Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/vIkXi13duBYnSxCNLM5pa4ja5hM.roa
File: vIkXi13duBYnSxCNLM5pa4ja5hM.roa (raw, json)
Hash identifier: AZhzU1QaQiAy9JJdY72EUz3F5Q2aGcy4usPFgiaTx0w=
Subject key identifier: BC:89:17:8B:5D:DD:B8:16:27:4B:10:8D:2C:CE:69:6B:88:DA:E6:13
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 019421B21200A7180F7A47E41025A45C91AE
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/vIkXi13duBYnSxCNLM5pa4ja5hM.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208759
IP address blocks: 45.85.236.0/24 maxlen: 24
45.85.237.0/24 maxlen: 24
45.85.238.0/24 maxlen: 24
45.85.239.0/24 maxlen: 24
2a0e:c884:3e80::/44 maxlen: 48
2a0e:c885::/44 maxlen: 44
2a0e:c886::/44 maxlen: 44
2a0e:c887::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:12:00:a7:18:0f:7a:47:e4:10:25:a4:5c:91:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc89178b5dddb816274b108d2cce696b88dae613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:51:62:2d:67:c3:86:e9:1d:5b:fb:05:c9:
c8:b4:b2:84:c6:38:0e:ef:83:27:d4:88:81:44:fa:
2c:bc:3a:c8:87:25:23:81:70:8e:1e:2e:17:19:a5:
da:76:56:7c:0f:42:87:b5:de:14:34:27:73:be:de:
3c:e7:91:05:04:92:9b:e6:e4:d9:79:79:ed:f1:0b:
ad:6c:d2:20:f7:09:90:b0:3c:4e:70:db:09:a3:ec:
95:5a:05:41:3c:a9:e6:86:08:51:2e:8f:05:10:cd:
e6:07:f9:cf:37:05:51:b8:4e:8f:64:02:cc:ec:61:
82:70:57:8a:90:a2:94:a7:58:f4:59:62:05:fa:c9:
14:3a:59:d9:ca:03:c5:16:96:09:7f:fa:c6:49:ce:
3e:91:2e:0b:da:b8:6a:be:91:98:6e:d3:46:54:32:
e8:61:8a:20:a4:7a:e8:78:0c:a7:44:0d:9d:8c:ac:
09:5b:dd:b8:8e:0f:5d:81:eb:2b:02:12:b7:a5:40:
7d:c6:32:75:78:11:1d:bc:e3:b3:11:40:ef:dc:1c:
ee:43:7f:2e:51:05:66:c7:9a:ef:38:28:aa:9d:a5:
d1:7b:59:5d:9c:fd:10:51:fd:ba:1d:85:cf:34:31:
bb:59:ca:3a:4e:2e:7f:0a:c5:7d:43:dc:54:9d:1d:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:17:8B:5D:DD:B8:16:27:4B:10:8D:2C:CE:69:6B:88:DA:E6:13
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/vIkXi13duBYnSxCNLM5pa4ja5hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.236.0/22
IPv6:
2a0e:c884:3e80::/44
2a0e:c885::/44
2a0e:c886::/44
2a0e:c887::/44
Signature Algorithm: sha256WithRSAEncryption
2c:4a:84:30:14:96:17:a7:00:72:a7:ff:a9:00:b1:1c:df:1a:
a3:3b:4e:c3:f0:c4:bc:e8:fe:e6:aa:1b:90:84:51:c4:b2:72:
d6:8d:95:fe:b3:32:0a:4e:fd:55:03:55:00:4d:79:dc:3b:95:
68:ae:39:1e:4d:98:5a:26:01:a0:42:9f:fd:1e:a6:70:46:e2:
3f:82:a6:79:a0:8c:1a:86:9d:cb:69:90:ec:d5:ab:11:c8:2d:
c3:1b:59:17:ab:57:5a:f0:19:ee:b9:eb:86:04:59:98:45:d8:
da:a4:6b:b1:2b:10:30:86:a4:a2:ba:ec:dd:6b:41:51:1d:64:
a0:34:45:f6:41:06:0d:8c:48:a6:44:07:49:46:8d:c5:16:a9:
15:60:27:c4:22:cf:c2:c3:c4:b1:50:ef:d0:e3:55:49:b8:d8:
a2:e3:c8:bb:da:ae:14:5a:6a:5b:06:28:45:e5:5d:fe:a8:58:
f7:26:21:b6:6a:71:c9:4e:fc:27:a1:57:d3:ac:02:d0:34:64:
cf:89:9e:ef:fe:09:e8:fe:6d:52:92:fa:3d:93:14:53:4c:94:
b2:12:10:cb:9c:56:e6:00:33:ff:b6:3c:4d:ae:1c:2a:86:30:
59:03:63:60:d3:57:03:1d:2a:e6:f5:96:a9:16:5b:79:a1:97:
cd:ad:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net