Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/feNkY-eOvUtQhFV1S0I9PI2G3Wo.roa
File: feNkY-eOvUtQhFV1S0I9PI2G3Wo.roa (raw, json)
Hash identifier: quazYAaXLI8cU37aqjZ8mSDoCr4Pfth6qoKGu80WRHI=
Subject key identifier: 7D:E3:64:63:E7:8E:BD:4B:50:84:55:75:4B:42:3D:3C:8D:86:DD:6A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3AD4D4B06F54879AA27C44D06292A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/feNkY-eOvUtQhFV1S0I9PI2G3Wo.roa
Signing time: Thu 02 Jan 2025 15:47:54 +0000
ROA not before: Thu 02 Jan 2025 15:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 45.95.241.0/24 maxlen: 24
45.131.4.0/22 maxlen: 22
45.131.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ad:4d:4b:06:f5:48:79:aa:27:c4:4d:06:29:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7de36463e78ebd4b508455754b423d3c8d86dd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:e8:45:cb:db:b9:50:b5:08:b2:f0:6e:70:
3a:7b:df:68:b1:92:7b:45:3a:6c:b4:fb:c8:f3:12:
77:9b:31:1b:e6:9e:30:2d:ac:77:20:a3:4b:a8:2f:
d5:d0:b8:e2:b1:33:89:57:f2:99:c6:a6:2f:e9:b9:
2f:f0:a3:2b:6d:b4:fd:fb:85:72:30:4c:d5:e9:1d:
75:3a:66:98:73:ff:ba:0b:eb:aa:30:ff:43:4a:bb:
cc:7e:c0:14:3b:3b:78:ff:36:56:1f:fa:61:89:ca:
34:99:9d:f6:cf:3c:f6:c3:14:b4:cd:4c:3c:5b:82:
02:33:db:9e:0e:6b:71:d4:f3:ad:5f:bb:9e:e6:d6:
ff:dd:f0:b6:45:c3:6c:56:08:0f:46:c7:ad:bb:c3:
37:52:a5:85:45:75:09:bf:24:73:05:b5:d0:a7:35:
aa:36:1f:6c:64:89:fc:c7:40:26:27:80:44:f8:4c:
a9:75:b3:6a:11:14:99:6c:40:00:56:98:20:2b:22:
16:7c:04:b7:1e:b2:df:49:08:ce:94:12:bf:be:53:
a2:c2:e3:0a:b5:f9:85:f8:62:72:53:79:ac:e8:b6:
3e:1f:0e:05:d8:34:d3:41:8d:63:86:c3:ec:19:cf:
29:3b:a6:31:74:49:aa:ef:d0:da:a0:8e:c5:fc:e3:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E3:64:63:E7:8E:BD:4B:50:84:55:75:4B:42:3D:3C:8D:86:DD:6A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/feNkY-eOvUtQhFV1S0I9PI2G3Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.241.0/24
45.131.4.0/22
45.131.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:78:16:49:ba:7f:3e:3b:e2:95:63:e5:f1:25:d6:ca:bc:87:
86:1f:df:28:38:62:ba:88:87:a4:45:53:b6:eb:0c:1b:45:c9:
d1:ef:57:e5:6a:ef:b0:be:d6:6c:c2:87:d7:84:f3:17:13:c8:
2e:62:0f:fa:0a:d0:eb:c3:3d:41:fe:9e:b2:6b:c8:f2:0f:85:
e4:06:c5:8f:91:da:dd:ca:5a:11:c3:18:72:38:f6:97:51:c5:
08:50:e3:81:28:41:6c:15:aa:38:e6:ae:f1:ea:77:d1:25:4a:
1c:14:76:65:c2:1b:84:dd:ae:90:53:75:6f:07:4b:fc:bc:03:
7b:bc:01:3a:78:2e:9f:b5:d8:90:0b:85:a4:43:51:38:d1:24:
d8:a5:84:14:6a:00:98:6a:06:98:56:9d:39:e6:94:4c:62:23:
d3:ce:ee:14:bd:11:29:5f:ef:d4:db:b8:5a:df:35:b4:53:fc:
36:7a:59:a0:e3:61:cc:10:7d:b6:9a:63:c9:0c:44:ce:74:59:
30:c3:cc:87:3c:dd:61:0e:9b:8b:d9:ec:d5:4f:ab:96:1a:d0:
61:bd:14:9f:c7:04:9a:e1:cb:9d:0c:b7:9f:1b:cc:aa:24:2b:
91:ef:42:26:5b:8f:1e:ab:51:f8:cb:02:99:ef:66:7e:7d:bc:
7a:85:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:19 2025 by rpki-client on console.sobornost.net