Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/oL5s4daZ2-CvSDbZedMFWpoaJg4.roa
File: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (raw, json)
Hash identifier: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=
Subject key identifier: A0:BE:6C:E1:D6:99:DB:E0:AF:48:36:D9:79:D3:05:5A:9A:1A:26:0E
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 019422200F61D80EF78701649250757B8A09
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/oL5s4daZ2-CvSDbZedMFWpoaJg4.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48813
IP address blocks: 45.140.108.0/22 maxlen: 24
185.145.248.0/22 maxlen: 24
193.19.208.0/22 maxlen: 24
2a07:4b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0f:61:d8:0e:f7:87:01:64:92:50:75:7b:8a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0be6ce1d699dbe0af4836d979d3055a9a1a260e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:b7:cc:29:c5:35:64:70:fd:0b:9b:d2:91:
04:1a:b0:df:9c:2f:6f:57:95:7d:dd:74:eb:14:6b:
be:83:25:53:00:44:c4:06:7f:50:a7:5a:d4:1d:a7:
33:76:e2:25:56:e0:ef:69:b7:dc:c4:9a:ce:cd:da:
23:7c:85:64:70:9d:e2:60:11:88:fe:7a:7a:ff:52:
8b:80:39:92:01:0d:00:d1:cf:44:d5:6b:a5:bb:75:
00:d1:dd:c9:53:0c:3d:71:2a:0e:ed:e6:b3:5c:d3:
cf:2c:8f:c9:9f:0a:4e:eb:58:e5:5f:09:d8:b1:af:
cb:ff:b3:8c:b3:d7:48:c5:ee:92:22:ca:25:6f:f1:
b6:78:ac:4e:62:97:6d:d5:39:e0:b1:01:87:96:0c:
1a:f1:76:ec:1e:a7:96:9c:07:bc:e2:9f:b7:53:2d:
0d:2f:e2:68:96:49:9e:5c:d1:c4:b9:ac:41:f3:b4:
76:72:89:33:04:d3:81:0a:2e:3b:2e:df:6e:75:4d:
49:52:3a:dd:10:18:db:b9:1e:e0:b1:86:4c:e3:32:
75:14:c7:80:6c:a0:ef:73:33:bc:b9:f6:65:14:b5:
78:b1:91:fb:a7:67:f8:4e:9f:f8:1e:92:1c:76:ef:
da:b6:57:bf:c9:5a:94:6e:90:4b:16:e7:df:c1:a2:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BE:6C:E1:D6:99:DB:E0:AF:48:36:D9:79:D3:05:5A:9A:1A:26:0E
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/oL5s4daZ2-CvSDbZedMFWpoaJg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.108.0/22
185.145.248.0/22
193.19.208.0/22
IPv6:
2a07:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
09:60:ed:47:ee:81:39:6d:ec:a8:65:46:cf:ae:62:ce:0e:8f:
24:30:09:90:1d:bc:4a:50:fb:32:a6:7d:82:ce:05:1d:ff:a9:
5e:ad:29:a0:1d:14:44:44:d6:fd:3a:24:dc:1e:cc:7a:c1:25:
3a:11:05:62:e9:94:45:20:22:18:f0:cd:39:c8:d8:db:a9:2f:
fb:cd:09:1f:c9:c5:5e:81:78:b2:65:32:26:44:eb:9a:17:ed:
52:57:2f:85:28:50:d3:b7:2e:e0:bf:42:31:d8:b2:a6:c2:fa:
5f:bc:4a:75:da:bd:6a:03:18:b1:3b:a0:1f:96:3a:18:c3:14:
1b:8b:b1:3d:b7:aa:9a:f1:8c:f5:4a:3d:6c:ca:9e:b9:55:42:
3d:f9:64:f0:d4:f9:1b:04:f8:70:2a:71:45:4e:d8:22:9a:6e:
5c:b6:af:59:0d:f0:cd:5c:f5:75:7c:15:00:f5:87:87:fc:e9:
36:63:ea:09:8b:fd:77:4d:59:ae:d8:75:2c:15:e9:23:3d:f2:
87:11:b3:1d:86:cd:ef:3e:0c:65:0f:18:0a:48:09:2f:66:13:
bb:63:b2:e5:e8:37:15:1b:b6:3c:e8:1f:f2:f4:13:f1:df:64:
db:76:da:e4:d5:f9:08:2a:aa:66:22:29:68:8a:bc:3e:a0:a9:
2a:a0:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net