Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/6a60S-TRqBKotvyyPQBxdiB70Sc.roa
File: 6a60S-TRqBKotvyyPQBxdiB70Sc.roa (raw, json)
Hash identifier: 2NeGJ4f2HswIAojn272Lhr6pkTIi9fGcxUkPl+OU7Uw=
Subject key identifier: E9:AE:B4:4B:E4:D1:A8:12:A8:B6:FC:B2:3D:00:71:76:20:7B:D1:27
Certificate issuer: /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial: 01941FFA9C0E087D0DE20D733A6680D1233A
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/6a60S-TRqBKotvyyPQBxdiB70Sc.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39233
IP address blocks: 45.155.28.0/22 maxlen: 22
45.155.28.0/24 maxlen: 24
45.155.29.0/24 maxlen: 24
185.237.52.0/22 maxlen: 22
185.237.53.0/24 maxlen: 24
185.237.54.0/24 maxlen: 24
185.237.55.0/24 maxlen: 24
193.202.90.0/24 maxlen: 24
193.202.112.0/24 maxlen: 24
193.202.114.0/24 maxlen: 24
193.203.4.0/24 maxlen: 24
194.213.29.0/24 maxlen: 24
2a02:1600::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9c:0e:08:7d:0d:e2:0d:73:3a:66:80:d1:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9aeb44be4d1a812a8b6fcb23d007176207bd127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:06:41:a3:d2:ab:29:5a:4d:c5:fb:4e:c1:
3b:a8:80:4c:59:c3:c0:a2:f3:d4:b8:e3:8c:8e:4a:
37:d7:ec:cb:1b:92:d4:73:e1:8a:aa:49:87:15:e3:
de:78:07:c1:89:8c:9f:47:61:b9:92:ee:02:e4:01:
7c:65:28:93:63:cb:49:24:12:e3:ea:b0:1a:01:9b:
aa:38:dc:62:18:59:e2:ca:72:b0:40:44:55:82:f3:
9f:96:6a:31:1d:69:62:e9:b5:4f:3a:4e:7d:ca:3d:
02:a2:2d:1c:54:36:49:24:d2:f6:3b:10:e4:ed:09:
f2:66:86:ba:eb:03:ef:ef:70:d1:23:13:b2:07:d6:
41:bc:5a:3e:b0:ce:47:7b:de:5a:96:97:07:cc:52:
c0:fa:b4:5c:70:3c:8f:64:11:17:47:f0:25:6a:5f:
7c:33:44:e5:10:14:e9:60:6b:3f:2c:6f:49:73:bc:
e9:98:12:06:55:4e:83:a0:76:64:80:36:ac:21:eb:
ff:b4:63:5f:f6:1b:cc:6b:ab:14:e7:67:2b:32:94:
7f:a4:16:38:c2:4c:3c:c0:75:15:b6:2f:2f:51:69:
14:e9:70:fb:79:36:93:95:6a:cf:5b:d6:0c:c5:b0:
b9:23:c0:17:c4:18:bc:ba:08:0e:1b:45:f1:22:dd:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:B4:4B:E4:D1:A8:12:A8:B6:FC:B2:3D:00:71:76:20:7B:D1:27
X509v3 Authority Key Identifier:
keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/6a60S-TRqBKotvyyPQBxdiB70Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.28.0/22
185.237.52.0/22
193.202.90.0/24
193.202.112.0/24
193.202.114.0/24
193.203.4.0/24
194.213.29.0/24
IPv6:
2a02:1600::/29
Signature Algorithm: sha256WithRSAEncryption
32:79:fd:d9:72:75:5e:34:07:b8:54:49:33:e3:e8:73:b3:57:
c7:bf:52:2c:10:fc:ef:c8:b4:ac:b6:15:aa:42:5f:19:17:e0:
91:68:41:d9:a5:79:5b:d1:d3:70:17:d0:7c:e6:93:7a:dd:66:
01:6e:60:02:42:84:49:05:9e:64:36:fc:30:29:f3:74:66:c7:
43:b4:33:21:d7:ad:0b:ae:72:0c:ff:3b:9e:e0:10:93:08:39:
f5:09:54:08:70:99:6a:57:0a:c1:95:46:28:8d:27:75:6f:72:
8e:6f:ff:3e:7e:f7:46:77:99:14:31:bc:9d:6a:42:9e:65:c3:
8e:8e:25:15:31:32:80:05:f2:ca:7a:f4:a3:44:d0:df:32:bf:
f4:00:1d:ed:15:99:3b:77:8b:8b:79:2a:4f:aa:59:cc:9d:46:
f5:cd:d4:09:3d:7c:d6:32:56:f4:2d:0a:05:27:4b:9b:c0:57:
b6:55:dc:d8:63:1c:f2:c3:b8:33:b7:7b:6f:3e:d2:37:f8:7f:
f1:a0:67:93:c2:af:71:bf:a9:84:1e:ed:92:5a:ca:45:60:2a:
44:8a:c5:77:30:ba:1a:45:c1:40:34:0d:35:99:af:60:2d:97:
9f:b8:49:26:b7:bb:fb:06:91:bc:35:4e:c0:2c:5a:5d:27:10:
f5:cd:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net