Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa
File: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (raw, json)
Hash identifier: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=
Subject key identifier: 50:59:5A:40:21:49:E0:22:E1:3A:E8:88:AA:88:6E:FC:05:4A:A4:B6
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 019420686E3EE121D08583698ABCAFA3E914
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200851
IP address blocks: 45.11.160.0/22 maxlen: 22
45.66.244.0/22 maxlen: 24
84.38.255.0/24 maxlen: 24
185.93.244.0/22 maxlen: 24
2a04:23c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6e:3e:e1:21:d0:85:83:69:8a:bc:af:a3:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50595a402149e022e13ae888aa886efc054aa4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:2d:86:61:0b:63:94:b0:22:b0:48:06:41:
bc:0f:21:fd:6f:2a:9c:2c:37:a1:cf:53:57:33:03:
8c:ea:1c:f5:9b:58:d8:e9:f0:cd:ef:b9:96:f3:50:
49:72:fc:cb:74:f6:b0:a8:36:f1:b2:c6:0d:81:3b:
40:9f:b6:8e:9b:a2:19:c4:6b:03:49:d7:04:94:98:
e3:08:1f:b6:5b:3a:93:b5:0c:83:b7:fe:91:29:cf:
71:87:da:e9:e9:52:10:fc:00:89:21:bf:27:6f:53:
ab:db:d0:92:bf:96:8f:f6:61:47:20:2e:ee:bd:bd:
f9:b7:41:aa:95:75:65:aa:31:ea:53:da:72:8e:27:
a8:8a:26:74:1d:58:94:9f:34:7c:b3:ff:13:95:5b:
cd:40:30:4a:2e:69:4a:8a:d6:18:46:c1:79:e7:ef:
70:ac:39:6c:71:4b:5a:2f:a1:c9:8b:1e:39:81:ef:
c5:0b:3f:f4:ef:c4:bc:9a:14:ae:4d:9e:ac:bf:93:
fe:f9:97:f3:65:b2:65:ea:1b:f4:2d:8d:13:d0:39:
36:c9:25:67:96:eb:ba:12:f5:36:9a:42:08:f7:a7:
0e:6b:ab:46:7b:fc:92:58:23:f7:53:08:84:a7:ce:
01:7d:56:92:5f:d1:97:cf:5b:82:ed:8a:91:83:d5:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:59:5A:40:21:49:E0:22:E1:3A:E8:88:AA:88:6E:FC:05:4A:A4:B6
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.160.0/22
45.66.244.0/22
84.38.255.0/24
185.93.244.0/22
IPv6:
2a04:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:c9:d5:14:d1:b1:fd:08:5c:2c:6c:11:6f:b7:0d:04:c1:ab:
39:8a:3e:64:ba:fe:41:91:bb:6c:8c:1b:65:ac:44:0c:ec:95:
46:c4:85:d8:4d:0b:5e:ee:34:43:82:47:e1:c0:a0:2f:8e:66:
6f:96:fc:65:b1:f8:b5:45:a0:6e:3f:b9:f4:d6:d3:2e:ff:7a:
3a:cd:d0:37:e0:01:39:d5:05:0b:db:89:61:6c:7b:ed:f8:a9:
28:8f:0c:3b:b0:d0:41:55:57:e2:5e:8a:93:15:bd:f6:29:34:
04:89:4f:e5:ca:38:48:d6:c4:5c:75:7e:30:d4:83:5a:47:de:
6a:d1:13:7b:d2:16:2e:c0:86:59:39:9b:bb:1d:ea:c5:f9:6e:
5d:4b:cc:09:83:8d:ed:9a:a3:16:8e:5b:cd:23:1b:9a:af:59:
74:ca:55:ae:b1:d2:bf:57:06:c2:b5:a6:6f:01:6f:00:53:9e:
4e:0f:c2:5c:9c:73:31:a2:2b:dc:21:46:99:7b:fd:62:2c:bb:
74:bf:9a:21:1b:a3:3e:d3:e1:70:06:a1:de:52:bb:9f:76:c0:
cf:da:fe:d0:6d:fa:e6:a5:86:eb:fe:8c:2c:9d:22:61:e1:3d:
4d:46:15:3b:80:c0:af:f3:28:de:fe:75:32:49:a1:1c:e0:47:
c2:cd:98:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net