Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/cmsoMlIRCcbLziNipTUjZc3lrew.roa
File: cmsoMlIRCcbLziNipTUjZc3lrew.roa (raw, json)
Hash identifier: a1CFCcY0jADOuS6DTKGkRSmsv5gzH4GzUcir7HG6pUE=
Subject key identifier: 72:6B:28:32:52:11:09:C6:CB:CE:23:62:A5:35:23:65:CD:E5:AD:EC
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 01942143A1ED81CC58FB0CB728226B3510B1
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/cmsoMlIRCcbLziNipTUjZc3lrew.roa
Signing time: Wed 01 Jan 2025 09:47:47 +0000
ROA not before: Wed 01 Jan 2025 09:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208882
IP address blocks: 45.81.40.0/24 maxlen: 24
92.249.26.0/24 maxlen: 24
2a0d:ff40::/29 maxlen: 29
2a0e:4d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a1:ed:81:cc:58:fb:0c:b7:28:22:6b:35:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: Jan 1 09:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=726b2832521109c6cbce2362a5352365cde5adec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:c0:eb:8d:e0:28:9b:c1:d2:2d:7d:a0:ce:
68:ca:4a:44:50:9b:80:52:a7:ba:4c:d8:c9:5c:0a:
e2:a1:cb:df:14:b3:b6:38:6d:23:d2:58:36:37:b7:
6e:68:28:d2:f6:08:09:92:e7:68:3e:6b:5c:b2:3a:
31:1c:ce:0c:a0:d9:a5:8e:9c:ae:0d:7c:68:b7:09:
88:97:46:94:99:dd:f8:62:e9:d2:6c:0f:3e:93:8e:
5a:77:f7:16:25:d8:7c:bf:54:be:27:05:db:d1:16:
a1:22:b6:db:cb:09:79:8b:b3:7d:9c:55:16:34:bd:
68:f6:c5:ac:bf:d6:e7:77:aa:b8:a5:52:59:95:28:
cb:91:3d:59:d6:05:f8:85:ab:7f:d2:94:15:d3:12:
fb:cc:12:5e:df:da:ba:1c:21:ad:52:af:9d:53:d0:
1c:5b:84:d7:bd:a2:af:27:1e:8b:87:e1:0a:8c:23:
71:2b:b0:7b:be:88:6a:04:cc:d8:f3:c8:57:f4:9a:
ee:0a:a7:f9:d3:66:53:fc:b1:5f:a7:70:f6:c4:b5:
1a:bc:66:de:74:91:bc:e8:41:0a:ca:ec:9f:9f:4d:
d6:a0:6f:c7:33:51:91:0d:3e:22:42:c4:cb:c6:88:
55:dc:3e:aa:6b:98:b2:9d:41:34:90:1e:52:be:ac:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6B:28:32:52:11:09:C6:CB:CE:23:62:A5:35:23:65:CD:E5:AD:EC
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/cmsoMlIRCcbLziNipTUjZc3lrew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.40.0/24
92.249.26.0/24
IPv6:
2a0d:ff40::/29
2a0e:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
0c:ea:e2:cd:34:18:4a:c1:be:c4:9c:77:ba:0c:9c:b0:38:c0:
d5:da:f8:35:06:f6:1a:1e:96:d0:69:5b:5b:20:51:fb:d0:78:
f8:a9:09:97:ac:c4:53:18:c8:89:c6:10:30:a3:a9:7a:37:cb:
21:40:d2:ff:7d:b5:52:67:a3:da:94:4b:09:40:96:1e:9e:c9:
00:6e:a2:ef:d0:64:ce:22:5c:95:3e:28:e9:a6:10:0b:11:50:
82:b9:48:6b:f0:b2:9d:dd:da:65:98:2a:7e:15:0b:cb:e4:bf:
83:fd:11:2b:73:f7:f1:68:99:4c:6a:c9:17:e9:77:6d:d4:4e:
7a:39:2c:59:8a:8b:96:1b:b5:7c:23:d7:8f:c8:d5:f4:dd:59:
5d:d2:be:00:4c:ec:4e:6f:4f:8e:06:23:87:6b:cc:2b:6f:5e:
e6:b8:12:05:a0:54:d8:ce:c3:46:57:42:36:67:97:94:cc:f2:
8b:b3:9c:73:09:61:ae:57:35:4d:1d:86:ca:27:bc:e4:5f:07:
e1:66:88:f4:ea:66:90:27:e2:30:77:89:5e:e4:b6:58:6e:43:
9e:e7:5f:28:e2:32:d4:78:08:83:06:7a:bc:27:91:4c:75:dc:
c2:2a:4c:3e:ef:6a:cd:0d:e6:35:db:2f:c6:ee:86:46:7e:12:
5f:a8:50:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net