Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/uBEfWIHV8Ysgcm0WjhvS8qePbzM.roa
File: uBEfWIHV8Ysgcm0WjhvS8qePbzM.roa (raw, json)
Hash identifier: g7l6o1+EK67dHVtVxC57iUhjiYlLOzwY9EalaarNVkg=
Subject key identifier: B8:11:1F:58:81:D5:F1:8B:20:72:6D:16:8E:1B:D2:F2:A7:8F:6F:33
Certificate issuer: /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial: 01942445654FD07C99ED803FCBA14E6D9E35
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/uBEfWIHV8Ysgcm0WjhvS8qePbzM.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35131
IP address blocks: 45.145.24.0/22 maxlen: 22
45.145.24.0/23 maxlen: 23
45.145.24.0/24 maxlen: 24
45.145.25.0/24 maxlen: 24
45.145.26.0/23 maxlen: 23
45.145.26.0/24 maxlen: 24
45.145.27.0/24 maxlen: 24
2a00:e280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:65:4f:d0:7c:99:ed:80:3f:cb:a1:4e:6d:9e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8111f5881d5f18b20726d168e1bd2f2a78f6f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:20:c8:8b:40:17:91:4e:95:e7:41:d9:01:
10:5c:cc:1d:5b:17:3c:30:74:15:fe:d6:e7:6d:7c:
b2:c6:f2:9d:1c:d3:15:ef:d9:a4:fb:dc:a2:70:c3:
d1:c6:a4:2c:52:92:fb:6b:06:bd:a5:20:c0:39:c5:
fd:c6:63:8c:ee:a2:ef:c2:10:f2:1d:a6:40:74:3d:
55:88:85:34:d0:0e:63:8c:85:8e:cb:45:d5:80:cc:
f5:d3:1a:56:0e:ea:26:0a:7d:63:ce:e5:13:e1:fc:
b3:c7:65:9e:5c:ee:01:f4:bb:02:d5:fd:ad:30:3d:
7d:f5:3b:44:02:b8:e3:16:99:3d:91:f5:5b:0e:d1:
a5:af:4d:fa:63:7f:f1:c1:fb:3e:5c:c7:fc:f1:bc:
9b:f0:35:cf:89:0c:c8:61:c0:2b:10:c2:55:db:82:
17:af:5f:b9:49:8a:d8:b4:e3:23:08:70:41:40:10:
de:3b:2d:49:7f:0e:3f:00:08:c1:5c:7e:e6:d7:ae:
d0:c9:1e:88:d9:b5:bd:1a:d2:c2:e3:f9:bb:c3:c5:
59:b8:7e:1c:5b:bf:f7:ea:58:ac:41:1a:4d:6c:dd:
4e:14:fc:03:ca:9b:56:18:02:4c:a9:03:2d:03:70:
de:c3:eb:5d:21:f4:67:b5:3e:08:fb:cd:9f:00:9a:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:1F:58:81:D5:F1:8B:20:72:6D:16:8E:1B:D2:F2:A7:8F:6F:33
X509v3 Authority Key Identifier:
keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/uBEfWIHV8Ysgcm0WjhvS8qePbzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.24.0/22
IPv6:
2a00:e280::/32
Signature Algorithm: sha256WithRSAEncryption
39:a0:17:cd:25:6b:40:b7:9d:90:ed:02:35:fe:92:12:40:5b:
69:bf:62:51:d5:d1:7f:7f:22:63:f7:d7:2e:b6:28:0f:ba:eb:
9a:dc:ba:16:76:14:6e:cb:b7:7d:2f:ea:d3:71:8f:df:ba:5d:
2b:5f:18:1e:a3:63:59:7a:9f:cb:c1:26:2c:b3:54:9d:e0:32:
7f:5d:0e:7e:1a:6c:97:87:28:09:9d:6f:98:96:0c:69:bc:b9:
44:6e:b1:30:75:6f:e7:da:49:c9:70:87:47:64:ac:d1:ec:60:
ad:d4:b1:a6:52:69:06:a0:0c:7e:b0:6c:0c:6f:c4:5d:e4:16:
af:82:70:9c:a4:bf:02:aa:cf:11:dd:d8:2b:62:62:9c:2a:db:
8b:6f:67:ee:62:1d:01:94:96:d3:18:b4:c7:19:c2:5e:d8:ad:
f7:a6:a8:be:17:38:fd:e1:e1:bf:42:18:e1:bf:e1:4b:a6:3a:
28:10:9c:e4:38:bd:ab:66:c9:e1:09:f2:88:11:b2:a6:d3:6c:
61:02:15:55:ec:f8:8f:5e:c5:1e:4e:74:48:5b:0f:9b:ab:e0:
82:30:51:c6:56:a1:25:20:17:8a:1d:ae:2a:47:fe:90:84:67:
8d:5e:5a:64:e1:61:03:ce:a3:6a:31:3a:78:ca:b8:79:f8:7b:
d9:95:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net