Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/la2dPjbXAEn7TCutV5FDNd87YgY.roa
File: la2dPjbXAEn7TCutV5FDNd87YgY.roa (raw, json)
Hash identifier: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=
Subject key identifier: 95:AD:9D:3E:36:D7:00:49:FB:4C:2B:AD:57:91:43:35:DF:3B:62:06
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019426D90088847A00AD45C70B71B14AB57B
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/la2dPjbXAEn7TCutV5FDNd87YgY.roa
Signing time: Thu 02 Jan 2025 11:49:03 +0000
ROA not before: Thu 02 Jan 2025 11:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208183
IP address blocks: 45.152.228.0/22 maxlen: 22
45.152.228.0/24 maxlen: 24
45.152.229.0/24 maxlen: 24
2a0f:6500::/32 maxlen: 32
2a0f:6500:1000::/36 maxlen: 36
2a0f:6500:2000::/36 maxlen: 36
2a0f:6500:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:00:88:84:7a:00:ad:45:c7:0b:71:b1:4a:b5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Jan 2 11:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95ad9d3e36d70049fb4c2bad57914335df3b6206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:09:9d:8d:0f:00:99:63:54:54:6c:64:77:
2a:2d:21:a8:c4:11:cb:3b:e0:61:17:51:66:6a:33:
57:7f:ce:29:30:96:63:de:14:d0:a9:55:00:1e:e9:
fb:6b:4e:bd:b8:5f:97:aa:f3:a5:d4:e5:80:a4:2f:
38:4d:b5:f9:0c:7a:04:67:5b:47:f0:15:6d:b6:1c:
0c:7c:f0:86:75:ee:f7:96:c1:2c:22:df:96:df:1b:
03:ae:65:32:86:b6:fa:cb:8a:30:c7:3d:5d:15:b6:
c7:80:34:43:35:ca:49:97:7a:c4:ff:0e:4c:71:47:
ee:fd:a6:01:b8:ba:b6:98:0f:f6:43:8d:40:87:71:
09:57:93:aa:c3:be:d7:ee:6e:96:ab:f3:f8:b5:25:
54:44:5b:0e:c6:03:5d:f0:b1:e0:e9:e3:15:c2:39:
9a:be:da:ad:79:44:b7:56:d1:c7:c4:55:22:cc:76:
fa:5c:ef:2b:20:64:b5:45:54:3c:54:22:4a:f6:af:
4b:54:c5:53:7d:a8:65:4f:26:38:fd:1b:ec:78:d7:
0c:db:da:89:aa:9e:bc:da:38:53:94:f6:d5:71:e5:
02:64:8e:8f:f1:0a:a3:21:cf:8c:b1:14:06:23:f1:
dd:1d:7b:d3:02:21:de:1f:f3:ae:66:26:6b:9c:1f:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AD:9D:3E:36:D7:00:49:FB:4C:2B:AD:57:91:43:35:DF:3B:62:06
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/la2dPjbXAEn7TCutV5FDNd87YgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.228.0/22
IPv6:
2a0f:6500::/32
Signature Algorithm: sha256WithRSAEncryption
0b:21:3e:3d:86:f5:cc:4a:1a:6d:a4:52:b4:69:12:e4:9f:23:
0c:c8:b7:27:1e:59:87:f8:18:01:b9:13:44:87:0d:aa:4f:ea:
fc:19:83:0a:08:58:3c:c0:fc:6f:9a:de:8d:e8:9d:cc:1d:66:
99:62:f8:86:1c:51:e3:1f:5a:8d:f7:af:a5:99:91:e4:31:c2:
fb:98:2e:95:24:0c:b5:e1:49:89:39:39:03:76:75:a3:90:3d:
43:b1:5a:c8:9f:22:d1:ac:56:5b:cf:98:c3:f7:0e:d6:b2:2e:
51:f6:9b:28:02:a5:89:66:2d:89:9e:0b:18:5e:fa:83:b2:ea:
16:b1:06:c9:f9:34:32:52:4d:1a:c2:40:e1:52:36:63:ef:69:
62:ad:0f:7f:58:00:dc:9e:4a:e4:21:d3:2f:8c:b7:fa:6d:ea:
9b:7f:d5:f3:00:5b:74:dd:de:f4:8c:b3:34:92:b2:25:19:a6:
37:f6:f2:eb:44:4e:d8:d7:4b:71:0e:bf:5e:12:0b:84:fd:40:
7b:c4:0c:d5:60:24:2d:3e:46:34:0a:36:ba:b2:21:4c:06:25:
ba:af:a7:8f:08:8a:1d:62:fd:63:60:f7:41:e8:87:d8:58:da:
f7:bf:98:3a:eb:67:a9:77:00:70:8e:61:1e:53:79:92:7e:f6:
e6:2b:f0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net