Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa
File: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (raw, json)
Hash identifier: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=
Subject key identifier: EB:44:FA:12:3D:99:26:7E:32:16:0F:CC:4B:A9:F6:8B:58:C5:D1:0C
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 0194258FC345F636901166964CC0AAC8BC22
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49847
IP address blocks: 45.132.172.0/24 maxlen: 24
45.132.173.0/24 maxlen: 24
45.132.174.0/24 maxlen: 24
45.132.175.0/24 maxlen: 24
185.42.224.0/24 maxlen: 24
185.42.225.0/24 maxlen: 24
185.42.226.0/24 maxlen: 24
185.42.227.0/24 maxlen: 24
2a04:9240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c3:45:f6:36:90:11:66:96:4c:c0:aa:c8:bc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb44fa123d99267e32160fcc4ba9f68b58c5d10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:77:58:1c:57:f0:ed:61:6e:72:22:f8:92:
cb:90:a1:d0:b7:8a:35:87:95:be:49:fe:2b:78:21:
1f:49:52:61:60:e0:bf:9d:ff:4f:81:0b:2a:8a:39:
45:9a:16:aa:0a:6c:49:ee:d1:4c:bc:43:4d:af:b7:
5f:39:6f:c7:7f:29:28:85:b2:44:12:cc:55:42:98:
ac:ad:02:d4:14:59:85:0c:18:fc:6f:b0:c4:bf:95:
ad:15:c1:e9:54:cb:78:04:79:6b:69:6a:ea:dc:7b:
fb:02:b1:41:68:e0:f9:9a:2b:8d:02:be:b2:54:63:
16:f7:3b:6d:97:6e:5f:96:54:30:0e:97:9b:c2:a4:
dd:77:e3:38:2e:47:37:59:65:5d:42:ea:8b:58:4f:
38:2b:14:85:53:a1:3e:50:b2:6b:3e:8a:57:da:10:
3d:65:a9:5c:19:36:b8:59:b3:09:bd:91:d2:af:7b:
6e:98:90:62:86:d5:7a:94:b6:0f:e3:f9:d3:b5:57:
82:68:3e:e9:78:9c:13:95:a2:55:cc:68:2c:f2:ad:
29:9b:76:0a:37:6a:e0:da:f0:27:f9:50:a3:95:49:
6d:2d:4a:43:ea:00:52:89:8b:e5:83:81:2c:5a:48:
43:1a:b1:2b:6d:c9:13:9f:28:db:91:0d:13:94:1f:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:FA:12:3D:99:26:7E:32:16:0F:CC:4B:A9:F6:8B:58:C5:D1:0C
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.172.0/22
185.42.224.0/22
IPv6:
2a04:9240::/29
Signature Algorithm: sha256WithRSAEncryption
c4:79:29:15:20:a2:94:db:40:a7:20:d7:97:53:3f:74:6b:e0:
ec:92:4d:ef:3d:70:97:f1:d5:72:4a:e9:41:d7:c3:7d:bd:f1:
f6:e7:4e:5f:8c:7f:02:bd:6b:80:41:78:c4:fe:35:d6:2c:b3:
11:80:9e:3c:33:d9:ea:6a:72:3d:5b:4c:d7:6e:77:05:df:b6:
27:12:25:b6:33:78:49:72:20:bc:18:21:a6:3e:52:c6:f5:e1:
66:49:5f:da:72:f9:cb:41:72:de:64:d8:ef:99:a6:95:12:ad:
1f:19:3f:33:5f:4c:04:90:49:21:d3:65:99:9b:85:5c:ff:56:
ca:3c:4f:e8:5e:81:0f:1b:de:15:09:49:61:a9:9c:cf:46:ec:
18:34:7b:b1:b8:43:4f:dd:b0:ae:c0:07:f5:77:1b:b4:e3:a0:
22:99:c6:4c:c7:6d:bc:54:fb:2c:7b:36:a7:8d:2d:bf:10:f3:
06:7d:60:91:b2:54:73:17:b1:fe:4d:19:39:14:b7:1d:2e:09:
b5:f1:d8:da:03:13:0b:18:93:04:4e:10:a7:35:6d:00:67:09:
67:68:80:2f:72:75:bb:9d:a2:90:c2:a8:42:c9:e6:02:be:04:
43:36:98:87:dc:15:1b:04:3a:ee:10:b0:53:61:bb:58:2f:0f:
f3:de:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:13 2025 by rpki-client on console.sobornost.net