Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/XU_IzR1XNktTavIx_nI3l6sD7WI.roa
File: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (raw, json)
Hash identifier: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=
Subject key identifier: 5D:4F:C8:CD:1D:57:36:4B:53:6A:F2:31:FE:72:37:97:AB:03:ED:62
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 01961DF140D52D3A236A81A85BA0055AB28B
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/XU_IzR1XNktTavIx_nI3l6sD7WI.roa
Signing time: Thu 10 Apr 2025 04:24:32 +0000
ROA not before: Thu 10 Apr 2025 04:24:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214063
IP address blocks: 45.12.125.0/24 maxlen: 24
45.12.127.0/24 maxlen: 24
91.232.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:f1:40:d5:2d:3a:23:6a:81:a8:5b:a0:05:5a:b2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Apr 10 04:24:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d4fc8cd1d57364b536af231fe723797ab03ed62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:c9:a2:6d:64:e9:a5:e3:d7:1f:bb:ba:37:
b4:9c:af:f7:5b:56:d8:b5:90:88:28:8d:b0:3a:d1:
db:77:36:76:43:74:43:aa:d2:a0:74:60:6d:a2:c8:
10:de:c2:80:51:4e:84:07:7a:a4:24:12:41:32:be:
59:7f:29:73:b7:ad:7a:ac:33:fb:c0:4e:ba:43:9a:
8b:42:5f:8d:c0:9c:69:89:0d:e7:f7:c3:12:57:93:
15:07:9a:20:f6:47:68:52:07:9b:07:af:ed:56:42:
f5:11:f8:2b:6b:6e:a5:48:0b:d4:44:41:20:99:8a:
2d:11:3a:d5:76:3f:7a:a0:c6:b8:f2:66:48:cd:17:
97:51:28:96:d3:8d:5a:05:06:88:ca:1f:ec:c8:cf:
a3:42:00:b0:70:d3:d7:d4:27:9f:6f:07:17:21:6f:
8e:27:96:85:89:ec:cc:9e:4a:5c:11:77:d0:08:31:
39:60:b8:e9:12:c7:b5:d8:ef:24:e3:2f:82:dd:43:
6d:68:21:57:1b:4f:e7:bf:e5:94:24:3f:18:d9:4c:
90:52:10:d4:5a:da:b6:84:22:d5:58:e5:69:33:c0:
4b:f1:02:aa:db:c6:eb:a2:13:ef:c4:21:46:7c:ea:
ab:9d:a6:d5:48:98:87:3e:78:a5:0e:05:86:f5:60:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:C8:CD:1D:57:36:4B:53:6A:F2:31:FE:72:37:97:AB:03:ED:62
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/XU_IzR1XNktTavIx_nI3l6sD7WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.125.0/24
45.12.127.0/24
91.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
05:21:b6:24:47:a0:52:a3:13:fc:a6:77:c4:ab:10:b0:6a:2a:
81:a3:07:a1:70:dd:c3:e3:29:b1:15:44:6c:19:97:2d:c2:14:
70:57:9a:88:11:53:08:66:5e:d6:8f:f8:00:8c:41:27:64:75:
9a:5c:3d:18:35:e2:c3:d8:b5:6b:2d:bb:a1:58:c5:da:89:62:
62:6f:da:3f:38:e2:c1:c9:a9:87:10:9b:2a:94:c2:62:64:d7:
db:93:1a:bc:6a:08:8f:d6:5e:40:fd:2d:a0:17:6e:e8:28:f6:
4d:57:0f:3f:3b:b4:aa:3f:4b:4b:e2:f3:b3:da:4a:08:40:9e:
66:3e:c8:d6:ff:af:a1:8a:64:10:c5:61:fa:76:7c:f6:1d:b9:
a9:74:8d:af:6a:07:85:74:a3:4b:6f:7c:03:3c:85:e7:a4:3c:
a9:20:93:74:43:d7:32:12:b4:4b:d1:2e:fd:ed:0a:f4:96:eb:
7c:1f:83:52:fd:b6:55:06:40:c1:b4:8e:a8:01:9b:a7:34:28:
4c:f2:05:ed:86:28:f7:2c:7e:28:5e:f4:6f:35:2e:c9:b6:b6:
39:2a:0e:72:3a:3e:90:91:0b:d0:a5:18:16:18:1e:e9:48:e9:
5e:8b:95:db:ae:10:f6:ec:df:a0:93:e5:c9:01:b8:78:94:df:
cb:38:2f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net