Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/xpTRCuHlYWLPipg1pf1wuJHDIPg.roa
File: xpTRCuHlYWLPipg1pf1wuJHDIPg.roa (raw, json)
Hash identifier: 8yVx7sKih/ir7FZHTNGaky/UBkdstIszyQkTRTd/9nQ=
Subject key identifier: C6:94:D1:0A:E1:E5:61:62:CF:8A:98:35:A5:FD:70:B8:91:C3:20:F8
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 019425FBF2793CA5CA35167AADA807BFFEBC
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/xpTRCuHlYWLPipg1pf1wuJHDIPg.roa
Signing time: Thu 02 Jan 2025 07:47:36 +0000
ROA not before: Thu 02 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202837
IP address blocks: 45.92.12.0/24 maxlen: 24
45.92.13.0/24 maxlen: 24
45.92.14.0/24 maxlen: 24
45.92.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f2:79:3c:a5:ca:35:16:7a:ad:a8:07:bf:fe:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 2 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c694d10ae1e56162cf8a9835a5fd70b891c320f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:67:75:09:3b:09:a4:a9:bc:06:cd:dd:8c:
a2:ed:2e:21:de:42:07:f0:a9:bb:f3:35:f2:56:c1:
4a:65:25:d5:73:f5:3e:3f:75:4e:ad:2e:21:ac:b8:
5b:77:c9:5a:29:ce:4c:c5:87:19:b8:91:b5:73:c8:
e4:b2:7a:3a:23:42:b5:c0:3f:46:fa:69:4c:db:45:
f8:29:38:df:a3:0c:86:70:e6:ab:7d:9b:9c:bc:15:
71:53:ad:19:3a:77:4b:e2:96:bd:6a:ad:58:c9:2d:
4d:81:27:8a:b1:12:9f:95:45:6e:a3:4b:a7:1f:9d:
9e:66:06:63:7b:67:7e:40:4d:68:90:46:f7:76:5b:
c4:8e:e6:b4:87:f4:38:df:08:c8:df:88:6d:41:09:
d5:db:59:d9:34:0e:9a:67:aa:07:77:81:e1:cb:17:
8c:8b:eb:32:b1:c4:da:b6:18:f6:c4:00:c7:d6:18:
57:e5:d7:7f:ae:30:f6:a9:cb:c5:b9:be:fe:a2:fd:
f2:08:af:b5:14:eb:96:27:d9:57:2d:ff:b4:55:8a:
8d:3c:ad:3b:43:99:58:da:06:4c:93:fb:ab:d3:5f:
9a:ca:20:66:ea:38:20:4b:e5:c6:84:40:5e:4a:29:
47:4e:7b:f9:29:90:36:1c:e9:10:d2:51:8f:39:f3:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:94:D1:0A:E1:E5:61:62:CF:8A:98:35:A5:FD:70:B8:91:C3:20:F8
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/xpTRCuHlYWLPipg1pf1wuJHDIPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/22
Signature Algorithm: sha256WithRSAEncryption
16:5b:7a:2c:f0:11:04:8b:7e:c7:f6:bc:2d:2e:63:b1:6f:cd:
cc:5b:6e:52:49:36:4d:f0:a5:5a:68:8c:91:5c:46:90:80:5c:
ce:9d:86:cd:a4:9d:bc:95:9e:dd:a4:2b:d7:5d:d1:ab:01:f2:
81:0d:d9:40:60:af:58:5f:cf:a1:e1:cb:de:92:c9:bb:5f:d6:
b9:c3:79:85:cc:22:32:03:a7:aa:47:19:ff:3a:d6:bc:73:48:
9b:69:6d:aa:81:5c:ca:92:71:c4:f8:8e:c1:34:ca:26:62:0c:
83:97:94:c3:5f:c5:d2:b7:37:94:89:95:87:7c:57:19:9e:40:
38:6a:a3:16:d1:33:e1:d7:9a:d5:b7:a0:95:29:d3:16:aa:c5:
43:be:d9:4f:2b:3d:4b:ee:7c:5b:e5:27:26:19:0c:2e:c2:91:
66:d3:29:3b:16:45:a9:10:ed:d2:33:22:a7:cd:1d:5e:2b:38:
ff:a7:84:94:fb:12:98:51:9f:2a:18:08:d8:36:29:c1:cc:ec:
f0:0e:53:9b:47:a3:9d:ea:cd:ac:11:47:5a:49:e9:ba:de:9c:
7e:fd:a8:17:47:cc:c7:fe:49:4c:68:2d:4f:e2:da:52:37:78:
5b:53:f9:a5:ad:d3:c1:11:d7:19:74:11:55:a6:45:79:0d:40:
eb:62:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net