Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/XWgrA6JE6hMs-fYR5JSr732MBIw.roa
File: XWgrA6JE6hMs-fYR5JSr732MBIw.roa (raw, json)
Hash identifier: +T0dpzBRYum3dH9uf73tvrJYycbYVgdyC2zBV2vtA1Q=
Subject key identifier: 5D:68:2B:03:A2:44:EA:13:2C:F9:F6:11:E4:94:AB:EF:7D:8C:04:8C
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 019427B5D780FAADB955F73BA22B2D3F3D09
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/XWgrA6JE6hMs-fYR5JSr732MBIw.roa
Signing time: Thu 02 Jan 2025 15:50:16 +0000
ROA not before: Thu 02 Jan 2025 15:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201850
IP address blocks: 45.136.142.0/23 maxlen: 23
45.136.142.0/24 maxlen: 24
45.136.143.0/24 maxlen: 24
185.154.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d7:80:fa:ad:b9:55:f7:3b:a2:2b:2d:3f:3d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d682b03a244ea132cf9f611e494abef7d8c048c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:38:9e:e8:43:a2:3d:73:ab:19:ca:5d:6e:
b0:ec:8b:1f:26:18:88:84:5e:99:aa:b0:d9:81:4f:
9c:92:06:90:0a:fe:8d:b5:36:31:49:31:95:98:da:
19:99:b1:44:ed:ca:af:cf:4b:57:55:40:27:de:33:
39:19:05:05:06:90:10:4e:aa:ad:5f:84:6b:b6:e1:
c3:24:a9:44:e1:03:ed:2d:55:5f:f1:36:3c:a0:3d:
be:1d:b2:b6:44:7e:11:b1:84:4b:f5:b2:97:d8:2e:
8e:22:ae:ee:d0:85:47:59:dc:c9:30:f0:a6:f4:b1:
43:97:62:76:80:c2:95:5b:0b:58:6b:c7:25:db:da:
fe:72:ae:c9:84:cf:81:30:d1:d6:9e:0b:44:f2:31:
25:99:4e:5d:2c:35:3f:1b:fa:1d:3d:fb:38:42:d3:
49:da:47:35:04:09:82:ca:df:69:3d:8a:2f:42:cc:
23:4d:71:c4:63:c5:dc:0d:82:44:95:4c:73:c0:9a:
66:e9:d3:23:09:fc:af:41:3e:c2:c0:f5:60:e2:85:
4d:57:3f:87:b8:16:22:59:70:ae:0d:9c:2e:2d:c6:
36:17:27:a4:10:c7:51:09:9e:d4:76:bd:1c:d0:e0:
de:2e:b9:49:ff:86:29:e7:8a:8d:08:3f:2e:1a:a5:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:2B:03:A2:44:EA:13:2C:F9:F6:11:E4:94:AB:EF:7D:8C:04:8C
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/XWgrA6JE6hMs-fYR5JSr732MBIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.142.0/23
185.154.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:69:b9:72:b0:b8:7a:78:6e:f6:d9:9f:2b:00:ed:a7:b4:33:
f9:02:be:b6:79:6c:64:42:d0:ae:1b:98:c7:60:08:09:cf:ee:
54:6c:a9:bf:f2:84:8f:62:44:27:c4:44:1c:6a:86:4f:49:06:
52:27:d6:99:2c:bd:ef:29:17:d6:0b:49:b0:e2:af:50:40:16:
20:84:ed:14:c8:5b:ea:c0:f7:f0:9a:cd:7d:6a:5e:3b:5f:a7:
dc:2d:83:de:c2:28:a5:8a:83:7a:3f:9d:0e:d2:b4:6c:bd:64:
29:84:9a:1c:c2:1e:77:c3:de:ae:0a:1c:fe:8f:6f:d7:11:9f:
68:6b:05:1b:ff:b0:ad:66:7c:1a:0c:ef:d9:71:a7:bb:1a:5a:
8b:10:ee:8c:6c:ff:1c:cb:1e:f7:16:c4:b0:0e:32:ef:25:4d:
e5:95:1d:3f:ce:23:34:76:25:ac:eb:a2:5e:3c:79:41:e2:08:
5a:bf:97:04:db:02:68:e1:5f:8e:e1:26:f2:85:55:ae:54:a1:
6e:11:a5:da:44:15:3a:b0:a5:1d:17:9e:14:52:5a:84:86:c0:
ac:df:ca:29:72:a9:82:0c:a7:ae:ca:18:ef:ab:2d:92:69:17:
bb:a7:d0:cb:5c:4f:a1:70:fc:f9:82:54:b4:a7:ef:67:26:3e:
7b:ff:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net