Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/xATH_4DImK8fd5hc84k_g1PniNs.roa
File: xATH_4DImK8fd5hc84k_g1PniNs.roa (raw, json)
Hash identifier: WRPuSYa86Ir4oWe89J036B9Z8F9HC0m1Vigt9eZnloE=
Subject key identifier: C4:04:C7:FF:80:C8:98:AF:1F:77:98:5C:F3:89:3F:83:53:E7:88:DB
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01942746420771B7130E5683AE8605A42448
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/xATH_4DImK8fd5hc84k_g1PniNs.roa
Signing time: Thu 02 Jan 2025 13:48:23 +0000
ROA not before: Thu 02 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48716
IP address blocks: 45.82.14.0/24 maxlen: 24
91.200.148.0/24 maxlen: 24
91.200.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:42:07:71:b7:13:0e:56:83:ae:86:05:a4:24:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c404c7ff80c898af1f77985cf3893f8353e788db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:86:16:9b:38:61:1e:a7:30:12:b5:ad:84:
9b:0e:af:c1:68:94:48:58:de:db:2b:fe:fa:ea:50:
03:0f:b5:c1:e1:5e:84:ad:2c:69:67:df:54:37:32:
33:7d:53:13:fe:06:16:2b:bf:b7:ce:db:30:b6:ba:
26:8d:30:ff:27:87:7a:e8:2d:84:f8:fc:08:ef:2a:
b6:10:92:00:02:1d:d3:4c:fc:07:6f:8b:2c:73:56:
29:88:fc:ca:4c:d9:4e:c2:26:b0:1a:5f:c0:93:a3:
19:2e:9e:56:78:5f:ec:85:68:ee:c8:5b:46:dc:11:
5a:7f:0b:93:ae:17:0e:90:a5:47:50:b5:15:64:b8:
e5:1c:33:04:c9:31:6c:44:39:76:5c:3f:c7:ea:75:
6a:28:d0:e3:2a:4e:01:10:c7:3c:1f:cc:23:2d:bf:
7d:71:6d:29:a2:57:e9:58:bb:a2:98:e8:4d:4e:ed:
2e:9c:3e:9d:ee:a2:fd:9a:40:15:39:af:6d:27:d6:
02:3f:eb:14:06:3c:f8:2b:9c:a4:4c:59:1a:34:8c:
48:00:d1:0f:c4:45:c6:1d:e8:75:52:52:e8:f0:bb:
46:69:e7:b8:cc:29:f6:58:78:35:cd:f3:e2:96:22:
71:4f:ca:2f:59:c7:f0:01:c3:cc:79:19:a8:f5:03:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:C7:FF:80:C8:98:AF:1F:77:98:5C:F3:89:3F:83:53:E7:88:DB
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/xATH_4DImK8fd5hc84k_g1PniNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/24
91.200.148.0/24
91.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
51:33:ac:d4:de:f5:59:7a:1b:d3:31:4a:6d:ba:ba:f4:23:5f:
79:c3:4f:e5:c5:5a:2e:b0:50:c0:4b:67:3e:8e:64:78:67:4e:
60:88:21:f9:1a:ed:ce:44:be:f5:e9:01:18:70:7e:08:c2:78:
38:ea:f4:1a:ca:6c:d6:72:37:c8:39:c2:85:90:2f:ce:e4:31:
08:55:4f:45:b0:b7:60:f0:04:b2:e4:41:c4:18:b4:82:e2:66:
19:58:4e:65:98:0e:8e:1c:31:f4:f0:35:eb:7e:f5:00:4f:46:
1b:95:2d:92:71:cd:81:a3:26:54:68:7a:9e:69:a1:cb:c2:f6:
73:c3:73:80:1a:18:85:fc:26:4c:37:0c:d3:da:73:3d:87:1d:
53:00:7d:c0:90:2f:09:ac:95:ef:31:05:ed:66:ca:fd:93:6b:
46:62:4a:5d:84:76:45:1e:17:fd:5e:08:cc:37:97:6c:eb:b1:
74:f5:37:ad:e7:4e:61:e4:e2:db:b4:2b:09:15:7e:dc:b9:ed:
f1:cb:70:41:16:d3:64:dc:e9:89:91:35:08:57:1a:4c:de:04:
f5:78:4d:22:91:f5:2c:08:63:35:80:b9:9a:18:6e:02:0b:1c:
fa:b6:0d:2d:b6:5c:31:4c:43:1b:10:12:71:3e:96:5d:07:60:
fa:f6:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net