Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa
File: ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa (raw, json)
Hash identifier: a8BYVN01+QzzRYrawK1TfdRTG9b4FCkotHQL9E9gZ7Q=
Subject key identifier: 89:F5:8A:FE:23:7B:03:2F:10:06:9E:A5:F8:20:A7:6B:84:31:CB:C6
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 019428230F30C0AE4977F4465D5EEB4CE32D
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa
Signing time: Thu 02 Jan 2025 17:49:33 +0000
ROA not before: Thu 02 Jan 2025 17:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42148
IP address blocks: 45.94.116.0/22 maxlen: 22
45.94.116.0/24 maxlen: 24
45.94.117.0/24 maxlen: 24
45.94.118.0/24 maxlen: 24
45.94.119.0/24 maxlen: 24
45.134.64.0/22 maxlen: 22
45.134.64.0/24 maxlen: 24
45.134.65.0/24 maxlen: 24
45.134.66.0/24 maxlen: 24
45.134.67.0/24 maxlen: 24
185.150.152.0/22 maxlen: 22
2a07:7180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:0f:30:c0:ae:49:77:f4:46:5d:5e:eb:4c:e3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Jan 2 17:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89f58afe237b032f10069ea5f820a76b8431cbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:0a:bc:27:72:01:0c:0f:54:79:a9:08:a7:
c2:c8:01:40:8e:92:f4:2e:4c:f8:c9:f1:b8:64:00:
b5:64:38:5e:c8:7b:42:8a:d0:6b:b7:9f:0b:60:11:
7a:b1:ce:d2:d0:d4:05:d0:64:9f:7d:82:5e:2c:9c:
e7:f1:4d:e7:86:4f:91:73:de:66:83:b9:c2:6b:c2:
39:3b:0b:14:50:4b:a2:85:14:bf:95:92:47:52:42:
2a:92:6c:6b:f0:62:62:4e:33:88:e5:c3:ab:b7:e8:
1f:43:58:d2:c0:70:30:b5:ec:fa:5c:1d:5b:fb:6a:
d7:49:11:93:c9:2e:77:79:04:66:c5:25:ec:91:3c:
bd:6a:16:5f:02:7a:41:93:27:04:c0:50:4a:e9:02:
2c:b7:2c:2e:a7:49:fb:1f:a1:64:bc:04:f0:ee:d5:
35:5e:bb:40:42:a0:b2:37:f3:e8:3b:6b:17:e8:c0:
68:1c:f7:4d:63:a2:77:12:ce:e9:1d:90:70:31:46:
c6:b3:dd:ba:ad:2d:6e:2c:4d:14:f2:22:36:c4:f9:
93:9f:27:98:af:bd:87:1f:29:05:ba:f4:a6:b0:01:
9f:df:5e:82:9a:fe:01:d5:7e:62:c0:22:fa:46:7e:
b8:7c:6d:c3:a8:66:98:60:9c:ff:24:4a:55:93:1e:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F5:8A:FE:23:7B:03:2F:10:06:9E:A5:F8:20:A7:6B:84:31:CB:C6
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.116.0/22
45.134.64.0/22
185.150.152.0/22
IPv6:
2a07:7180::/29
Signature Algorithm: sha256WithRSAEncryption
9f:82:f1:54:24:0f:02:16:9b:1c:9d:88:b2:d9:2f:57:f0:4b:
3a:b4:9a:f1:cf:fb:d7:b4:4a:10:d4:31:c7:5a:24:7f:bf:07:
b7:00:95:c1:ad:7f:ee:48:f1:2a:61:be:15:ab:6d:4c:81:b9:
5c:7e:ab:36:aa:7e:1e:ba:e1:15:36:4f:1c:54:34:25:ed:12:
23:8f:da:6d:2a:62:4a:26:f0:c2:96:ac:49:48:9d:df:56:b2:
26:c7:67:e8:99:c0:2a:b0:f6:a7:74:0f:37:c5:1d:c1:9a:31:
c7:58:e6:68:60:90:0f:91:c0:b0:ed:ef:dc:50:e0:1a:54:bf:
8e:cd:d2:6a:39:07:1b:83:ee:0f:98:eb:8e:70:b7:88:8a:8d:
8b:38:85:36:fd:04:6d:22:e7:5b:bd:b0:32:de:9d:cd:b3:2d:
36:72:cc:78:04:35:c6:e3:bb:7e:41:42:5f:f6:3b:56:13:c1:
57:4a:9d:f9:05:16:26:5a:34:42:f8:99:6d:23:2a:26:85:bc:
23:f7:e7:dd:a5:63:98:6e:a2:70:13:91:41:9a:cc:b6:d6:c0:
52:7e:6c:7e:da:2d:10:66:ab:d9:4c:6a:11:40:5e:db:cf:45:
a8:fa:d0:a7:ad:f4:6d:b8:ca:66:27:5f:9f:b6:a2:e7:1e:a5:
5a:cc:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:55 2025 by rpki-client on console.sobornost.net