Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/n153dY1GpJ4_UwUqUY3HaTEGP7I.roa
File: n153dY1GpJ4_UwUqUY3HaTEGP7I.roa (raw, json)
Hash identifier: Xk7KXK61rmwLqoIHj+t2jV4riZg2jXu+cWnVquz+ZXA=
Subject key identifier: 9F:5E:77:75:8D:46:A4:9E:3F:53:05:2A:51:8D:C7:69:31:06:3F:B2
Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial: 01942220340B1BF26907E13AAD2FECC06DC7
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/n153dY1GpJ4_UwUqUY3HaTEGP7I.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48437
IP address blocks: 45.14.28.0/22 maxlen: 22
91.200.8.0/22 maxlen: 22
185.175.244.0/22 maxlen: 22
195.22.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:34:0b:1b:f2:69:07:e1:3a:ad:2f:ec:c0:6d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f5e77758d46a49e3f53052a518dc76931063fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:30:65:7f:55:b1:f5:4f:01:51:8c:01:24:
13:dc:cb:04:6b:2d:08:ca:f7:b2:a2:a4:03:ed:77:
c6:d4:7a:52:78:e4:bd:85:9c:39:06:9d:c5:4d:98:
32:b8:9f:2f:77:d2:3d:a0:1b:5a:a2:75:2c:ea:75:
1b:ec:2f:75:c4:2e:54:3b:02:a2:7d:cd:3f:93:d5:
7c:c5:e2:3c:6d:b5:32:bc:ee:2a:e0:eb:f9:53:ed:
8a:31:01:07:ad:38:32:df:07:e1:85:42:67:00:60:
04:f5:3c:cf:e3:4e:ac:7c:01:d5:27:55:1e:02:15:
b6:0a:c8:86:dd:91:49:fa:b8:d9:8c:84:e1:55:e8:
5d:66:c6:a3:24:19:b9:11:22:ec:2a:20:37:41:2a:
70:31:18:18:1f:90:ec:d5:0f:23:32:03:01:27:b0:
bd:9f:f7:ca:a3:2a:3f:ec:b4:73:75:b1:93:9a:54:
e8:90:7f:2a:04:f2:0d:a8:12:07:13:0e:e6:c4:f2:
12:43:47:a4:a3:39:a6:79:b7:db:6e:2c:09:bb:ab:
db:76:01:f2:3c:b0:c1:bb:04:7f:38:1e:47:2b:0d:
67:b9:3f:4f:ee:03:f0:c6:64:60:02:7b:64:a2:79:
da:60:c3:80:9f:a3:07:39:dd:78:70:34:de:ee:71:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5E:77:75:8D:46:A4:9E:3F:53:05:2A:51:8D:C7:69:31:06:3F:B2
X509v3 Authority Key Identifier:
keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/n153dY1GpJ4_UwUqUY3HaTEGP7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.28.0/22
91.200.8.0/22
185.175.244.0/22
195.22.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:9f:a7:e8:ab:8b:00:8a:5b:94:14:f6:64:ed:be:35:e6:40:
28:0f:60:af:c7:d8:7e:03:b7:64:a2:aa:02:dd:75:b7:44:22:
28:8a:f4:70:27:49:c4:c7:03:46:a7:c9:51:e0:90:08:20:6e:
8e:5d:18:41:5a:eb:fa:21:aa:d6:43:d5:5a:c5:31:07:8f:e9:
bd:d0:4e:4a:a5:81:9e:db:c4:61:9d:42:14:d8:c3:25:98:64:
c4:32:77:97:b2:a7:c1:8e:9f:fd:38:46:13:c4:32:76:c3:67:
f8:b6:71:7e:a5:75:bf:fd:2b:e3:3e:fa:d2:1e:df:ae:89:b9:
6e:3c:7e:10:39:f5:52:8c:96:ec:31:5d:10:bf:6f:9e:33:7a:
bf:6a:b4:ed:26:d2:71:5a:3d:92:43:95:a6:df:24:de:8d:44:
37:67:14:42:84:b9:44:6f:88:d7:d1:a5:48:d6:e4:e9:f3:00:
bf:e9:f7:ca:38:82:47:24:4d:5f:eb:d5:7b:4b:6b:4b:81:f4:
b6:b9:c7:3d:01:9a:26:7b:2d:8d:c3:27:2c:33:1b:7c:79:07:
e7:3d:98:a2:d8:26:0a:d7:d6:9c:27:3a:75:5a:62:9b:cb:48:
9f:c2:bb:8d:83:3a:32:ff:10:58:db:00:d8:be:25:d0:cc:bf:
3a:d7:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net