Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/u-vxqtEHS8_2x6eZcTZNC4CjRTc.roa
File: u-vxqtEHS8_2x6eZcTZNC4CjRTc.roa (raw, json)
Hash identifier: sS66RHYE/kg7OthkadikWTZchzsA2jFKQ+XWofUrxvU=
Subject key identifier: BB:EB:F1:AA:D1:07:4B:CF:F6:C7:A7:99:71:36:4D:0B:80:A3:45:37
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 018F530995B7962BE6E26441E6AB552533B5
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/u-vxqtEHS8_2x6eZcTZNC4CjRTc.roa
Signing time: Tue 07 May 2024 12:31:28 +0000
ROA not before: Tue 07 May 2024 12:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208449
IP address blocks: 45.90.168.0/24 maxlen: 24
45.90.169.0/24 maxlen: 24
45.90.170.0/24 maxlen: 24
2a0d:f100::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:09:95:b7:96:2b:e6:e2:64:41:e6:ab:55:25:33:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: May 7 12:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbebf1aad1074bcff6c7a79971364d0b80a34537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:d1:86:76:0e:ca:e8:99:a1:b3:9f:16:fe:
75:bb:ee:2f:09:b1:d9:cd:cd:27:d8:08:92:b7:78:
77:c2:4f:87:f6:6e:18:53:c4:7c:cb:1d:1b:70:b1:
af:c3:a5:8f:d6:41:6f:fc:9c:bc:0a:d7:16:51:8f:
dd:44:b0:5f:8c:39:83:3f:18:3a:ed:c8:0c:bc:b6:
70:80:dd:aa:56:8d:5f:bd:c1:d0:35:2c:d3:aa:85:
e0:d5:96:8e:95:28:6d:37:32:c7:36:f0:59:93:00:
1e:29:6f:64:ef:26:ef:bd:5c:00:d0:1f:69:91:b7:
13:94:3f:6a:7e:b7:7e:1c:e6:43:89:44:92:bf:85:
07:22:5d:67:c6:20:0e:7f:bd:1c:70:4b:08:a4:66:
32:24:d1:be:67:ef:fd:82:b5:33:e1:ea:7b:6c:f4:
c9:a7:90:8e:5f:88:19:fa:4f:45:32:cd:b2:22:3d:
e4:8c:0f:a3:cf:28:e9:2a:65:a3:b2:79:d4:02:ec:
08:ee:5e:28:d9:94:67:e6:6c:a8:c1:cb:94:7b:af:
b4:47:f7:55:db:9c:d9:4f:bf:a8:63:aa:f6:56:12:
dd:e7:46:fe:62:b4:da:4f:cd:f4:9c:81:e2:78:50:
5a:2a:0a:b0:30:8a:c0:81:1c:a7:cc:49:f0:92:a5:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:F1:AA:D1:07:4B:CF:F6:C7:A7:99:71:36:4D:0B:80:A3:45:37
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/u-vxqtEHS8_2x6eZcTZNC4CjRTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.168.0-45.90.170.255
IPv6:
2a0d:f100::/29
Signature Algorithm: sha256WithRSAEncryption
26:02:91:de:71:df:ea:20:77:ae:04:19:e4:a6:bd:31:2c:7b:
7a:f8:8a:2c:83:bb:cf:4d:c4:8e:d4:ff:c4:6b:e8:50:8a:93:
67:d5:32:ed:a3:90:d6:1d:ea:33:9f:6b:52:e3:49:14:03:08:
09:95:45:25:72:19:2e:09:d2:dd:81:d6:e7:97:d0:de:67:eb:
92:ae:f2:5a:a6:fb:94:2b:f0:fa:6d:cf:c2:65:a2:9b:eb:5b:
d4:3b:79:d3:e4:d6:d9:4d:a5:ae:14:21:f9:bf:f1:3a:87:70:
fe:be:8b:d2:28:3c:e7:2c:c2:9d:b2:af:95:0c:12:b7:33:e6:
99:ca:0f:f8:fc:c7:66:55:0a:8e:81:98:d7:a8:04:c3:8a:08:
8d:29:27:60:c0:21:13:f4:d1:bc:1a:7e:1c:11:90:8e:0a:a8:
c5:28:61:43:63:74:c0:4b:2c:9d:d8:35:49:e5:c8:5d:3a:fc:
52:da:a5:58:12:6b:bb:c5:9f:dc:ae:ff:97:ec:c6:2b:e1:64:
42:8b:ee:62:c6:b5:ec:f9:b6:3e:6d:ac:5e:48:c7:88:aa:b6:
1b:73:43:78:56:7c:e7:3e:11:5d:f6:bd:d2:e9:b7:ed:93:9f:
bb:c1:81:82:de:53:95:ff:26:07:20:2f:46:32:c3:f8:a9:db:
d8:15:ad:fb
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAY9TCZW3livm4mRB5qtVJTO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjI4MmNjMWMwNzY5N2ZmNWI1MTkwYzcxNDM5M2Q1NDI0
MDZkNDMwHhcNMjQwNTA3MTIzMTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmViZjFhYWQxMDc0YmNmZjZjN2E3OTk3MTM2NGQwYjgwYTM0NTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJfRhnYOyuiZobOfFv51u+4vCbHZ
zc0n2AiSt3h3wk+H9m4YU8R8yx0bcLGvw6WP1kFv/Jy8CtcWUY/dRLBfjDmDPxg6
7cgMvLZwgN2qVo1fvcHQNSzTqoXg1ZaOlShtNzLHNvBZkwAeKW9k7ybvvVwA0B9p
kbcTlD9qfrd+HOZDiUSSv4UHIl1nxiAOf70ccEsIpGYyJNG+Z+/9grUz4ep7bPTJ
p5COX4gZ+k9FMs2yIj3kjA+jzyjpKmWjsnnUAuwI7l4o2ZRn5myowcuUe6+0R/dV
25zZT7+oY6r2VhLd50b+YrTaT830nIHieFBaKgqwMIrAgRynzEnwkqU6gQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLvr8arRB0vP9senmXE2TQuAo0U3MB8GA1UdIwQY
MBaAFEHygswcB2l/9bUZDHFDk9VCQG1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQt
ZTNlZWNmOWRmYWFkLzEvdS12eHF0RUhTOF8yeDZlWmNUWk5DNENqUlRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQtZTNlZWNmOWRmYWFk
LzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAMtWqgD
BAAtWqowDQQCAAIwBwMFAyoN8QAwDQYJKoZIhvcNAQELBQADggEBACYCkd5x3+og
d64EGeSmvTEse3r4iiyDu89NxI7U/8Rr6FCKk2fVMu2jkNYd6jOfa1LjSRQDCAmV
RSVyGS4J0t2B1ueX0N5n65Ku8lqm+5Qr8Pptz8JlopvrW9Q7edPk1tlNpa4UIfm/
8TqHcP6+i9IoPOcswp2yr5UMErcz5pnKD/j8x2ZVCo6BmNeoBMOKCI0pJ2DAIRP0
0bwafhwRkI4KqMUoYUNjdMBLLJ3YNUnlyF06/FLapVgSa7vFn9yu/5fsxivhZEKL
7mLGtez5tj5trF5Ix4iqthtzQ3hWfOc+EV32vdLpt+2Tn7vBgYLeU5X/JgcgL0Yy
w/ip29gVrfs=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net