Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/EW0UKSqO-gQQ10iYb0UfmiURamE.roa
File: EW0UKSqO-gQQ10iYb0UfmiURamE.roa (raw, json)
Hash identifier: rCXzSKrxiIYd19ZrNH6wUQg5hj1TnAmhbdu+vOPu9Kk=
Subject key identifier: 11:6D:14:29:2A:8E:FA:04:10:D7:48:98:6F:45:1F:9A:25:11:6A:61
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 0195C8DC36DE17B0AA688EA538250206E7FC
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/EW0UKSqO-gQQ10iYb0UfmiURamE.roa
Signing time: Mon 24 Mar 2025 15:53:49 +0000
ROA not before: Mon 24 Mar 2025 15:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59829
IP address blocks: 45.133.242.0/24 maxlen: 24
94.176.97.0/24 maxlen: 24
212.6.50.0/24 maxlen: 24
2a0c:2f40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:dc:36:de:17:b0:aa:68:8e:a5:38:25:02:06:e7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Mar 24 15:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=116d14292a8efa0410d748986f451f9a25116a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:bc:05:06:dd:9e:3a:de:14:60:d2:4b:66:
de:b4:f9:97:63:30:d3:d3:79:83:8e:81:d3:3b:87:
97:7f:4f:bf:aa:75:42:65:6d:b6:e5:e5:d4:ab:5b:
63:89:d7:32:ce:e7:77:e1:da:f1:f7:d3:d3:74:68:
f5:88:e9:43:ce:9c:3f:41:e8:83:55:cf:44:25:38:
c8:dc:bf:09:ba:e7:20:45:1e:63:8e:7e:7b:e5:ae:
4e:c0:04:b5:55:db:41:f1:94:f5:8e:9f:d5:72:6e:
58:c8:0d:05:71:2e:ba:f0:a6:9f:0f:18:f7:ca:a7:
fe:51:c1:9b:ae:d9:0b:08:08:5b:34:5b:9c:b4:db:
70:0e:98:02:ec:d7:3a:8b:b0:31:f3:3c:7a:fe:5a:
4e:15:0d:ec:c2:cf:48:92:81:e8:01:8b:3d:68:23:
7b:fd:65:58:eb:11:c4:31:f8:12:53:5b:48:66:cb:
42:f4:9d:41:bf:66:e2:a3:61:37:1b:25:70:30:06:
35:53:56:c8:58:56:bd:f4:83:38:fe:a0:83:b6:bf:
99:98:78:84:b2:8a:66:31:01:73:dd:a7:97:f0:18:
61:76:0c:41:37:c7:eb:be:e7:bc:ac:a4:ce:db:da:
de:03:c8:2e:8f:59:a1:b2:22:68:be:1e:2f:25:85:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6D:14:29:2A:8E:FA:04:10:D7:48:98:6F:45:1F:9A:25:11:6A:61
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/EW0UKSqO-gQQ10iYb0UfmiURamE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.242.0/24
94.176.97.0/24
212.6.50.0/24
IPv6:
2a0c:2f40::/29
Signature Algorithm: sha256WithRSAEncryption
35:bb:45:8d:9a:ce:7b:68:fe:8c:30:4f:c6:9f:92:23:b2:42:
60:8e:6a:6d:dd:44:51:6e:52:f0:9e:a1:89:0c:b2:11:9b:30:
44:a5:b7:6c:01:a6:b5:74:d7:cb:99:64:65:d7:b8:a7:17:27:
9c:a5:9f:e4:6f:a8:a2:28:df:2b:b1:44:f8:ea:d6:b6:21:2d:
eb:1b:66:5a:c8:4a:71:f5:26:62:c4:fe:b6:ac:52:54:2d:ea:
ff:6c:f2:5b:22:b8:45:98:f1:16:84:16:78:32:85:3e:af:85:
b7:c7:b8:5c:95:ea:d2:39:af:96:fc:43:9f:37:10:6a:24:05:
32:70:a0:f8:a1:6f:33:2f:99:75:81:f2:91:08:7a:42:ea:96:
71:a1:3d:36:41:ac:84:4c:fe:8a:20:cb:d3:2a:2e:b5:79:7c:
03:c0:59:2d:77:c8:dd:78:63:1f:8a:ee:38:ce:64:3b:af:b9:
97:f2:c2:ee:c8:cc:f9:bd:2d:78:6b:1b:c1:3f:2b:f9:13:99:
e9:f4:ef:63:3b:78:6d:2c:0a:c5:1a:21:30:a8:42:e9:71:eb:
2d:28:9f:d6:4a:bc:0f:6c:60:01:00:c6:7b:53:5f:5f:d6:4d:
23:17:06:d9:0a:8d:19:79:45:38:6d:3f:95:1a:37:1d:dd:45:
74:7a:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 18:53:19 2025 by rpki-client on console.sobornost.net