Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/t6aLSSMcfA7Wmiqf40BGuDSs16w.roa
File: t6aLSSMcfA7Wmiqf40BGuDSs16w.roa (raw, json)
Hash identifier: QoJ0LZB+2Of6cXEGtrOrsAOrDyP5OnzmUXKVyd4YZpc=
Subject key identifier: B7:A6:8B:49:23:1C:7C:0E:D6:9A:2A:9F:E3:40:46:B8:34:AC:D7:AC
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 019424B284556D5B8C3AC089DC97E2EA7290
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/t6aLSSMcfA7Wmiqf40BGuDSs16w.roa
Signing time: Thu 02 Jan 2025 01:47:46 +0000
ROA not before: Thu 02 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51185
IP address blocks: 45.157.64.0/24 maxlen: 24
45.157.65.0/24 maxlen: 24
45.157.66.0/24 maxlen: 24
45.157.67.0/24 maxlen: 24
94.124.64.0/21 maxlen: 21
94.124.64.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
94.124.66.0/24 maxlen: 24
94.124.67.0/24 maxlen: 24
94.124.68.0/24 maxlen: 24
94.124.69.0/24 maxlen: 24
94.124.70.0/24 maxlen: 24
94.124.71.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.53.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
178.248.55.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.209.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
185.45.211.0/24 maxlen: 24
185.187.156.0/24 maxlen: 24
185.187.157.0/24 maxlen: 24
185.187.158.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
2a02:2890::/48 maxlen: 48
2a02:2890:ffff::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2891:1::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2891:9::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2891:11::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2891:13::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:18::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:32::/48 maxlen: 48
2a02:2891:40::/48 maxlen: 48
2a02:2891:ff::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:84:55:6d:5b:8c:3a:c0:89:dc:97:e2:ea:72:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Jan 2 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7a68b49231c7c0ed69a2a9fe34046b834acd7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:f6:25:65:f9:fd:1d:52:f6:45:58:33:a0:
56:fc:fc:fd:f0:9e:35:8f:86:bd:06:d2:23:9a:24:
96:fd:c5:59:29:c6:2e:74:c7:1b:2e:8b:dd:bb:24:
15:f8:70:fe:77:c5:14:d7:43:ff:4d:2c:b2:fa:22:
00:b1:54:d8:fb:67:f6:00:c5:92:c4:99:2e:76:61:
8e:6a:91:bd:e5:33:0d:ea:c6:eb:0c:80:a2:66:0e:
a5:a1:d0:5d:06:b3:4b:8f:4c:ee:00:f8:2f:7f:eb:
f6:89:5c:bc:5b:a0:c3:fd:16:29:8f:e0:3d:a0:b1:
0e:05:77:15:dc:7e:f9:dc:04:76:0a:bb:47:b5:14:
d1:21:4c:41:d2:4b:48:33:13:07:3e:8c:21:d5:98:
28:ff:d8:13:23:ae:89:4c:fa:46:20:ee:69:42:64:
a0:52:ad:51:d8:cb:34:34:95:84:51:37:c8:81:c9:
1e:ff:ff:dc:47:1f:99:72:c3:e3:1a:e3:25:2e:97:
fb:61:a8:7d:ba:41:d1:bb:4f:35:5f:b4:87:3d:84:
01:03:51:3e:61:bf:b2:11:d5:4c:dd:81:06:71:95:
d7:27:57:85:b4:1e:64:a9:4d:70:44:8b:57:61:4f:
45:da:4e:16:51:7a:6c:99:d5:d6:3d:d7:a7:49:8d:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:8B:49:23:1C:7C:0E:D6:9A:2A:9F:E3:40:46:B8:34:AC:D7:AC
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/t6aLSSMcfA7Wmiqf40BGuDSs16w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.64.0/22
94.124.64.0/21
178.248.48.0/21
185.45.208.0/22
185.187.156.0/22
IPv6:
2a02:2890::/48
2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
2a02:2891:4::/48
2a02:2891:9::/48
2a02:2891:10::/46
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:18::/48
2a02:2891:29::/48
2a02:2891:32::/48
2a02:2891:40::/48
2a02:2891:ff::/48
2a02:2892:32::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
7b:2e:60:4d:0e:b7:87:fe:22:1b:18:d0:28:ae:a2:4c:8a:4e:
73:bc:55:7c:11:48:20:03:1f:27:69:e1:da:54:96:6b:78:86:
ff:44:4b:d3:c0:67:1a:95:1f:c7:3d:f8:91:af:c7:df:64:ca:
9e:10:18:86:6b:2a:b2:12:ab:82:31:48:ef:7c:30:7f:80:85:
48:ba:f9:b3:9e:a3:84:65:2c:b0:7d:9b:a5:52:95:6c:3a:49:
f9:e0:38:a3:62:a7:9e:55:aa:72:8c:90:b8:93:18:9e:85:8d:
2c:e1:91:99:8f:6c:6a:7d:58:85:9f:fd:27:33:4b:f0:96:19:
b1:51:c5:e5:bd:ed:38:21:6c:6a:8f:05:4b:da:e4:45:0e:f3:
54:c3:9e:97:db:80:55:83:13:9d:5d:cb:82:f3:44:a9:2a:37:
15:c3:2e:af:d7:c8:66:61:36:16:8c:8a:8b:50:73:8a:b6:44:
cd:64:6d:75:f3:61:f6:47:78:d6:48:8f:1d:70:78:ef:88:ef:
58:af:59:ad:d9:9a:dd:21:fa:e4:dd:46:f2:77:aa:29:83:50:
7d:86:5d:2d:b3:5e:92:56:7d:93:cf:93:4e:e7:ac:cd:1a:01:
d8:e7:7e:3d:38:d0:4b:06:22:d1:09:e5:44:f7:36:42:fc:e0:
27:25:dd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net