Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/cXzh2EByibI6pp16VOl9xphGioo.roa
File: cXzh2EByibI6pp16VOl9xphGioo.roa (raw, json)
Hash identifier: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=
Subject key identifier: 71:7C:E1:D8:40:72:89:B2:3A:A6:9D:7A:54:E9:7D:C6:98:46:8A:8A
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 01942067D7104267DEB0A69C45D70E9B4F6E
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/cXzh2EByibI6pp16VOl9xphGioo.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208313
IP address blocks: 45.146.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d7:10:42:67:de:b0:a6:9c:45:d7:0e:9b:4f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=717ce1d8407289b23aa69d7a54e97dc698468a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:96:c2:48:67:f5:15:3a:33:79:a2:78:34:
85:ed:87:e3:83:bc:00:9e:d0:55:11:b8:f5:50:91:
75:ca:cb:ff:08:ab:91:a8:77:e5:5f:0e:f2:83:3d:
0b:da:55:90:09:3f:df:c8:29:b8:4f:ba:1a:82:d8:
9c:99:f2:81:0e:ba:03:8a:88:d4:6c:06:48:d9:14:
f9:ef:71:44:b1:b4:32:d6:2e:ac:3a:60:2e:85:ac:
00:ed:48:08:56:35:30:18:2b:7b:40:67:67:7f:bb:
3e:f0:68:4f:19:d5:a4:2d:d8:78:a1:07:04:d7:b3:
dc:73:b1:a0:0b:43:2e:8c:a1:12:1f:fd:92:a5:c4:
f3:de:2d:fc:85:54:8c:0e:72:ce:79:ab:49:f4:37:
5f:bb:5b:62:ff:68:7e:f1:c2:34:20:53:b7:a4:b3:
57:f2:6c:64:d9:17:d1:46:ec:ea:f3:fb:0a:b4:6c:
f3:af:88:4f:d9:70:a0:ff:e3:fe:1f:76:9b:2a:4d:
19:5b:fe:f2:7a:11:33:c3:c4:06:2c:33:9f:f5:8c:
57:72:fd:d9:1b:f0:76:a5:6a:0d:d1:cb:9e:c4:35:
27:a2:24:40:d8:db:ee:1c:61:d0:cf:27:6c:45:ab:
c0:d1:d5:12:89:fd:bb:34:7a:90:63:a6:37:0e:5e:
32:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7C:E1:D8:40:72:89:B2:3A:A6:9D:7A:54:E9:7D:C6:98:46:8A:8A
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/cXzh2EByibI6pp16VOl9xphGioo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.148.0/22
Signature Algorithm: sha256WithRSAEncryption
32:97:f9:a4:fd:de:38:75:74:31:d9:91:6a:8e:a5:58:d5:f8:
5f:56:a6:65:82:5e:f8:5d:43:a9:77:3b:9b:a4:d1:4e:89:19:
7c:8e:23:8a:76:c3:15:bf:a1:dc:70:5a:22:04:23:5d:b6:39:
c7:ca:a3:fa:0c:03:b2:b8:3c:a9:60:27:d9:a8:f5:3a:b9:76:
40:49:45:a8:c2:7b:ba:42:83:26:3e:59:64:6d:63:78:62:85:
a2:c9:7f:3c:81:11:d2:f4:9e:17:52:86:90:50:d7:1c:6d:9c:
2e:e1:73:13:b0:64:c5:be:00:c0:95:5d:dd:7a:a0:d2:52:36:
fd:58:66:a5:be:35:cd:dd:c0:2f:7a:2e:1b:89:92:13:6c:be:
dc:9e:1e:7e:78:28:b2:0b:ae:ad:af:f4:f6:23:7b:0c:f4:f0:
88:76:9d:4d:86:71:9c:c4:a8:70:d0:9c:76:10:ec:b0:f8:be:
30:4c:8a:9e:4a:f7:5a:51:a6:a5:24:5b:b1:f7:b1:f5:38:c8:
5b:8b:bf:3b:a0:4b:64:bd:5d:e3:59:f2:e5:ee:1a:43:4d:e7:
ab:06:76:08:90:17:06:c7:06:64:57:af:89:f9:a1:ea:9e:cb:
21:65:f7:d2:a8:dc:ae:80:f3:e7:ff:c6:cc:63:f1:7c:bf:16:
27:01:58:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net