Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/4VXeu2hhjeViVMGVDBfQaFax9kM.roa
File: 4VXeu2hhjeViVMGVDBfQaFax9kM.roa (raw, json)
Hash identifier: VBsnbWGiYKzkT4PNnnjGf8OnLgz9zbh8LPkcOyR2FRA=
Subject key identifier: E1:55:DE:BB:68:61:8D:E5:62:54:C1:95:0C:17:D0:68:56:B1:F6:43
Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial: 019426D984BC5834800EBBF163416A1EA9A2
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/4VXeu2hhjeViVMGVDBfQaFax9kM.roa
Signing time: Thu 02 Jan 2025 11:49:36 +0000
ROA not before: Thu 02 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212344
IP address blocks: 45.85.186.0/23 maxlen: 23
45.85.186.0/24 maxlen: 24
45.85.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:84:bc:58:34:80:0e:bb:f1:63:41:6a:1e:a9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Validity
Not Before: Jan 2 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e155debb68618de56254c1950c17d06856b1f643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:5d:75:95:a4:f9:23:fb:59:43:fb:e5:3a:
07:4a:01:93:51:48:cb:d5:39:20:cf:b2:3d:4f:12:
aa:ff:ee:a1:c2:6c:0c:c5:9f:7f:cf:23:b2:1e:d4:
b5:2c:77:5b:c6:2d:5e:29:a9:d0:59:67:c0:88:9c:
19:bf:de:b9:81:1f:a1:c9:8b:51:f4:a7:f0:bd:d3:
98:a7:71:77:ee:60:37:94:16:76:88:f9:da:d9:a2:
81:81:e9:ff:82:65:e7:3e:09:55:97:30:3a:c2:11:
2a:c4:d6:39:e4:b5:f8:c1:70:ac:38:60:0d:47:9e:
09:42:44:91:bf:af:ab:c1:42:16:c6:1f:1c:81:54:
d8:61:ce:0e:2d:7e:f1:ee:47:1a:33:f8:e2:9c:84:
30:6e:ac:9a:a1:4e:1b:51:f0:cf:29:4d:b2:0d:4b:
6e:e8:ed:b9:7c:eb:0e:8b:d4:01:83:2b:42:df:ee:
81:83:ee:bd:14:24:2f:41:be:f1:3e:0d:81:42:ac:
9d:6f:c5:5a:07:d3:48:fa:71:b6:2e:2b:bd:69:47:
c5:0c:be:ec:aa:7c:00:90:18:9f:bb:20:54:da:45:
96:01:f1:ab:e6:db:9a:6d:28:e9:96:b9:b3:92:b8:
c9:ff:47:bc:df:28:59:f0:c9:e7:5a:66:50:1e:c5:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:DE:BB:68:61:8D:E5:62:54:C1:95:0C:17:D0:68:56:B1:F6:43
X509v3 Authority Key Identifier:
keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/4VXeu2hhjeViVMGVDBfQaFax9kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.186.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:56:d5:b2:52:b0:e7:f7:e4:f1:a2:45:7f:08:d5:f0:63:41:
b4:39:73:e4:d1:61:db:e3:83:df:50:0a:a3:ac:34:1b:63:d5:
c2:2c:dd:4b:63:10:38:cb:16:d8:f7:aa:17:05:cb:61:c2:f6:
a5:b8:6f:db:c5:8a:03:4f:c2:9e:36:89:8a:4c:05:65:ce:cd:
48:d4:63:3a:2b:ea:93:22:d6:1f:36:f5:f4:e1:35:7b:85:b6:
b4:77:43:a9:62:eb:50:8d:77:5e:08:b9:fd:16:b9:b8:ff:2d:
1e:ea:20:42:e7:5f:d3:7c:1e:ac:8e:2a:fe:4b:24:0d:81:5f:
29:bf:6f:02:38:0e:61:2a:29:00:d1:35:5e:64:7f:67:2d:3c:
0b:2e:13:4f:f0:57:b2:45:b7:64:67:02:2b:d3:5c:63:05:4b:
a9:2d:9c:73:98:ba:e0:96:65:bc:c4:36:1d:bd:0d:a6:bc:5c:
5a:8c:18:b9:d6:ca:02:4a:ae:d4:87:c8:4b:12:5a:1a:3f:b1:
ab:86:e5:b3:fa:89:6f:af:1b:e4:cb:81:cd:89:98:79:47:59:
6a:72:77:09:1d:0c:1c:7d:4c:c7:73:78:1d:58:5c:cc:95:ad:
7a:0d:a3:23:28:dd:9a:87:8c:5c:c9:09:16:50:34:52:69:af:
c3:e6:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:02:38 2025 by rpki-client on console.sobornost.net