Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa
File: avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa (raw, json)
Hash identifier: bTeIBIORZ+OkOR+FlYPPZ72JZn7A9KzpF9twp78JJjo=
Subject key identifier: 6A:F4:F1:07:8C:59:27:B5:5D:57:92:36:01:51:4F:D1:50:DD:6D:3E
Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial: 019426D9802028D0C6B7909E5B701689C9E2
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa
Signing time: Thu 02 Jan 2025 11:49:35 +0000
ROA not before: Thu 02 Jan 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208897
IP address blocks: 45.15.132.0/22 maxlen: 22
45.15.132.0/24 maxlen: 24
45.15.133.0/24 maxlen: 24
45.15.134.0/24 maxlen: 24
45.15.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:80:20:28:d0:c6:b7:90:9e:5b:70:16:89:c9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6af4f1078c5927b55d57923601514fd150dd6d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:66:51:2d:89:4e:00:2d:70:40:d3:ae:2e:e2:
ae:cd:ed:16:56:5d:78:4b:ca:52:35:52:4c:56:cc:
b1:9e:8c:55:fb:73:f6:d4:24:95:2a:0c:d5:c6:96:
ee:f1:a8:91:46:ec:0f:b2:df:c1:42:03:e7:bd:22:
b8:7f:24:bd:ef:5b:9d:2a:3e:a2:10:e3:dc:bf:31:
d4:e0:92:fd:fe:59:c3:09:bd:1f:0a:a3:50:02:96:
aa:ae:9b:82:f1:5e:58:8d:b5:a3:2c:d7:24:3b:40:
30:56:92:04:07:e5:34:71:88:b5:12:7a:e5:eb:24:
1c:ee:d6:64:fa:ce:2f:cc:81:16:14:b0:c6:b9:fd:
8f:97:c7:77:c1:77:30:2e:3a:f0:c9:cf:e4:1c:ba:
f9:9f:e2:cb:d5:9b:a5:de:61:3e:b9:10:bc:0a:78:
6a:21:89:e4:db:6b:24:cf:42:e0:07:db:dd:99:62:
9e:77:f6:69:f8:d7:51:a5:9a:8f:1e:70:3d:18:fc:
d7:1b:be:59:cb:08:e1:2b:ae:a5:91:83:31:7d:b1:
d4:f8:97:20:ac:63:2b:19:a0:b5:d2:6e:5a:59:d9:
ae:34:ef:99:89:2b:d5:0a:a3:3b:ca:e2:4e:e4:ea:
33:46:d0:ff:51:e0:76:d1:70:2c:38:45:60:a7:32:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F4:F1:07:8C:59:27:B5:5D:57:92:36:01:51:4F:D1:50:DD:6D:3E
X509v3 Authority Key Identifier:
keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.132.0/22
Signature Algorithm: sha256WithRSAEncryption
98:40:11:6b:57:70:43:00:b7:fb:71:e2:dc:cf:40:1f:98:8a:
6b:5a:cf:50:31:d5:09:58:60:00:7a:e5:04:e1:ad:5f:e3:a8:
b3:d5:69:97:e7:6b:06:23:77:57:a6:45:d5:5c:70:55:55:e7:
f9:b9:32:d6:52:d3:5c:ee:df:78:c1:ea:fa:c1:da:fb:bc:35:
83:3f:c2:74:c0:44:44:67:83:e1:cd:c0:30:64:11:c3:12:8b:
1b:f3:9e:ba:91:ed:4e:2e:69:74:c5:4d:6e:7f:b2:6d:3a:d1:
a9:b2:d0:6a:6d:62:f0:97:f5:8c:03:74:9f:57:d2:b3:78:6a:
15:77:7a:13:b6:5a:6a:35:f6:85:39:b2:d3:f6:9b:5d:1e:5d:
6a:ef:0f:f0:7c:d9:f0:10:20:09:fd:d3:0d:7f:d2:a6:9c:38:
f3:18:c8:26:23:da:6d:95:37:b6:d9:c7:77:fd:e6:dd:54:71:
36:31:05:4c:48:e8:ef:b8:ce:16:a7:8a:a6:f1:07:31:a8:62:
b6:f8:ff:f0:6d:4f:af:d1:9e:84:b8:1c:50:2e:49:69:ec:8d:
b9:9a:23:49:55:9a:1c:e3:55:46:f8:e1:25:27:26:3c:1a:d7:
c0:ba:70:32:bd:36:c4:fd:82:04:99:c1:2b:52:97:6a:9c:08:
59:a8:e7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net