Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/ijhA7sBU_edCq9uT5tmZaZEbP3I.roa
File: ijhA7sBU_edCq9uT5tmZaZEbP3I.roa (raw, json)
Hash identifier: NR4CPSWiqCTjGhtLGBhv5LnWOgMPNqeAkbuxpb5OI8Y=
Subject key identifier: 8A:38:40:EE:C0:54:FD:E7:42:AB:DB:93:E6:D9:99:69:91:1B:3F:72
Certificate issuer: /CN=5be979fb8e477304bb591d6b68eea73da94a815b
Certificate serial: 019426D8C2EBD290024AA8D9519F21F26B58
Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/ijhA7sBU_edCq9uT5tmZaZEbP3I.roa
Signing time: Thu 02 Jan 2025 11:48:47 +0000
ROA not before: Thu 02 Jan 2025 11:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201290
IP address blocks: 45.128.0.0/22 maxlen: 22
45.153.252.0/22 maxlen: 22
46.231.16.0/23 maxlen: 23
46.231.18.0/23 maxlen: 23
46.231.20.0/23 maxlen: 23
46.231.22.0/23 maxlen: 23
46.231.244.0/22 maxlen: 22
185.41.36.0/23 maxlen: 23
185.41.38.0/23 maxlen: 23
185.94.244.0/23 maxlen: 23
185.94.246.0/23 maxlen: 23
185.146.104.0/22 maxlen: 22
185.214.112.0/23 maxlen: 23
185.214.114.0/23 maxlen: 23
185.229.52.0/23 maxlen: 23
185.229.54.0/23 maxlen: 23
192.145.56.0/22 maxlen: 22
194.39.40.0/22 maxlen: 22
212.115.36.0/22 maxlen: 22
2a05:3600::/29 maxlen: 29
2a0d:6e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:c2:eb:d2:90:02:4a:a8:d9:51:9f:21:f2:6b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b
Validity
Not Before: Jan 2 11:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a3840eec054fde742abdb93e6d99969911b3f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:13:84:16:59:b6:8a:95:2a:07:e6:56:7d:d4:
db:4c:c9:a9:16:3e:93:ea:e8:fd:04:90:e4:65:84:
cb:5e:09:4e:09:29:b6:c0:cc:8f:15:a2:3d:7f:a6:
dc:0d:16:b3:05:cc:e2:b2:df:98:68:7c:c0:b3:eb:
a9:3b:a4:94:a1:5e:48:c2:6a:f5:43:40:b9:fd:5c:
4a:66:3c:2b:ff:2f:76:ce:16:a9:a8:5b:6d:9a:34:
eb:2a:86:cd:96:a3:80:63:db:8d:c6:16:7c:35:0b:
1d:c3:ba:4a:7a:7d:0a:03:94:53:bf:ff:ed:6e:a4:
a0:af:6b:70:d6:a5:c5:9f:ed:1e:75:7f:8e:21:89:
ab:9b:ca:cd:40:97:93:8d:6f:a2:66:7a:fd:a8:0d:
87:45:65:25:d7:a5:10:3a:fa:99:31:da:17:a8:22:
b5:4a:f9:24:36:6a:14:ba:e9:e3:6b:ea:7f:69:38:
a2:86:84:86:1e:31:5a:8f:0d:95:85:a4:95:9a:a6:
2f:fa:d9:5c:e0:7f:da:0e:1f:73:6b:14:32:7a:32:
03:5e:e3:43:4d:81:66:4d:d8:04:8c:bd:23:01:9f:
47:5b:56:19:5f:eb:ee:91:aa:75:6e:5f:33:59:23:
a3:f0:14:49:8d:cc:21:a8:d0:2c:68:0e:14:a8:28:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:40:EE:C0:54:FD:E7:42:AB:DB:93:E6:D9:99:69:91:1B:3F:72
X509v3 Authority Key Identifier:
keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/ijhA7sBU_edCq9uT5tmZaZEbP3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.0.0/22
45.153.252.0/22
46.231.16.0/21
46.231.244.0/22
185.41.36.0/22
185.94.244.0/22
185.146.104.0/22
185.214.112.0/22
185.229.52.0/22
192.145.56.0/22
194.39.40.0/22
212.115.36.0/22
IPv6:
2a05:3600::/29
2a0d:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
15:35:48:ae:47:bc:a3:7f:e6:15:90:e5:19:35:c9:39:ce:e0:
4c:b3:37:66:6c:55:b4:92:37:2a:2e:42:cb:c4:fe:74:08:76:
c9:30:2a:ef:a8:7b:a9:10:13:29:1b:47:6b:37:7c:de:26:d8:
c0:35:43:b4:fa:33:3f:3e:30:64:db:8a:3c:62:04:91:2d:39:
c0:34:9b:d7:ec:f8:fd:24:50:bd:c3:07:e4:87:ff:3f:0c:58:
fa:50:6f:9b:fb:1a:9f:3b:84:74:2c:67:11:95:96:0a:8b:d4:
f2:57:5b:42:5f:4a:0a:21:ac:2a:26:b9:c7:1d:eb:96:8e:36:
74:cd:2e:a4:de:a7:60:5a:f9:88:17:17:84:68:a3:d8:98:84:
fd:32:e6:4c:21:4c:54:53:85:c0:a6:47:4c:3a:ec:64:de:fa:
39:0f:3d:14:6a:fc:5d:4e:01:9a:15:e0:36:2f:1f:43:05:10:
66:52:fa:4f:c2:f4:74:29:11:7d:db:28:44:6e:2c:59:22:76:
85:8d:92:ba:62:35:03:c0:39:d0:09:6f:dd:82:a5:81:02:58:
44:aa:2e:dc:67:91:5c:fd:57:70:49:8f:9b:44:49:ee:80:ff:
e8:7d:ea:88:17:f4:5c:d8:3c:88:5f:b6:bc:c7:c4:20:80:15:
b2:ad:c3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net