Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/uqrlNmi3JIXMAd4M2kGVrPWuUfw.roa
File: uqrlNmi3JIXMAd4M2kGVrPWuUfw.roa (raw, json)
Hash identifier: JotVZbdWf26q2f6QT9N558e23SjHJjGQ5C1QHsDQwcY=
Subject key identifier: BA:AA:E5:36:68:B7:24:85:CC:01:DE:0C:DA:41:95:AC:F5:AE:51:FC
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0196006919C4C43B1AE99E24DAF8EDBE3FF4
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/uqrlNmi3JIXMAd4M2kGVrPWuUfw.roa
Signing time: Fri 04 Apr 2025 10:46:49 +0000
ROA not before: Fri 04 Apr 2025 10:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.43.145.0/24 maxlen: 24
45.43.156.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
64.137.16.0/24 maxlen: 24
104.239.51.0/24 maxlen: 24
216.173.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:69:19:c4:c4:3b:1a:e9:9e:24:da:f8:ed:be:3f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 4 10:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baaae53668b72485cc01de0cda4195acf5ae51fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:6d:c9:b1:6d:4e:4b:d8:22:3a:0b:4f:f7:
07:b7:e0:5f:4b:f9:bf:86:42:80:e6:bc:0f:50:55:
9e:1c:42:f6:ac:f0:2a:e6:ca:0a:8d:49:61:72:4e:
e8:b1:81:f5:4e:ef:a2:1b:fe:68:a3:61:c3:ae:c4:
50:d1:a4:15:13:19:1c:f2:e2:f2:8f:b7:96:d8:15:
e9:71:38:01:41:f8:22:2c:99:e5:74:68:b3:98:70:
50:5e:db:13:1b:f2:ac:e1:90:c4:b7:ae:5a:96:ec:
64:32:fa:a6:b8:8e:ea:83:f5:73:87:8d:06:3a:9b:
38:74:4b:68:34:94:81:60:4e:93:89:c5:d7:a2:f3:
65:f1:36:80:b9:83:7a:af:31:ff:a0:c4:09:3e:f8:
4c:53:f2:e0:b2:37:70:34:14:58:5d:52:e9:02:29:
d2:75:22:5b:03:40:d0:04:60:a2:f7:89:ce:4d:92:
db:49:0c:a9:7e:66:28:bb:a7:3d:f8:51:4d:f1:f9:
91:33:76:06:3b:d2:71:ce:b8:29:78:07:03:b5:d2:
01:28:ea:2f:31:64:74:ca:90:31:c5:ff:9d:be:7b:
0d:92:36:21:b5:f3:64:d8:eb:72:e8:62:a5:c2:21:
7c:de:98:52:a3:2e:74:bd:3b:75:a9:43:5c:6f:9c:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:E5:36:68:B7:24:85:CC:01:DE:0C:DA:41:95:AC:F5:AE:51:FC
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/uqrlNmi3JIXMAd4M2kGVrPWuUfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.145.0/24
45.43.156.0/24
45.43.160.0/24
64.137.16.0/24
104.239.51.0/24
216.173.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2f:1c:71:82:4a:45:ac:06:c4:3a:6e:98:b2:e1:df:7e:d7:
fb:47:77:b0:95:18:2d:47:3f:9e:86:3e:fa:59:60:d4:a5:8a:
d6:49:0e:36:4b:7f:a5:eb:42:6a:cc:a0:5b:b5:d3:ee:8c:a0:
60:03:b2:89:3d:d0:5c:0d:43:75:86:f0:a3:42:ec:61:dc:12:
71:b0:1c:24:b0:fe:96:e8:8e:92:ac:d8:95:8e:bf:89:46:6e:
a7:5f:18:52:f9:7b:51:b4:e1:8e:16:09:7e:80:86:d1:77:f3:
a9:7a:21:df:77:66:5e:fb:37:6f:45:a3:fb:30:ed:44:d6:b6:
67:26:1c:17:61:24:3e:8d:c8:4a:42:6b:9b:b8:36:9a:83:c3:
84:7c:fb:66:e0:d0:27:8d:4a:c8:46:86:21:ec:fc:6f:b3:7b:
a3:ff:20:c6:e1:64:99:f6:16:b9:c7:17:da:86:a2:4f:eb:8a:
7a:a5:41:e8:02:4c:7b:c7:e9:8b:14:e1:4f:3a:16:8a:9b:c7:
59:a7:74:00:df:7d:01:83:a3:db:e2:a3:3e:3c:d8:a5:11:b4:
03:b8:19:db:f9:4f:eb:0e:ac:b0:69:81:cf:37:c9:dd:9a:25:
37:bd:17:5d:18:0f:bf:1a:55:94:d4:1f:0b:a8:53:c2:e0:f9:
a6:8d:ce:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net