Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/0dnjAAVnRwbO6lAaPE0xCZvdESA.roa
File: 0dnjAAVnRwbO6lAaPE0xCZvdESA.roa (raw, json)
Hash identifier: yR2tvb01DH+KpsUXr1OyB58c2jnn2SwJFLVn+iCrz9U=
Subject key identifier: D1:D9:E3:00:05:67:47:06:CE:EA:50:1A:3C:4D:31:09:9B:DD:11:20
Certificate issuer: /CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Certificate serial: 019427477A5709025A45224A0017AC4314E3
Authority key identifier: 49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/0dnjAAVnRwbO6lAaPE0xCZvdESA.roa
Signing time: Thu 02 Jan 2025 13:49:43 +0000
ROA not before: Thu 02 Jan 2025 13:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50064
IP address blocks: 45.146.236.0/22 maxlen: 22
45.146.237.0/24 maxlen: 24
45.146.238.0/24 maxlen: 24
45.146.239.0/24 maxlen: 24
2a0f:4800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7a:57:09:02:5a:45:22:4a:00:17:ac:43:14:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Validity
Not Before: Jan 2 13:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1d9e30005674706ceea501a3c4d31099bdd1120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:99:6b:a6:e3:e1:7c:90:12:ad:e7:ff:d1:
1f:22:cf:60:8a:cb:62:52:9d:17:a4:62:04:5b:31:
72:85:d9:03:8e:1e:55:4b:1d:34:f2:3a:b0:2b:e1:
c5:35:f5:d8:3d:06:b9:5d:5a:dd:45:c5:cb:ee:20:
2a:c6:86:51:49:f6:66:31:e0:ea:5e:48:9e:71:22:
59:43:a2:32:24:f6:55:f8:55:1f:45:3b:8c:87:9c:
92:8d:fc:33:41:b2:8e:73:42:de:c7:9f:6b:d0:3f:
f8:34:44:19:a5:73:5e:0f:7b:dd:55:19:73:69:25:
33:3d:37:30:70:c4:04:69:f0:46:c2:eb:20:98:b0:
5a:28:b0:53:24:58:1c:0f:25:6d:80:52:a2:d6:46:
35:74:d4:85:6b:09:b1:d7:0c:57:91:20:5d:43:2d:
20:41:19:ae:01:81:9a:12:46:43:6f:27:15:c2:c8:
0c:fb:6b:e8:a1:2e:1e:a7:7b:41:1f:d6:fd:a2:b8:
53:a6:d1:a0:53:a3:77:34:73:91:20:4c:32:4a:1f:
0b:94:9f:ae:5c:27:79:90:19:cd:52:b0:bd:54:55:
a1:5c:a2:47:96:fd:64:0e:81:72:46:e6:fb:3a:98:
c6:89:11:d7:55:b0:7a:97:a0:e7:b7:54:29:f9:28:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:E3:00:05:67:47:06:CE:EA:50:1A:3C:4D:31:09:9B:DD:11:20
X509v3 Authority Key Identifier:
keyid:49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/0dnjAAVnRwbO6lAaPE0xCZvdESA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.236.0/22
IPv6:
2a0f:4800::/29
Signature Algorithm: sha256WithRSAEncryption
1e:28:3e:4b:3c:09:4a:66:62:18:86:d0:34:2f:57:3c:2b:5e:
32:81:bb:af:cf:1e:10:62:ca:67:b9:0b:eb:7b:3c:e2:93:ce:
62:52:a6:bd:7c:62:52:1a:d7:b8:b9:84:de:0e:23:b3:ea:88:
ce:5d:48:fe:a4:7f:66:18:33:32:c5:04:9f:4c:73:c5:f8:8d:
34:07:57:5e:e3:c5:db:66:1f:e2:dc:17:8c:b2:25:28:71:70:
26:ea:bc:6a:64:87:29:60:aa:75:5c:3e:eb:d4:f7:ed:43:94:
2c:ba:d4:f4:37:5a:85:1e:44:17:ad:11:43:d2:3a:27:4a:d9:
43:f5:8b:08:26:96:db:9e:fb:0a:02:14:bb:d7:a6:85:cf:b8:
9f:d0:71:47:15:cb:4f:b2:23:65:30:b2:c8:ec:31:3b:f4:e6:
e3:0c:ab:d2:9b:f8:11:de:83:03:71:a4:15:27:10:6e:6a:57:
f8:90:72:6d:eb:01:d6:4e:e0:0d:66:59:72:13:17:dc:c8:ac:
f8:f1:1b:5d:2e:97:07:da:f8:e9:9d:09:b1:39:83:69:0d:4d:
ab:7e:51:26:3b:b3:0f:1a:84:35:24:20:26:c6:d1:5c:ac:35:
78:99:83:27:2a:50:39:5e:1f:88:84:54:69:74:ae:bb:b6:ec:
6f:d4:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:23 2025 by rpki-client on console.sobornost.net