Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/uqvRjoImP67-V2pzEWGA2vqwBPY.roa
File: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (raw, json)
Hash identifier: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=
Subject key identifier: BA:AB:D1:8E:82:26:3F:AE:FE:57:6A:73:11:61:80:DA:FA:B0:04:F6
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 019425221DFB47A7780E8E74A249083DC5C6
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/uqvRjoImP67-V2pzEWGA2vqwBPY.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205530
IP address blocks: 45.140.112.0/22 maxlen: 22
81.89.88.0/24 maxlen: 24
195.211.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1d:fb:47:a7:78:0e:8e:74:a2:49:08:3d:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baabd18e82263faefe576a73116180dafab004f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:12:3b:8b:d7:06:b4:e9:d3:cf:48:46:19:
33:03:dd:e9:07:f0:14:1d:d9:3f:85:fa:ff:e1:d1:
0a:ae:60:d0:24:f7:91:19:6b:88:5d:d4:35:9d:96:
29:06:d3:21:8c:0a:3e:a2:51:de:6f:40:22:29:db:
20:d7:b8:27:9e:2e:ba:d3:ed:07:ce:d5:74:1c:6b:
15:0c:b2:fe:c8:4e:82:23:f1:bb:96:17:cc:85:f9:
91:6a:6b:10:48:e1:d5:96:50:4b:9b:e0:b9:27:ad:
69:0f:f4:6f:d4:ce:17:1d:58:c6:84:58:22:76:26:
b0:08:e4:06:f0:6d:85:05:d3:ba:f3:f9:83:4d:90:
1d:d8:20:35:13:0b:df:e2:40:29:47:5f:d9:db:05:
1e:be:44:6f:66:a3:55:23:3d:49:df:a1:2b:1d:89:
7f:8d:40:11:de:29:bb:dd:e2:1a:71:a4:95:85:e3:
1e:c3:50:87:fd:cb:96:78:80:e6:ee:33:be:6d:83:
4f:00:ad:07:ee:91:4b:e5:9b:17:b6:13:c8:57:1a:
94:c4:9e:08:dd:bd:72:d3:e3:ad:a8:35:b6:7c:45:
52:13:75:0e:59:64:dd:ee:99:e9:bb:9f:eb:b8:54:
60:c4:32:17:76:98:79:8d:c3:12:b2:4c:51:93:da:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AB:D1:8E:82:26:3F:AE:FE:57:6A:73:11:61:80:DA:FA:B0:04:F6
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/uqvRjoImP67-V2pzEWGA2vqwBPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.112.0/22
81.89.88.0/24
195.211.56.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d9:cf:04:6e:ed:5f:c2:50:ce:21:39:5c:75:45:f0:11:3a:
7b:4a:45:84:dd:e0:0b:b2:2d:93:ed:90:3e:f6:4e:8a:d0:23:
d4:7b:0b:26:5a:4e:58:4f:5e:ea:71:ca:81:75:68:6a:a4:10:
60:48:47:a1:7f:51:6b:91:8a:a9:3f:91:44:a7:eb:90:43:a1:
1c:c5:1f:52:8a:15:ec:9b:3d:b6:24:70:f6:45:27:af:59:ad:
89:34:f5:fb:d7:ec:2a:76:a6:59:71:6c:24:e1:e4:eb:76:e8:
35:fb:65:ad:d7:08:9c:2a:c7:86:d8:c5:0e:bf:97:94:43:bf:
83:b2:e6:11:36:b5:da:61:bd:ad:fe:c9:18:1d:2a:c3:b1:0b:
bd:e5:b7:e3:28:e2:ba:d4:57:00:8d:b1:66:24:16:57:66:3c:
85:0d:19:40:b7:93:4e:db:ad:dc:73:76:c3:b0:9a:bf:df:cd:
4b:91:5e:e0:3f:22:0f:09:78:42:49:18:e1:2a:13:2f:fa:17:
42:3d:8b:3e:6c:5e:cf:d7:2a:f5:31:5c:f3:b4:b4:a9:3f:34:
36:23:b6:ea:3d:51:9f:e8:12:e1:1e:fb:48:56:f7:bf:74:8c:
b0:26:9f:84:e5:02:c8:29:61:e5:c8:88:58:98:93:c9:53:7a:
98:85:4c:5a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIh37R6d4Do50okkIPcXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl
YmU4ZTYwHhcNMjUwMTAyMDM0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWFiZDE4ZTgyMjYzZmFlZmU1NzZhNzMxMTYxODBkYWZhYjAwNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx4SO4vXBrTp089IRhkzA93pB/AU
Hdk/hfr/4dEKrmDQJPeRGWuIXdQ1nZYpBtMhjAo+olHeb0AiKdsg17gnni660+0H
ztV0HGsVDLL+yE6CI/G7lhfMhfmRamsQSOHVllBLm+C5J61pD/Rv1M4XHVjGhFgi
diawCOQG8G2FBdO68/mDTZAd2CA1Ewvf4kApR1/Z2wUevkRvZqNVIz1J36ErHYl/
jUAR3im73eIacaSVheMew1CH/cuWeIDm7jO+bYNPAK0H7pFL5ZsXthPIVxqUxJ4I
3b1y0+OtqDW2fEVSE3UOWWTd7pnpu5/ruFRgxDIXdph5jcMSskxRk9r60QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLqr0Y6CJj+u/ldqcxFhgNr6sAT2MB8GA1UdIwQY
MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt
MjY1ZjJiZDBmOGYzLzEvdXF2UmpvSW1QNjctVjJwekVXR0EydnF3QlBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz
LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYxwAwQA
UVlYAwQCw9M4MA0GCSqGSIb3DQEBCwUAA4IBAQAF2c8Ebu1fwlDOITlcdUXwETp7
SkWE3eALsi2T7ZA+9k6K0CPUewsmWk5YT17qccqBdWhqpBBgSEehf1FrkYqpP5FE
p+uQQ6EcxR9SihXsmz22JHD2RSevWa2JNPX71+wqdqZZcWwk4eTrdug1+2Wt1wic
KseG2MUOv5eUQ7+DsuYRNrXaYb2t/skYHSrDsQu95bfjKOK61FcAjbFmJBZXZjyF
DRlAt5NO263cc3bDsJq/381LkV7gPyIPCXhCSRjhKhMv+hdCPYs+bF7P1yr1MVzz
tLSpPzQ2I7bqPVGf6BLhHvtIVve/dIywJp+E5QLIKWHlyIhYmJPJU3qYhUxa
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net