Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/T4c9dXjox_IR0w4Sp6j6uIsrN8w.roa
File: T4c9dXjox_IR0w4Sp6j6uIsrN8w.roa (raw, json)
Hash identifier: t8vtLXPqqc+zrZrNOi4D5mdJAEBF1Ira9/CrglSSLyQ=
Subject key identifier: 4F:87:3D:75:78:E8:C7:F2:11:D3:0E:12:A7:A8:FA:B8:8B:2B:37:CC
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019623D435C22FAF265631A579CC53EFC709
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/T4c9dXjox_IR0w4Sp6j6uIsrN8w.roa
Signing time: Fri 11 Apr 2025 07:50:32 +0000
ROA not before: Fri 11 Apr 2025 07:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 45.14.112.0/24 maxlen: 24
45.95.184.0/24 maxlen: 24
147.189.134.0/24 maxlen: 24
147.189.141.0/24 maxlen: 24
185.127.95.0/24 maxlen: 24
193.8.173.0/24 maxlen: 24
2a0e:c80:1::/48 maxlen: 48
2a0e:c80:2::/48 maxlen: 48
2a0e:3840:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:d4:35:c2:2f:af:26:56:31:a5:79:cc:53:ef:c7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Apr 11 07:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f873d7578e8c7f211d30e12a7a8fab88b2b37cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:cc:ab:b7:d9:ae:1e:3b:22:41:43:84:8c:
7b:ea:5a:38:89:65:b2:7a:7c:0e:a7:a6:10:c8:9a:
66:20:9d:95:4d:ba:50:0c:9b:de:9c:ac:31:8b:90:
5d:93:f0:c6:ce:9c:82:56:54:8d:5b:5d:2d:85:c4:
71:ca:3b:dd:26:cd:ec:51:45:d1:5b:31:9c:12:04:
fc:47:73:f6:c8:5f:15:be:e4:bf:aa:40:e8:26:ec:
43:d2:35:2b:9f:e5:9e:d3:c7:a6:d3:ff:c4:20:67:
e1:5a:ba:81:a5:20:4e:04:56:9f:54:c0:33:a7:b3:
10:6a:b7:aa:a5:e4:3a:8a:75:69:3d:6e:b2:ae:f4:
36:fd:af:a2:14:ef:a9:b2:b2:3e:42:61:eb:c7:94:
fa:f5:ae:ae:d3:70:0a:27:8f:72:8e:15:ae:5c:0c:
e2:ff:3f:a3:6b:04:ba:2f:e4:26:36:1e:24:b4:8b:
8f:07:94:fc:85:69:c5:a7:9c:04:9f:2c:96:ea:0d:
e0:ca:5b:d8:29:72:40:22:0f:cb:6e:00:2c:09:6c:
ab:c0:56:a1:76:25:65:11:7f:5c:ad:99:79:8a:8a:
aa:39:4c:3e:33:7e:8b:a4:d2:d3:10:51:8b:60:47:
2a:df:8d:f0:95:64:69:c4:01:58:9b:95:8d:d6:29:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:87:3D:75:78:E8:C7:F2:11:D3:0E:12:A7:A8:FA:B8:8B:2B:37:CC
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/T4c9dXjox_IR0w4Sp6j6uIsrN8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.112.0/24
45.95.184.0/24
147.189.134.0/24
147.189.141.0/24
185.127.95.0/24
193.8.173.0/24
IPv6:
2a0e:c80:1::-2a0e:c80:2:ffff:ffff:ffff:ffff:ffff
2a0e:3840:1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:e6:6e:d6:e7:6f:e1:e9:cf:2b:21:5e:ff:63:2c:b7:4d:83:
81:60:8b:5c:65:e9:b9:e4:7d:c3:8a:e2:cf:bb:d5:d5:38:b5:
80:20:23:6f:fa:49:04:91:ed:2b:e6:8f:4c:9f:17:7e:1f:13:
c0:31:53:e7:34:5d:bb:ad:d1:9a:3d:2d:6a:25:b5:5d:10:f1:
0e:de:c9:79:f0:69:00:ba:c5:b4:a8:98:69:31:e4:b2:6e:e9:
be:3d:12:39:17:6a:dc:ee:e1:3b:0c:02:f0:81:33:89:7f:56:
28:5a:d3:8a:f4:89:f0:47:d8:db:55:bf:f6:2d:25:4c:59:0c:
b4:a7:c6:87:77:e0:a1:61:1b:57:04:81:61:0e:c5:88:bf:21:
ee:ee:f0:d6:cf:d0:65:b5:95:9b:f8:a8:fb:21:8e:63:a9:1c:
38:2e:7d:b4:f6:a0:04:53:4a:49:c3:38:72:72:4c:00:b4:fe:
c2:58:06:0c:fe:69:a6:21:0f:3c:6f:c3:bf:d9:27:62:05:4a:
2e:09:8f:ae:ec:98:1d:de:ea:82:cd:b8:9e:b6:39:d6:46:8a:
20:e3:a7:63:a7:bd:4d:f6:ac:83:ca:ee:57:63:89:61:a4:10:
78:d6:77:d6:3e:1c:d5:71:c7:15:16:d4:ee:75:7f:03:6c:91:
bf:32:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net