Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/amkS5SoIvujCi9yce4d8VftUldc.roa
File: amkS5SoIvujCi9yce4d8VftUldc.roa (raw, json)
Hash identifier: +cELHuiQeJpKMXecyPF27q6ZAbek7zvwZNYTMIlI2SU=
Subject key identifier: 6A:69:12:E5:2A:08:BE:E8:C2:8B:DC:9C:7B:87:7C:55:FB:54:95:D7
Certificate issuer: /CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Certificate serial: 0194282650A525615DA22BBAF89EB2E569F5
Authority key identifier: F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/amkS5SoIvujCi9yce4d8VftUldc.roa
Signing time: Thu 02 Jan 2025 17:53:07 +0000
ROA not before: Thu 02 Jan 2025 17:53:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200984
IP address blocks: 45.13.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:50:a5:25:61:5d:a2:2b:ba:f8:9e:b2:e5:69:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Validity
Not Before: Jan 2 17:53:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a6912e52a08bee8c28bdc9c7b877c55fb5495d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:26:a8:d9:0b:38:05:ff:03:f4:6a:0c:cd:
ed:90:09:6f:c8:8c:c4:4e:36:f7:ba:0a:a2:20:99:
48:70:07:45:25:ca:64:14:9c:22:ca:4c:29:d9:c3:
6b:09:f2:87:f4:50:06:4d:91:65:96:aa:99:77:80:
4c:0a:43:b3:0d:cb:68:21:71:c5:1f:a1:83:c3:c8:
4f:62:aa:ca:97:2a:58:af:7f:4d:7a:19:e9:2b:d2:
5a:01:b8:b1:d2:87:84:75:9e:06:fb:52:b0:c4:a7:
91:cb:e1:04:c1:43:99:b0:71:26:f2:c9:dc:5c:b7:
bb:a2:5b:d7:7d:02:d8:a2:d7:a7:28:97:2c:49:68:
a4:a7:4d:da:1e:3a:7d:35:92:a6:c8:45:38:cb:6f:
a3:6f:12:c2:15:51:39:f9:d4:87:33:c1:25:a1:6e:
92:1e:74:df:0e:f6:1f:0c:85:15:24:fb:ce:b5:e8:
9d:d9:4f:70:5d:3a:7b:92:04:df:c8:64:b1:e3:04:
a5:b1:77:97:aa:53:cf:37:df:5d:cc:66:1e:90:ed:
5f:d6:9f:b2:6f:b6:73:fc:e2:29:38:3b:f1:11:62:
5b:5f:fc:a0:50:bd:59:12:93:32:fc:21:a0:e9:2c:
f5:2f:0d:6f:ed:fd:b5:81:a6:da:47:b4:d2:29:36:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:69:12:E5:2A:08:BE:E8:C2:8B:DC:9C:7B:87:7C:55:FB:54:95:D7
X509v3 Authority Key Identifier:
keyid:F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/amkS5SoIvujCi9yce4d8VftUldc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.80.0/22
Signature Algorithm: sha256WithRSAEncryption
23:76:40:9a:e4:00:9a:91:0a:63:0c:78:84:49:0e:20:a0:f9:
54:81:1f:47:bf:4c:92:d9:1b:ab:30:df:11:94:eb:2b:1f:c7:
86:3b:50:18:7a:1e:fd:b9:b4:bc:20:5f:79:1e:7e:97:0a:ef:
32:fa:bd:b3:db:8e:9d:34:2f:ed:0d:7b:93:64:b1:1a:67:ef:
ef:26:06:ee:00:b5:67:cf:f9:aa:b9:04:87:75:61:d7:79:ba:
3c:d2:df:e3:c9:b6:ad:a2:73:a6:94:c3:1a:e8:69:51:81:a1:
54:e2:2c:bd:cd:85:1b:43:c1:9d:81:99:51:92:09:b1:0d:58:
66:43:5c:b0:28:49:53:ab:7b:83:66:9a:4f:98:36:1a:b6:a8:
57:f6:35:87:6a:16:f2:fb:74:76:4d:83:bf:90:6e:eb:db:1a:
c3:23:87:4b:b4:90:54:10:43:bb:ea:95:eb:71:85:83:ea:03:
67:98:8c:9e:f3:18:6a:eb:80:06:44:ed:73:19:e7:14:04:e8:
d6:15:c8:da:cb:0b:6e:aa:fc:3d:fd:69:8c:ba:bd:dc:2e:24:
15:ef:f2:8c:2b:53:65:df:6a:a6:d0:b7:c0:a8:5b:8f:a9:2a:
5b:9c:33:3c:92:6d:7f:8b:d9:07:fb:4c:e4:db:e0:f1:e7:99:
09:6b:df:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net