Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/ffILj9IjNg6C8l0EmvWVQGIules.roa
File: ffILj9IjNg6C8l0EmvWVQGIules.roa (raw, json)
Hash identifier: 2yNsIvmaeDyakVCS4RtNiFkTumvlxMJmMDP3cNZiXd4=
Subject key identifier: 7D:F2:0B:8F:D2:23:36:0E:82:F2:5D:04:9A:F5:95:40:62:2E:95:EB
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01942746416370B475D4640915F471D56AE9
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/ffILj9IjNg6C8l0EmvWVQGIules.roa
Signing time: Thu 02 Jan 2025 13:48:23 +0000
ROA not before: Thu 02 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 45.82.14.0/24 maxlen: 24
45.82.15.0/24 maxlen: 24
45.91.67.0/24 maxlen: 24
91.200.148.0/24 maxlen: 24
91.200.150.0/24 maxlen: 24
91.200.151.0/24 maxlen: 24
185.142.99.0/24 maxlen: 24
194.187.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:41:63:70:b4:75:d4:64:09:15:f4:71:d5:6a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7df20b8fd223360e82f25d049af59540622e95eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:53:9e:d0:02:54:d9:bb:64:0d:a2:04:ec:
d3:0e:ec:1e:4e:e8:49:bd:44:c8:02:c0:66:8b:96:
73:7f:f5:63:5c:da:5f:81:6f:be:10:41:66:79:c7:
0d:38:e4:a4:ac:c5:fc:5a:ca:bf:e3:3e:cc:1a:1f:
05:22:ce:15:b0:6a:6b:79:1c:18:dd:17:25:58:1e:
71:7c:9b:5d:ee:ba:b5:4f:78:18:87:e6:96:b8:5c:
40:f2:70:c3:3d:e0:b5:77:04:7d:a4:5a:1a:8d:6d:
d8:24:cb:74:01:73:6a:e7:1d:e5:c1:d2:36:56:b8:
67:28:92:ce:c1:b5:08:19:3f:b0:45:fd:64:f6:24:
75:aa:2a:3a:1c:be:c8:25:5f:aa:54:a8:c0:bd:1a:
3b:7f:0e:42:bf:5f:20:17:bb:8c:8b:49:68:c2:97:
b7:ed:71:9d:e6:be:4f:0f:31:3f:c1:cf:31:6e:88:
07:66:f5:5d:8b:17:50:12:7d:8d:e2:78:3f:cf:0e:
29:85:a7:46:89:ca:a2:30:56:5f:d0:dc:47:07:48:
e5:01:c8:86:a3:e5:0c:39:c1:c3:11:33:c3:af:80:
be:c7:e8:8d:e9:55:3b:df:a2:9e:81:cc:c4:23:19:
ba:cd:73:13:00:1d:9b:cd:43:2f:ef:74:c8:75:66:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:0B:8F:D2:23:36:0E:82:F2:5D:04:9A:F5:95:40:62:2E:95:EB
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/ffILj9IjNg6C8l0EmvWVQGIules.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/23
45.91.67.0/24
91.200.148.0/24
91.200.150.0/23
185.142.99.0/24
194.187.122.0/24
Signature Algorithm: sha256WithRSAEncryption
89:62:cd:30:3e:6c:b7:1c:75:3d:81:a1:a7:9f:99:ec:04:e9:
7f:c8:2f:c8:af:2d:d8:24:4d:81:d1:db:e9:59:66:f8:64:64:
04:8a:85:e1:ad:3e:4a:47:9e:f3:08:3e:d1:2b:70:54:91:06:
2f:b3:21:0f:e4:cf:66:5d:5f:88:37:48:ab:ce:3a:20:65:d1:
c0:d2:9e:87:ca:f0:35:42:4a:c8:a2:7e:1c:dc:ac:a5:08:25:
18:c1:53:f9:01:25:0c:85:60:5a:f2:7c:f1:3a:8a:f5:1e:55:
0f:7a:02:08:a0:78:b6:93:a8:85:f7:a7:0e:78:71:59:80:58:
47:f0:0a:2b:ac:98:92:3a:67:30:2e:03:17:17:61:7a:8f:e4:
43:e7:84:4c:85:fc:8f:d7:d7:b3:15:e4:9d:2f:fa:ad:26:32:
80:8d:b7:af:c6:c1:32:98:dc:5b:0c:be:1d:52:34:d7:21:96:
e4:83:8a:73:bf:7f:48:d2:62:05:25:d0:2c:9a:2e:5a:91:a8:
1d:0e:2d:b2:4b:f0:8a:b6:19:9f:fb:32:c1:e4:05:7c:97:61:
74:52:e6:f8:af:c3:77:51:69:ca:58:4e:ec:56:65:b2:a2:ce:
c0:89:4c:4c:f0:80:03:7b:af:80:08:d5:eb:94:8f:86:bf:d3:
82:6a:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net