Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/boA84qDGPvl_6lnRHS_XzFFeG1U.roa
File: boA84qDGPvl_6lnRHS_XzFFeG1U.roa (raw, json)
Hash identifier: mKsVzVhgFbQeWFBOvfQBj+TUfoFvXQ5IHepTPgh5BKs=
Subject key identifier: 6E:80:3C:E2:A0:C6:3E:F9:7F:EA:59:D1:1D:2F:D7:CC:51:5E:1B:55
Certificate issuer: /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial: 01942747FB623FC53C0AF638B18960BE0E82
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/boA84qDGPvl_6lnRHS_XzFFeG1U.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200697
IP address blocks: 45.134.240.0/24 maxlen: 24
45.134.241.0/24 maxlen: 24
45.134.242.0/24 maxlen: 24
45.134.243.0/24 maxlen: 24
2a07:4680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fb:62:3f:c5:3c:0a:f6:38:b1:89:60:be:0e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e803ce2a0c63ef97fea59d11d2fd7cc515e1b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:31:60:5c:28:89:7a:97:e0:b0:11:fe:5c:
26:f0:b3:68:dd:04:bb:94:b2:69:8f:ae:46:78:a2:
88:fa:fd:fd:52:16:da:06:a1:07:0c:30:a5:63:9e:
73:60:9b:b4:b8:a5:e0:6f:35:88:06:fc:dc:5e:1c:
50:c1:30:a5:9d:a2:ef:b3:49:2f:48:53:1b:a0:5e:
96:92:a6:4d:aa:2f:53:1a:b5:fb:c0:7c:91:ca:12:
6c:ec:a9:98:6d:19:b8:1e:ce:db:22:ab:5c:83:70:
2b:95:8f:0d:8b:d7:17:d5:95:ba:15:10:0f:63:35:
28:05:cb:f7:9b:1b:cc:dc:46:62:80:0f:2e:ff:01:
87:b3:6c:e9:e3:4c:95:6b:79:57:0d:49:0b:c5:54:
fd:f3:36:83:9f:66:a5:3a:aa:ee:3d:b3:07:44:2c:
65:fe:d7:93:73:8b:12:cd:09:ae:75:6e:92:9e:27:
74:f6:27:1c:a7:c4:dd:4f:43:c5:51:7b:d1:1b:10:
81:8d:71:a0:d3:88:93:e3:86:91:51:a3:d6:b5:73:
85:b9:2d:82:bb:8c:24:cb:d7:ff:5d:67:0c:8e:c5:
27:6e:fb:e8:84:10:10:3b:75:4f:2b:c9:89:f9:34:
6a:ed:e1:c9:e1:8c:78:b6:70:d2:f8:1e:70:e9:10:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:80:3C:E2:A0:C6:3E:F9:7F:EA:59:D1:1D:2F:D7:CC:51:5E:1B:55
X509v3 Authority Key Identifier:
keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/boA84qDGPvl_6lnRHS_XzFFeG1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.240.0/22
IPv6:
2a07:4680::/32
Signature Algorithm: sha256WithRSAEncryption
83:e4:58:18:80:68:e8:dc:dd:c3:17:e9:4e:14:5e:5e:10:7a:
bd:44:f3:63:b1:eb:c3:a4:4a:3e:2e:9f:26:b1:cd:f2:cd:75:
19:41:49:85:92:82:47:50:33:e1:0a:c5:65:52:12:d9:f0:52:
24:75:db:09:79:e5:18:28:68:b9:5b:12:72:59:bb:64:13:49:
7c:34:86:74:ec:80:d3:81:ca:c1:3d:ce:36:c1:ca:d9:ef:b0:
2b:41:9e:58:66:63:11:f8:14:dc:1c:f7:e1:d2:c7:df:b4:81:
3b:36:91:24:81:f9:80:b3:87:9b:41:e1:03:19:61:f8:f3:48:
3f:f8:0c:8e:5f:14:15:04:57:c9:60:bf:1c:f2:20:0a:80:fe:
27:5e:6e:71:55:a4:cb:7f:6a:dc:45:4e:23:e9:e9:50:ae:a6:
06:f1:51:0c:14:04:70:68:78:a3:61:6a:0b:1f:2a:21:3f:fe:
1a:e9:fa:92:cf:a7:82:ad:26:2b:cc:63:d1:dc:0b:ac:38:cd:
2b:6c:c3:97:e3:3b:9f:b1:25:8f:b0:87:4a:f6:c2:6e:aa:82:
e5:ba:16:01:94:2d:07:e4:5b:22:ed:12:7b:a3:d3:c4:a6:35:
06:43:f5:cf:b6:ee:36:af:d1:bc:f9:dc:d0:73:12:59:88:a2:
a3:c4:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net