Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4UTrMDBsnTW05VAmee-kYvvkZtw.roa
File: 4UTrMDBsnTW05VAmee-kYvvkZtw.roa (raw, json)
Hash identifier: mBj3/TILrvb4R+AQ57XKtKNn9AEoUocCGOGlrCybSN4=
Subject key identifier: E1:44:EB:30:30:6C:9D:35:B4:E5:50:26:79:EF:A4:62:FB:E4:66:DC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019619FC9AFC29D31D7517A7AABFF257703D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4UTrMDBsnTW05VAmee-kYvvkZtw.roa
Signing time: Wed 09 Apr 2025 09:58:27 +0000
ROA not before: Wed 09 Apr 2025 09:58:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204872
IP address blocks: 45.15.244.0/22 maxlen: 22
195.216.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:fc:9a:fc:29:d3:1d:75:17:a7:aa:bf:f2:57:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 9 09:58:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e144eb30306c9d35b4e5502679efa462fbe466dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:4d:da:70:75:19:9b:1a:65:d6:51:fc:eb:
ac:62:ec:96:84:ec:44:f8:bf:a5:5b:d9:2f:f5:69:
5a:e5:be:95:ca:8b:bf:e2:bc:08:98:b4:70:3c:1d:
ef:aa:10:54:42:1b:c6:7a:2a:82:4c:33:b8:80:f3:
7e:81:5b:da:22:58:85:93:50:af:2a:00:0f:10:f0:
8c:33:48:f8:6b:db:22:aa:7d:ec:b7:f2:08:62:8d:
89:14:24:de:a0:df:86:07:fe:ea:a2:cd:a5:87:50:
b5:34:d1:b4:fa:97:d8:1e:5a:5a:ae:43:57:c0:8b:
1f:b8:c1:27:0a:f0:3a:00:a3:43:ca:1b:9a:44:32:
5a:a3:81:82:db:5c:38:0c:e2:6b:2b:09:79:f7:65:
15:30:b2:2d:ec:91:19:86:99:94:3a:98:cd:15:c9:
0e:79:16:72:e9:9e:f4:7e:aa:6e:9c:a8:ea:38:7e:
72:a3:20:2c:6e:e6:e0:94:a6:67:f5:92:e6:b2:e0:
d8:4d:17:f4:d6:6c:0f:3f:5e:92:7a:7d:5b:48:28:
70:d5:28:d4:ae:bb:db:bc:fc:f7:46:93:77:4c:75:
3c:8f:15:ad:a4:71:5d:83:a6:64:03:85:6a:e4:ca:
26:fb:09:1a:bf:6a:f2:67:ef:bd:1e:24:a6:4c:64:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:EB:30:30:6C:9D:35:B4:E5:50:26:79:EF:A4:62:FB:E4:66:DC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4UTrMDBsnTW05VAmee-kYvvkZtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.244.0/22
195.216.156.0/22
Signature Algorithm: sha256WithRSAEncryption
53:5d:c8:f8:2b:ce:04:c8:e1:19:b1:57:4d:cc:fb:e5:e8:70:
d4:be:61:e7:f6:8f:93:84:75:3b:e8:0c:50:51:37:1e:0c:d7:
0c:78:2a:67:2a:49:78:3b:a4:bf:21:42:54:d4:13:12:cc:50:
ed:76:74:76:52:e9:a4:1c:2c:02:e8:49:bd:2e:08:60:6b:7d:
d0:3f:47:88:7d:7e:e6:5b:a8:9c:23:08:85:3c:5d:3b:7e:71:
44:e2:07:db:1d:89:0e:ec:67:a3:d0:c3:0d:4b:2e:cf:78:52:
99:82:2a:35:37:5b:7f:22:06:04:21:04:2d:9a:c2:82:e7:57:
05:f9:95:e2:12:68:c1:53:fe:7c:22:a8:65:e4:6e:18:e4:48:
43:0d:61:98:14:4e:2c:02:94:b5:d2:35:1d:9b:54:02:67:cb:
c5:5a:b7:55:5d:66:c4:1c:a9:e5:82:c9:32:f2:85:29:bb:f4:
9f:f8:e4:77:f4:b2:2a:1f:e9:83:52:4a:d9:74:a0:64:d7:69:
ed:1f:0a:f3:ec:ad:1e:c5:38:8c:dc:9d:fb:79:93:dc:7d:8b:
55:35:c5:16:98:a8:88:fd:b1:88:56:68:48:59:d7:65:cb:36:
48:5e:ba:8f:ab:3b:fa:67:ec:ea:35:a6:b1:6f:24:d5:1d:02:
e5:65:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net