Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/UVQQxsyFxE5G_GAZUd3A6ZXjkCE.roa
File: UVQQxsyFxE5G_GAZUd3A6ZXjkCE.roa (raw, json)
Hash identifier: zpm9oScjJUHtNk/CwO+EVZyjIHRYFCB8FAgH34Qnsvo=
Subject key identifier: 51:54:10:C6:CC:85:C4:4E:46:FC:60:19:51:DD:C0:E9:95:E3:90:21
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 0194B286CDD3D6703429F14E74E9739303CA
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/UVQQxsyFxE5G_GAZUd3A6ZXjkCE.roa
Signing time: Wed 29 Jan 2025 14:46:06 +0000
ROA not before: Wed 29 Jan 2025 14:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214570
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
185.254.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:86:cd:d3:d6:70:34:29:f1:4e:74:e9:73:93:03:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Jan 29 14:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=515410c6cc85c44e46fc601951ddc0e995e39021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:16:ac:55:22:b1:66:ef:dc:30:35:73:9c:
12:4f:47:06:e0:58:d7:c4:b7:e5:79:95:08:55:a1:
f7:3b:6a:75:40:63:9d:d8:78:d0:fb:35:1a:22:7d:
c7:f4:87:42:33:42:7a:96:d5:7a:61:92:68:62:bc:
30:f7:de:bd:28:3f:65:af:3d:f7:65:2f:91:01:78:
9c:6b:1f:23:28:db:d0:1a:c5:4f:89:e8:31:3a:4c:
64:35:04:20:77:fe:eb:b8:14:15:bb:5f:ff:75:cb:
a8:de:43:c1:d7:2e:75:4a:15:7e:43:88:bc:fb:2e:
6a:58:c2:92:77:c3:db:56:a6:68:6b:0a:2e:26:93:
cc:17:5f:ff:39:cc:ad:a1:4a:fb:02:c5:37:2a:c4:
36:31:92:17:fd:72:7b:f1:6c:cc:10:16:3d:32:70:
5a:71:ed:e0:e4:81:f3:68:4e:f2:4b:a3:85:9e:84:
6b:39:cd:c9:be:ba:d8:85:41:4d:d9:e0:9b:d0:26:
8a:8f:90:7d:cc:51:b2:8d:9f:28:ea:f2:69:72:13:
b8:17:b2:de:2e:0b:45:ad:6f:7a:5a:e2:23:59:8f:
e1:ec:96:8a:41:5b:c2:12:ee:3f:43:0c:52:49:54:
8f:8b:ad:e0:1d:ba:c0:35:7e:88:a9:06:1c:77:75:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:54:10:C6:CC:85:C4:4E:46:FC:60:19:51:DD:C0:E9:95:E3:90:21
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/UVQQxsyFxE5G_GAZUd3A6ZXjkCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
185.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:70:bf:b6:86:5e:f1:e6:c1:6b:25:c2:d6:6c:73:f4:18:cd:
13:cf:7e:23:de:21:a0:06:00:32:09:3d:a1:0c:e0:e9:32:ea:
71:6b:ca:84:6b:13:33:91:ed:6e:ad:e2:70:4a:e8:ca:36:cf:
85:54:72:ce:5f:df:4f:43:c0:f3:f5:7f:d5:de:9e:cf:42:73:
31:1f:dd:8b:25:20:57:b2:29:32:49:ce:bc:38:61:67:60:c4:
06:58:8a:e8:c6:39:d4:c2:e5:40:c5:1e:d6:79:7e:b1:3b:7e:
e6:cb:25:23:5e:c0:b1:9d:66:29:8b:01:35:9c:e9:e9:d7:b2:
36:ac:12:07:9d:d3:2d:f1:12:aa:0d:79:5e:6b:27:ab:89:9b:
3f:c9:49:5b:4e:48:aa:7d:f3:d0:64:5d:60:65:18:6c:e7:a5:
1f:f6:eb:e9:30:a5:eb:e0:d0:02:63:16:d1:0c:3f:2e:04:f0:
ae:74:88:4d:4a:f3:6e:e4:bf:07:27:c6:e1:75:b0:90:8c:01:
85:e3:08:77:13:fa:a0:69:99:d5:b0:09:03:75:48:28:51:89:
73:3b:8f:8e:17:48:87:70:31:ab:94:2a:34:4f:3f:f7:7c:d2:
72:3e:c9:7d:ec:86:8f:d5:07:54:5c:9d:22:60:5b:1a:ec:fa:
c6:9f:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net