Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/ugnRmlrkR8TJKKb_eVy88x5cRBU.roa
File: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (raw, json)
Hash identifier: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=
Subject key identifier: BA:09:D1:9A:5A:E4:47:C4:C9:28:A6:FF:79:5C:BC:F3:1E:5C:44:15
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019426D9B6D7970A140117E21F7D16CA7298
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/ugnRmlrkR8TJKKb_eVy88x5cRBU.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20568
IP address blocks: 45.88.204.0/22 maxlen: 22
45.88.204.0/24 maxlen: 24
45.88.205.0/24 maxlen: 24
45.88.206.0/24 maxlen: 24
45.88.207.0/24 maxlen: 24
91.144.100.0/24 maxlen: 24
2a03:9900:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b6:d7:97:0a:14:01:17:e2:1f:7d:16:ca:72:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba09d19a5ae447c4c928a6ff795cbcf31e5c4415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:eb:c6:df:6c:f9:77:ee:de:be:2c:44:80:
0d:fa:b7:7a:b0:32:b0:ba:07:fc:90:d5:99:a9:84:
bd:81:e0:96:dc:7a:1f:e1:13:29:48:30:b9:1f:e3:
b4:a7:50:79:64:1e:bf:7d:b6:3e:4b:a4:e3:9a:c8:
2a:fe:6f:40:b9:8a:f1:54:88:83:8b:8d:b0:18:d3:
47:62:9d:13:fc:71:c0:e0:6b:bb:64:24:c7:30:a8:
74:ce:3b:ed:cb:26:68:3e:42:86:fd:1f:61:17:4e:
22:fc:a5:cf:59:36:ab:b2:c2:b9:4e:a1:f9:79:18:
69:b6:21:0d:23:f0:f4:56:07:8e:6c:d2:8a:e8:ba:
28:62:4d:a4:3f:15:6b:b5:44:77:fa:f2:76:fb:ff:
6b:29:9c:d6:25:52:bb:f1:70:73:d2:f3:ae:a7:ff:
a4:23:12:f1:d3:9e:d8:28:8d:22:b8:d9:4f:62:5d:
75:4e:22:2e:c5:9f:eb:ce:a7:5b:82:a2:97:5b:03:
ef:be:8d:cc:9f:6b:50:63:5d:e0:4b:b5:14:0a:e3:
b9:b5:8b:06:d8:72:9a:e6:9f:ec:eb:e5:ed:b6:7d:
83:0b:c8:0e:f2:6b:72:0e:2e:06:4e:f9:2e:e5:91:
61:21:70:07:98:5b:c6:73:19:ef:75:95:c6:36:2b:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:09:D1:9A:5A:E4:47:C4:C9:28:A6:FF:79:5C:BC:F3:1E:5C:44:15
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/ugnRmlrkR8TJKKb_eVy88x5cRBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.204.0/22
91.144.100.0/24
IPv6:
2a03:9900:100::/48
Signature Algorithm: sha256WithRSAEncryption
b9:25:f6:4b:4e:2e:52:ec:41:aa:ae:f4:2c:5a:f5:dc:c6:e5:
fc:70:6f:84:c5:4a:75:e5:66:0e:1d:49:50:5a:ac:20:38:2d:
bf:da:54:f6:d5:6f:df:6b:10:d4:f1:de:17:d1:ba:75:99:13:
94:14:56:d4:14:d6:27:27:10:6c:5b:77:13:67:6b:4a:78:25:
81:75:2b:ae:4e:55:52:14:df:40:1d:dd:b5:11:65:68:3c:fb:
07:d4:fc:94:10:41:a0:e6:b1:60:ec:fc:4f:3b:37:4c:2c:3b:
d4:a7:93:d1:24:2d:03:72:61:27:a1:94:7b:c4:10:82:5a:d0:
ee:e4:3c:06:bf:0b:e1:fe:9e:40:26:94:07:ad:39:44:5e:5b:
13:26:f1:28:f1:d4:6d:45:d9:36:4f:f8:13:1c:0a:1b:1e:4b:
bb:05:7b:c6:29:4f:0d:a0:da:27:73:aa:98:a1:5b:8d:a5:99:
17:e1:75:ee:66:71:ab:a0:9a:4a:d3:32:74:08:bd:0b:0f:d3:
eb:8f:56:c0:00:53:12:c8:bb:5a:52:f9:63:9f:ed:a4:c2:37:
84:03:2d:45:8c:f1:8e:ef:c0:02:4f:3d:69:ee:8a:06:ad:e7:
9d:c9:78:92:c7:55:cf:2d:5f:a9:81:f0:32:8c:45:49:23:00:
73:b5:ae:fc
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQm2bbXlwoUARfiH30WynKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm
OWUyMzMwHhcNMjUwMTAyMTE0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTA5ZDE5YTVhZTQ0N2M0YzkyOGE2ZmY3OTVjYmNmMzFlNWM0NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dvrxt9s+Xfu3r4sRIAN+rd6sDKw
ugf8kNWZqYS9geCW3Hof4RMpSDC5H+O0p1B5ZB6/fbY+S6Tjmsgq/m9AuYrxVIiD
i42wGNNHYp0T/HHA4Gu7ZCTHMKh0zjvtyyZoPkKG/R9hF04i/KXPWTarssK5TqH5
eRhptiENI/D0VgeObNKK6LooYk2kPxVrtUR3+vJ2+/9rKZzWJVK78XBz0vOup/+k
IxLx057YKI0iuNlPYl11TiIuxZ/rzqdbgqKXWwPvvo3Mn2tQY13gS7UUCuO5tYsG
2HKa5p/s6+Xttn2DC8gO8mtyDi4GTvku5ZFhIXAHmFvGcxnvdZXGNiuOrQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLoJ0Zpa5EfEySim/3lcvPMeXEQVMB8GA1UdIwQY
MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt
MGFjYzg5MmIxMWQyLzEvdWduUm1scmtSOFRKS0tiX2VWeTg4eDVjUkJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy
LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCLVjMAwQA
W5BkMA8EAgACMAkDBwAqA5kAAQAwDQYJKoZIhvcNAQELBQADggEBALkl9ktOLlLs
Qaqu9Cxa9dzG5fxwb4TFSnXlZg4dSVBarCA4Lb/aVPbVb99rENTx3hfRunWZE5QU
VtQU1icnEGxbdxNna0p4JYF1K65OVVIU30Ad3bURZWg8+wfU/JQQQaDmsWDs/E87
N0wsO9Snk9EkLQNyYSehlHvEEIJa0O7kPAa/C+H+nkAmlAetOUReWxMm8Sjx1G1F
2TZP+BMcChseS7sFe8YpTw2g2idzqpihW42lmRfhde5mcaugmkrTMnQIvQsP0+uP
VsAAUxLIu1pS+WOf7aTCN4QDLUWM8Y7vwAJPPWnuigat553JeJLHVc8tX6mB8DKM
RUkjAHO1rvw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net