:c9:8e:12:b8:e8:32:0f:11:79:26:98:ee:c1:
5a:2e:be:ca:2f:fc:b3:85:da:c7:22:b1:f4:26:4f:
2e:90:e5:d2:70:e9:cc:e0:c2:ff:28:5c:65:66:66:
b1:6f:2a:e5:7e:d4:ef:93:14:8d:1d:2e:75:7c:e5:
c3:72:fc:bc:91:4a:80:42:b0:7b:29:44:33:07:d1:
d1:22:b4:66:27:18:32:fb:8d:f4:59:7b:bf:1d:45:
ad:4a:92:fc:e4:6c:05:e6:dd:60:30:9c:3e:34:c3:
c0:39:44:24:50:4a:c9:5a:3c:a5:ca:b0:d1:5d:54:
a1:19:7e:a6:e9:97:7d:d9:3c:d2:b3:4b:a1:40:de:
84:d5:31:dc:31:3e:36:e5:d8:c1:ab:0d:2c:ae:80:
79:72:6a:1c:cb:2a:94:d5:11:02:3b:07:f0:fc:d0:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:5C:F0:E6:83:BE:52:EE:21:16:86:84:7C:3D:F7:ED:A9:41:5F
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/WUxc8OaDvlLuIRaGhHw99-2pQV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.45.0/24
185.42.160.0/24
185.212.185.0/24
IPv6:
2a0f:a040::/29
Signature Algorithm: sha256WithRSAEncryption
9b:e8:33:14:d3:56:75:81:fc:0f:39:5b:5c:56:d0:b9:8d:4e:
88:5c:80:60:96:86:b5:89:04:69:70:1f:04:d3:0c:d4:ff:a9:
2d:74:1f:36:03:f7:0c:44:92:80:96:a8:9c:4e:43:56:ef:ff:
e8:b3:c2:18:6a:14:28:2f:40:d1:37:c7:a1:a2:d2:cb:f1:7e:
b6:dc:ab:29:cc:a4:01:59:48:4c:28:71:ea:8d:fc:f8:0e:ee:
39:1c:93:d5:71:da:96:41:09:5b:20:6d:58:77:9c:0d:f5:ec:
f5:4f:d2:a8:92:cd:09:3b:8c:f7:c5:62:48:86:41:47:62:c7:
6d:75:90:94:aa:0d:a7:37:20:23:ba:f1:7a:52:c9:8c:ca:9b:
f7:ee:03:b0:74:45:27:0c:67:5a:7b:6c:ee:03:12:ee:7a:65:
dd:41:e9:cb:76:76:dd:9b:17:b5:e7:ea:70:cc:62:f0:51:63:
d7:12:54:45:e2:55:a0:af:90:a0:b9:75:da:86:f2:db:8d:da:
90:b5:2b:1c:61:bf:7f:56:61:48:43:95:7b:be:e0:11:c8:ca:
92:25:65:d0:5e:e3:df:56:80:71:f1:05:7a:6d:46:e0:12:ce:
42:91:92:a2:8f:22:18:b2:0e:89:76:e7:20:86:74:24:f5:df:
05:42:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net