Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa
File: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (raw, json)
Hash identifier: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=
Subject key identifier: 55:A3:47:60:A7:7B:7E:47:FC:31:49:88:00:5C:D1:0E:24:52:B8:08
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019427B407DD7E725015A00460EECC69B506
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa
Signing time: Thu 02 Jan 2025 15:48:17 +0000
ROA not before: Thu 02 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208178
IP address blocks: 45.155.104.0/24 maxlen: 24
45.155.105.0/24 maxlen: 24
45.155.106.0/24 maxlen: 24
45.155.107.0/24 maxlen: 24
2a0f:fb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:07:dd:7e:72:50:15:a0:04:60:ee:cc:69:b5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Jan 2 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55a34760a77b7e47fc314988005cd10e2452b808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:b5:9f:8a:23:e4:dc:a9:c2:10:29:dd:9e:
f1:4b:cb:a5:55:c6:2c:16:b4:60:59:00:bb:22:ae:
07:ba:18:1e:59:3c:56:cd:4d:e8:9a:1d:59:69:73:
d0:b6:dc:b7:93:74:76:33:88:5d:91:f0:38:ef:cf:
ea:d2:f3:8a:20:0e:05:f1:83:e4:41:93:c3:87:d0:
a1:42:74:23:93:57:69:82:b4:bf:00:c0:f3:40:87:
b6:d2:58:53:0a:54:7c:be:e1:ed:5e:ad:d1:e6:ae:
c5:19:e5:41:e3:d1:0b:1f:de:96:55:24:5b:60:51:
8c:c9:cc:99:1e:cf:5f:82:86:dd:1e:7b:85:17:3a:
a2:e5:55:24:8f:83:b4:1c:2e:d1:eb:1a:f6:ca:21:
08:71:2e:29:96:05:e3:ae:3b:8c:a6:98:33:59:e2:
8d:dc:7a:a4:49:af:57:31:5c:0f:84:c6:fc:ed:bc:
fc:e4:57:e8:8f:da:c0:53:97:af:e8:84:93:d1:fc:
2b:07:c5:90:3e:d2:a6:63:79:a8:95:1f:7a:6a:77:
a3:a2:5c:b5:35:a2:ed:d7:3f:78:c8:49:f3:6f:b4:
62:9e:a7:81:7c:9f:1b:c2:c3:32:a6:15:77:3c:f1:
57:60:f8:26:b2:ab:1b:94:5d:d8:80:6f:c7:1e:f6:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A3:47:60:A7:7B:7E:47:FC:31:49:88:00:5C:D1:0E:24:52:B8:08
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.104.0/22
IPv6:
2a0f:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
62:ab:40:61:a0:4d:e3:b8:1b:0b:7e:86:34:28:fa:ea:17:ec:
62:d8:26:28:a1:22:9e:7d:07:af:1e:f7:a7:f8:ac:44:9b:54:
15:8e:b6:c2:c0:7c:f6:bc:e2:88:b4:d2:bb:62:c0:68:6c:fb:
bb:cd:76:de:1f:ed:f8:77:cd:1f:07:e6:81:ee:d4:19:be:7f:
fd:d6:93:c6:7d:82:61:99:c4:50:33:f8:a3:16:fb:e0:3f:74:
46:c3:0e:d4:83:35:88:62:63:27:18:c3:fc:70:92:04:16:d7:
ff:3f:76:3c:0b:cf:57:f5:49:4a:eb:de:14:5b:26:7a:d8:8b:
dc:80:e4:2c:92:25:c6:23:26:06:c6:58:61:06:8a:da:05:d9:
34:f0:7b:88:9d:93:74:5c:dd:c1:79:90:9e:db:bb:29:f3:68:
be:9c:f1:98:80:da:88:7a:93:91:0c:39:26:96:f9:b3:a3:f0:
b6:9d:57:24:c0:72:2e:a5:af:e3:f2:76:fc:50:ee:54:89:c7:
a2:4f:0d:25:2c:07:f8:af:8d:33:cc:0c:29:9e:c7:ef:cd:a6:
4f:35:8d:02:78:95:08:16:ad:0c:90:e4:37:84:5f:c2:c1:54:
de:98:95:fd:63:0d:b0:e7:a5:75:8d:3e:8c:35:33:2d:f1:b1:
10:06:70:62
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntAfdfnJQFaAEYO7MabUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5
YThkNGIwHhcNMjUwMTAyMTU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWEzNDc2MGE3N2I3ZTQ3ZmMzMTQ5ODgwMDVjZDEwZTI0NTJiODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuC1n4oj5NypwhAp3Z7xS8ulVcYs
FrRgWQC7Iq4HuhgeWTxWzU3omh1ZaXPQtty3k3R2M4hdkfA478/q0vOKIA4F8YPk
QZPDh9ChQnQjk1dpgrS/AMDzQIe20lhTClR8vuHtXq3R5q7FGeVB49ELH96WVSRb
YFGMycyZHs9fgobdHnuFFzqi5VUkj4O0HC7R6xr2yiEIcS4plgXjrjuMppgzWeKN
3HqkSa9XMVwPhMb87bz85Ffoj9rAU5ev6IST0fwrB8WQPtKmY3molR96anejoly1
NaLt1z94yEnzb7RinqeBfJ8bwsMyphV3PPFXYPgmsqsblF3YgG/HHvY1PwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFWjR2Cne35H/DFJiABc0Q4kUrgIMB8GA1UdIwQY
MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt
YjZiNzZlMjJmZmFjLzEvVmFOSFlLZDdma2Y4TVVtSUFGelJEaVJTdUFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj
LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZtoMA0E
AgACMAcDBQMqD/sAMA0GCSqGSIb3DQEBCwUAA4IBAQBiq0BhoE3juBsLfoY0KPrq
F+xi2CYooSKefQevHven+KxEm1QVjrbCwHz2vOKItNK7YsBobPu7zXbeH+34d80f
B+aB7tQZvn/91pPGfYJhmcRQM/ijFvvgP3RGww7UgzWIYmMnGMP8cJIEFtf/P3Y8
C89X9UlK694UWyZ62IvcgOQskiXGIyYGxlhhBoraBdk08HuInZN0XN3BeZCe27sp
82i+nPGYgNqIepORDDkmlvmzo/C2nVckwHIupa/j8nb8UO5UiceiTw0lLAf4r40z
zAwpnsfvzaZPNY0CeJUIFq0MkOQ3hF/CwVTemJX9Yw2w56V1jT6MNTMt8bEQBnBi
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net