Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/inTF6SWHroBiGHmy-0U30O5ydnA.roa
File: inTF6SWHroBiGHmy-0U30O5ydnA.roa (raw, json)
Hash identifier: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=
Subject key identifier: 8A:74:C5:E9:25:87:AE:80:62:18:79:B2:FB:45:37:D0:EE:72:76:70
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 019427B5D42AC92A44016D192DB485FA05EF
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/inTF6SWHroBiGHmy-0U30O5ydnA.roa
Signing time: Thu 02 Jan 2025 15:50:15 +0000
ROA not before: Thu 02 Jan 2025 15:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60501
IP address blocks: 45.129.160.0/22 maxlen: 22
81.16.220.0/22 maxlen: 22
2a0d:2640::/29 maxlen: 29
2a0e:4cc0::/29 maxlen: 29
2a0f:c2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d4:2a:c9:2a:44:01:6d:19:2d:b4:85:fa:05:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Jan 2 15:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a74c5e92587ae80621879b2fb4537d0ee727670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:27:5c:19:d5:d0:8c:68:31:56:c7:35:f4:
10:3d:f8:70:22:69:69:60:78:99:c2:7e:5f:f0:30:
3a:5f:d9:4c:79:d8:89:13:d7:12:be:b7:45:ef:b0:
14:6a:97:38:ee:34:96:49:a6:d2:a3:fd:5b:6c:3d:
84:23:ca:01:38:9a:c1:ef:5b:f6:3e:9e:3c:92:91:
6c:93:ba:b8:d6:bb:2f:93:76:a4:ef:f3:30:c5:97:
7f:bd:26:0c:e6:9c:31:f5:5d:77:43:7a:3c:fa:7a:
51:bc:0f:07:7a:5d:a3:7e:31:2a:bf:19:eb:81:be:
a2:2c:7c:3c:78:3d:5f:19:c4:23:62:34:df:2d:5a:
3f:82:b0:c4:be:14:94:4c:3f:e8:1c:37:ec:c7:d7:
91:bd:d8:0a:98:a9:a3:b0:27:6f:35:90:8e:0a:da:
e2:64:ad:c1:99:00:c4:d6:aa:75:26:9f:a5:02:21:
49:9d:ef:43:30:26:cd:44:73:73:08:d9:aa:83:90:
d6:23:18:ac:6d:21:42:5e:28:cc:cc:28:9b:67:50:
a2:9a:6d:50:b5:ba:7b:0e:45:32:54:b1:d0:15:4f:
92:7b:0b:d7:3f:f8:50:5c:0c:e5:2c:8e:e5:10:38:
02:42:0b:28:d8:bf:29:6c:39:b4:46:e1:11:54:d3:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:C5:E9:25:87:AE:80:62:18:79:B2:FB:45:37:D0:EE:72:76:70
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/inTF6SWHroBiGHmy-0U30O5ydnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.160.0/22
81.16.220.0/22
IPv6:
2a0d:2640::/29
2a0e:4cc0::/29
2a0f:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:6a:03:11:15:7f:0f:03:bc:a1:c7:62:de:b0:14:f7:65:bf:
ab:6d:c5:13:95:63:9c:72:0f:a4:98:b7:7b:9d:05:0e:55:21:
64:8c:23:aa:96:aa:e2:ac:de:d3:84:9a:36:9e:18:02:c8:e2:
da:5f:e3:95:e3:bf:f4:6b:18:25:fa:e7:3b:00:42:4e:a7:ae:
19:f1:10:06:9f:5e:03:3f:38:58:14:33:b9:37:61:17:49:6d:
df:2e:c5:71:dd:83:87:e9:ad:02:9f:d7:db:42:8c:8b:02:0c:
71:7d:6b:7b:11:f3:71:de:35:59:60:be:71:e4:bf:d9:75:f5:
d3:85:9a:13:9f:a0:d1:61:28:1b:4a:75:b5:de:1c:35:ee:f9:
b6:25:37:a8:ed:02:16:ac:06:79:2a:70:5b:d7:db:2f:57:be:
cb:48:1e:cf:6b:f1:b2:70:aa:85:f5:75:e0:cb:46:a9:af:46:
d5:0a:ec:a7:bb:76:cd:82:8d:49:6a:5e:a3:fb:41:2e:47:48:
ae:89:47:14:4a:1a:ea:5a:22:49:f7:55:1c:de:ec:1c:0b:3c:
87:bb:bd:85:90:df:18:21:ba:12:2f:80:fa:cb:42:a8:98:f4:
30:68:c1:bc:56:a0:60:27:5d:a4:19:f2:c5:96:2f:8e:b8:cb:
53:24:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net