Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/6acioW8fL3zKVpl-y8BbkvKlFps.roa
File: 6acioW8fL3zKVpl-y8BbkvKlFps.roa (raw, json)
Hash identifier: xhVHjhGNJ6KQvUnk61MuSIPqQSjM+SRpHAHOGmOA2kA=
Subject key identifier: E9:A7:22:A1:6F:1F:2F:7C:CA:56:99:7E:CB:C0:5B:92:F2:A5:16:9B
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01942369851ADC934BD979979CEAE984FEFC
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/6acioW8fL3zKVpl-y8BbkvKlFps.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215512
IP address blocks: 45.113.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:85:1a:dc:93:4b:d9:79:97:9c:ea:e9:84:fe:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9a722a16f1f2f7cca56997ecbc05b92f2a5169b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:43:d4:b1:4e:5f:e8:90:cc:25:af:29:30:
e1:6d:3e:b6:9a:5b:e0:d0:34:7c:ba:60:b0:29:e6:
02:8e:ae:1f:74:d6:7d:71:a6:5d:7d:31:2d:1d:61:
ff:5f:3c:93:a6:86:bc:eb:f3:be:1f:bf:9f:1a:d9:
ed:9a:60:97:d8:71:a2:03:42:ce:db:1f:c6:9b:67:
9d:a4:0b:0c:66:3e:89:9a:1b:02:b6:e0:4d:29:64:
f9:22:f3:65:17:ad:0b:83:f7:4d:1b:5d:0b:c5:da:
7b:68:4e:cc:bf:5b:e4:23:f5:28:0c:3f:4d:79:c6:
bd:fe:15:a0:7d:ab:1b:a2:61:60:ad:36:78:75:cc:
f8:4a:bc:c2:13:e2:40:52:66:45:e4:fa:8e:ef:09:
af:03:77:d8:b8:d1:9d:95:58:63:8a:f4:2e:b1:ae:
17:5a:1e:b7:3c:2e:12:70:f9:12:fd:e9:0d:52:6a:
45:f2:06:c0:e8:6d:c4:31:5d:77:a4:ee:3c:2d:2e:
e2:76:43:79:ab:92:c4:f4:e3:e6:fb:33:7c:8a:18:
1e:5e:8e:9a:93:64:51:40:5d:54:40:06:ad:d5:ba:
4b:fc:a8:38:c8:ff:4c:50:2a:7e:13:40:66:da:ad:
fb:70:49:5a:b4:71:5a:45:4c:a8:ad:aa:92:a8:e9:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:22:A1:6F:1F:2F:7C:CA:56:99:7E:CB:C0:5B:92:F2:A5:16:9B
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/6acioW8fL3zKVpl-y8BbkvKlFps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0b:54:3f:7f:1c:00:36:24:a4:75:4c:e8:85:87:bd:aa:46:
29:60:11:dc:94:e6:df:aa:2d:1f:59:8e:88:64:e5:4a:b9:3d:
1e:33:e9:0a:9c:1e:db:eb:88:4a:53:d5:08:5e:65:b6:b0:10:
92:4a:6f:32:53:21:7f:4f:87:29:9c:f9:d2:b3:8d:63:80:36:
ce:50:36:c8:38:0e:ea:c4:38:34:c4:46:7f:a5:a0:31:db:cb:
f1:c9:24:f3:a4:7c:df:ac:24:4b:b0:71:fb:54:a1:40:d0:3f:
c0:3f:69:70:71:7f:28:ff:10:e0:8d:1d:79:13:10:94:1b:7b:
52:84:a2:0a:3b:e1:49:da:6a:25:b5:4f:db:d7:be:f9:6e:cd:
9d:bd:e3:f5:8a:ae:8e:fd:27:00:97:01:b8:b1:e2:7a:ad:35:
a3:58:76:94:13:ff:43:9f:b3:13:e2:6b:af:75:9a:e0:ab:5c:
94:5b:ac:df:c1:9c:b8:f2:66:c5:ef:d7:58:02:1f:4f:ab:65:
3f:2a:7f:5d:0d:d2:3c:2d:e0:2b:f0:f9:24:30:86:0f:17:fd:
b2:c7:46:97:3a:b5:c9:61:f2:db:fb:93:6b:17:d9:5e:e8:c3:
3a:07:91:34:e2:42:0b:62:10:f9:b4:9b:c6:40:23:07:bd:56:
d4:6c:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net