Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rEQKimqkhNBzz63UgtlBxUGaFSE.roa
File: rEQKimqkhNBzz63UgtlBxUGaFSE.roa (raw, json)
Hash identifier: gWjxUzpyOTvum3dZ5xYcgUGLTxStU93JKFPZp4dC1qE=
Subject key identifier: AC:44:0A:8A:6A:A4:84:D0:73:CF:AD:D4:82:D9:41:C5:41:9A:15:21
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A6BB2D93BE4CB5C2AA71E4C32881
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rEQKimqkhNBzz63UgtlBxUGaFSE.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.156.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a6:bb:2d:93:be:4c:b5:c2:aa:71:e4:c3:28:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac440a8a6aa484d073cfadd482d941c5419a1521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:f7:70:7c:96:3c:74:68:fe:7e:7a:2c:36:
14:e1:b7:93:c4:f6:4a:31:75:b6:3c:3d:80:ba:14:
e5:9f:a3:dd:ef:35:19:39:a1:82:7d:25:b3:c2:63:
74:82:90:c4:45:c6:6d:ed:41:84:24:d1:68:e3:d6:
22:70:fd:78:f1:37:c3:da:a3:e5:26:85:83:83:1f:
df:18:e0:04:9c:fe:8e:09:de:2f:f9:d4:1b:fc:62:
39:e9:68:bf:7a:8a:0b:c1:3c:eb:9d:1e:e4:07:0c:
92:0a:01:43:ac:45:a0:c7:be:68:1a:f6:ed:45:5c:
1c:cc:24:ca:63:fe:24:1a:12:e8:5f:9e:7a:81:e0:
ea:64:83:63:90:e5:aa:f1:92:46:c2:0a:02:1b:58:
8f:fa:77:11:c3:ad:3e:bb:04:83:c6:cb:ee:6a:3b:
b4:48:6b:a9:d3:2a:f7:f2:2d:34:4c:e5:5e:35:8a:
cc:d5:2b:c0:0a:8f:54:e7:fb:f1:7e:09:59:b6:b9:
b2:88:58:20:9d:58:c1:38:98:8a:8f:76:6f:a6:43:
f9:0b:32:52:b4:07:e1:9e:20:6a:ef:d5:23:8e:89:
d0:b2:da:69:a8:f6:75:22:1c:6e:d0:67:62:d5:53:
5d:cf:04:90:5c:be:8f:df:82:b1:dc:d2:d8:bb:c1:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:0A:8A:6A:A4:84:D0:73:CF:AD:D4:82:D9:41:C5:41:9A:15:21
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rEQKimqkhNBzz63UgtlBxUGaFSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.222.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:5f:5e:1c:f0:90:cf:e0:e1:2c:02:71:55:44:d6:39:ce:1e:
c4:b2:91:64:b8:9d:5e:a6:95:24:f5:20:ab:a7:e6:41:7e:1b:
2e:5e:78:5f:01:72:68:98:a5:a4:08:f3:9a:76:0e:89:ad:13:
42:d7:72:a7:3f:fc:24:89:ce:15:eb:1d:2f:92:4c:d3:92:2e:
1a:4d:56:60:2a:2f:6a:5a:a3:70:93:0f:a0:2b:e8:31:e3:60:
a3:fe:16:c0:61:24:88:23:d2:57:f2:3d:8a:48:97:93:7d:78:
7b:ec:48:e4:d2:57:d0:16:34:6c:8c:61:59:ef:34:f7:86:08:
00:8b:09:d6:b5:bf:c2:42:93:0a:09:66:6a:fd:a5:9d:47:a8:
5f:9b:ca:a5:05:e2:ef:c5:c2:ee:f1:0e:f3:53:17:cd:d1:08:
19:58:b0:10:d6:2e:22:9e:14:09:46:6a:04:5a:f0:b3:63:a9:
a6:10:b9:71:20:a1:90:4e:9b:0c:7f:fc:28:be:50:db:b6:f7:
29:fc:62:4d:1f:37:e4:6b:b6:8a:b7:2c:56:69:5a:f4:d1:25:
b8:5d:bd:73:5f:e7:07:11:c7:4d:06:91:d5:11:fb:4a:cc:8f:
84:f8:a9:84:95:bf:f7:15:c3:45:15:9a:42:10:d1:f2:72:20:
d7:81:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:45 2025 by rpki-client on console.sobornost.net