Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/7qvgIj3jypWMSKFnvSypb6eNA_Y.roa
File: 7qvgIj3jypWMSKFnvSypb6eNA_Y.roa (raw, json)
Hash identifier: MROlFsFZhg7uUHfqBSW5TAr927G+FcG0aizwMj7xAAs=
Subject key identifier: EE:AB:E0:22:3D:E3:CA:95:8C:48:A1:67:BD:2C:A9:6F:A7:8D:03:F6
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 01943B221DB5EA07003F55D9B73DE438A0E1
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/7qvgIj3jypWMSKFnvSypb6eNA_Y.roa
Signing time: Mon 06 Jan 2025 10:21:18 +0000
ROA not before: Mon 06 Jan 2025 10:21:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31529
IP address blocks: 45.142.220.0/24 maxlen: 24
45.142.221.0/24 maxlen: 24
45.142.222.0/24 maxlen: 24
45.142.223.0/24 maxlen: 24
2a0e:dbc0::/48 maxlen: 48
2a0e:dbc0:1::/48 maxlen: 48
2a0e:dbc0:2::/48 maxlen: 48
2a0e:dbc0:3::/48 maxlen: 48
2a0e:dbc0:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:22:1d:b5:ea:07:00:3f:55:d9:b7:3d:e4:38:a0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Jan 6 10:21:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeabe0223de3ca958c48a167bd2ca96fa78d03f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:0b:ae:e8:60:1a:fc:ec:6c:cb:e4:05:ca:
78:20:28:74:db:88:39:ed:4f:6d:ff:71:5f:41:2b:
c5:90:d9:a5:6d:d5:06:72:3c:94:c9:2d:5f:a9:8e:
ed:28:2a:85:37:4d:92:d1:33:9c:91:82:66:1e:09:
b8:e1:ee:73:dc:8c:66:3a:ae:af:cd:5f:cc:82:f4:
47:e0:11:2e:fd:ec:47:a5:36:ca:c6:7d:7b:08:77:
30:de:4a:b2:89:65:7e:54:c4:4b:51:26:18:23:ac:
19:f8:66:90:57:9d:bc:61:17:0b:9e:2a:49:bf:17:
ec:35:cb:18:48:98:41:f2:19:0b:47:77:5d:8a:03:
89:02:ac:79:ef:fd:45:8e:e4:1e:07:c4:74:c0:46:
63:f6:d7:a5:e7:58:75:cd:0c:96:92:76:ca:10:88:
23:84:7f:b7:6d:5d:47:b1:10:aa:2d:24:eb:12:84:
85:2b:28:2f:1c:4c:cf:0d:80:70:d6:d9:13:c7:84:
6b:4e:bf:10:37:cd:c0:79:2c:fe:2e:1d:cf:1f:9f:
95:0c:71:60:aa:45:c2:32:37:df:a6:57:5e:f2:4b:
73:2c:32:b5:33:3a:99:72:33:7d:62:09:c7:db:2c:
26:3c:28:92:69:b7:50:27:ff:e7:a6:28:00:ef:16:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:E0:22:3D:E3:CA:95:8C:48:A1:67:BD:2C:A9:6F:A7:8D:03:F6
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/7qvgIj3jypWMSKFnvSypb6eNA_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.220.0/22
IPv6:
2a0e:dbc0::/46
2a0e:dbc0:3000::/48
Signature Algorithm: sha256WithRSAEncryption
2c:db:dd:4e:cb:f5:93:03:a7:fc:e6:c6:8c:0b:80:a2:5b:6d:
67:68:3c:9d:5a:a2:76:d9:67:6b:30:9b:df:fa:7c:a7:4f:b9:
dd:a1:e3:ee:fc:c1:7a:40:3a:6e:fa:50:e9:bb:4b:cb:0b:41:
ab:23:2f:d3:76:0f:4a:36:6b:8e:04:52:e8:69:f1:c7:b6:d0:
55:d7:ea:e7:19:11:51:d3:71:76:9b:49:fb:24:6d:fb:70:d8:
7c:7d:50:65:cf:41:c0:1d:1e:a5:15:7c:46:c5:11:c2:bb:46:
5d:37:33:a0:4c:a9:2c:1b:c8:7e:03:a9:95:72:76:8d:40:b2:
06:2a:e6:72:98:00:15:b3:cd:da:4b:e5:09:90:36:15:63:48:
89:65:a1:01:17:8e:5a:13:d5:0f:27:9b:e9:18:7b:2a:f3:b4:
17:d7:36:43:95:90:ee:4a:60:72:9e:2b:b4:33:37:0a:da:b3:
81:4b:d2:40:1a:09:c9:ab:8a:d7:1e:d7:45:db:1d:fa:ef:65:
9f:57:1f:ac:86:bb:8d:45:af:45:90:15:13:eb:ac:5f:59:b6:
a8:84:70:14:91:e8:50:cf:be:48:21:dc:8e:e2:c2:1e:6b:b2:
f8:53:07:69:46:dc:4c:be:6e:c1:69:53:32:fa:8f:49:30:8e:
b7:d0:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net