Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/VMuHlNslIOBQZx7UKDrS3gbnrRo.roa
File: VMuHlNslIOBQZx7UKDrS3gbnrRo.roa (raw, json)
Hash identifier: nHmDSkYC6bnOZb1E7s3o/dObTjmnoGJ4PUcmtJxek+o=
Subject key identifier: 54:CB:87:94:DB:25:20:E0:50:67:1E:D4:28:3A:D2:DE:06:E7:AD:1A
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 019424B3A5EF64001C47F2D22F78F90FB852
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/VMuHlNslIOBQZx7UKDrS3gbnrRo.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35224
IP address blocks: 45.66.76.0/22 maxlen: 22
45.150.0.0/22 maxlen: 22
91.189.96.0/24 maxlen: 24
91.189.97.0/24 maxlen: 24
91.189.98.0/24 maxlen: 24
91.189.99.0/24 maxlen: 24
91.189.100.0/24 maxlen: 24
91.189.101.0/24 maxlen: 24
91.189.102.0/24 maxlen: 24
91.189.103.0/24 maxlen: 24
92.118.0.0/22 maxlen: 22
94.231.240.0/24 maxlen: 24
94.231.241.0/24 maxlen: 24
94.231.242.0/23 maxlen: 23
94.231.244.0/22 maxlen: 22
94.231.248.0/24 maxlen: 24
94.231.249.0/24 maxlen: 24
94.231.250.0/24 maxlen: 24
94.231.251.0/24 maxlen: 24
94.231.252.0/24 maxlen: 24
94.231.253.0/24 maxlen: 24
94.231.254.0/24 maxlen: 24
94.231.255.0/24 maxlen: 24
185.9.252.0/24 maxlen: 24
185.9.253.0/24 maxlen: 24
185.9.254.0/24 maxlen: 24
185.9.255.0/24 maxlen: 24
193.239.92.0/22 maxlen: 22
193.239.186.0/23 maxlen: 23
195.222.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a5:ef:64:00:1c:47:f2:d2:2f:78:f9:0f:b8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54cb8794db2520e050671ed4283ad2de06e7ad1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:97:8b:3d:72:d7:63:c1:85:6b:0c:48:09:
94:09:50:83:eb:2e:48:47:96:77:ce:dd:d7:4e:f2:
d6:70:04:24:73:e3:95:8b:91:83:30:d4:67:b1:06:
23:ea:6d:08:b3:b1:a5:50:5f:6d:b7:e8:56:6c:f7:
86:ca:ad:40:a0:f3:a6:54:93:71:d5:09:4d:6b:a0:
25:d6:a1:1c:10:0a:7d:54:5f:8a:fa:a7:99:f6:cd:
ab:0e:39:04:ee:cd:64:6e:93:2d:57:07:f6:c7:1b:
fe:76:1a:ea:64:bc:02:4c:51:af:1d:33:e0:cc:ce:
d6:6c:c0:bf:aa:a2:f0:e4:de:24:1c:6e:f8:42:59:
6b:c0:82:fb:d3:2e:c7:e2:6d:6f:90:c3:0b:e4:28:
3a:85:0a:a0:2b:5b:21:c3:75:33:88:84:b2:6c:7d:
08:86:6e:b5:ff:eb:a1:bb:4a:ab:0c:fa:59:ea:9c:
ee:7b:17:fb:7c:bd:e2:a5:d9:3e:8d:ad:cb:47:84:
b4:89:bb:9c:2f:35:42:20:1f:5b:f3:d1:98:e5:16:
13:24:ec:bf:5e:d4:bb:54:e5:30:e6:0f:9d:bd:fd:
8d:16:0e:64:10:bb:16:2a:a9:74:93:5d:a5:6e:65:
cc:f5:ed:66:3d:c1:37:00:13:f1:e0:bc:87:3c:b8:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CB:87:94:DB:25:20:E0:50:67:1E:D4:28:3A:D2:DE:06:E7:AD:1A
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/VMuHlNslIOBQZx7UKDrS3gbnrRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.76.0/22
45.150.0.0/22
91.189.96.0/21
92.118.0.0/22
94.231.240.0/20
185.9.252.0/22
193.239.92.0/22
193.239.186.0/23
195.222.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:a3:67:b5:a6:0d:d6:13:c5:07:ed:99:26:b0:71:02:8f:a4:
3b:45:d5:b4:64:f2:6c:9f:9e:cc:da:d5:b2:b2:67:a4:53:7b:
2b:ed:f5:42:10:41:70:7f:01:30:a0:94:d1:26:1b:59:f1:7a:
6e:fa:54:4a:2a:e0:e1:6a:aa:b2:05:ab:4d:75:65:51:f2:51:
3e:29:e2:75:7d:95:8a:86:10:15:e5:89:dc:72:d9:fe:c6:8f:
d2:62:4e:42:03:4c:1f:83:5d:f7:4e:43:83:c3:2f:32:48:44:
dc:e9:cc:aa:9a:db:da:dd:ae:cd:d9:92:25:c2:02:12:16:a6:
f9:ca:51:60:38:a1:a7:b6:ab:55:7e:7e:90:e9:2f:80:01:f2:
1c:63:0a:a9:8d:6f:ad:9e:da:b0:e0:5c:f4:ad:44:22:2a:f7:
58:57:eb:d1:23:77:0d:bd:d7:33:14:f3:72:86:f4:4b:b6:b8:
26:fe:16:43:1a:76:77:3c:6d:95:5e:0e:41:3a:1d:10:2b:7b:
e6:4c:90:58:2d:5d:c5:4a:ea:0a:fa:74:b9:18:a8:d2:87:5d:
d6:93:45:07:6f:af:9a:af:c5:8c:73:ce:42:7d:b6:e5:ad:9b:
18:ff:4c:7b:46:7c:56:2d:f0:ed:34:75:7c:4c:ce:a6:58:68:
e7:f5:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:52 2025 by rpki-client on console.sobornost.net