Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa
File: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (raw, json)
Hash identifier: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=
Subject key identifier: 4F:05:00:98:4C:10:C4:ED:A3:79:E1:34:20:6E:E7:39:4B:81:45:4F
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 01942068443B32EA2DBF5D89910481D7841F
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197395
IP address blocks: 45.10.132.0/22 maxlen: 22
46.243.96.0/21 maxlen: 23
185.119.188.0/22 maxlen: 22
2a04:e580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:44:3b:32:ea:2d:bf:5d:89:91:04:81:d7:84:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f0500984c10c4eda379e134206ee7394b81454f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:16:24:e7:d9:d5:b3:7b:87:a0:a7:f5:76:
36:d7:64:3e:a7:73:2a:e9:7f:56:f9:43:c7:ce:64:
25:2d:40:54:57:5a:ae:4d:7b:ce:89:3b:e8:e3:65:
88:e2:ac:eb:de:82:4b:3c:5e:47:67:38:90:5c:77:
43:fb:1c:46:ae:ea:62:4c:54:82:50:2a:db:c5:1a:
f0:ec:02:b6:e6:d5:c5:2e:8a:75:97:c5:60:6d:46:
50:da:28:b5:7d:dc:ef:0f:83:5b:56:6b:fc:ef:a2:
ae:ab:ea:84:e6:31:27:10:97:67:46:52:f4:16:09:
6d:a1:72:78:9f:bc:90:ef:e7:13:55:cb:3c:f1:b4:
f3:1e:25:2d:8b:19:ee:94:b6:36:93:b8:a6:3e:75:
60:e9:de:3a:cf:9d:5c:b4:3f:52:92:09:a6:f2:e0:
a7:7a:a4:a5:dc:18:a2:3e:2e:41:8b:fc:90:b6:37:
0e:aa:74:8b:ef:ee:36:a1:11:c3:3c:db:51:0a:69:
03:39:e3:bf:fd:ad:47:5f:62:7b:50:1b:8b:6a:0f:
f9:6e:6a:25:19:18:a4:3c:d1:79:3c:91:1c:1f:ed:
89:ed:f8:d0:cb:91:a4:a0:57:1d:c9:15:47:98:0f:
f7:f3:36:e4:7a:7c:c5:ed:5d:d5:c0:25:10:d4:c6:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:05:00:98:4C:10:C4:ED:A3:79:E1:34:20:6E:E7:39:4B:81:45:4F
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.132.0/22
46.243.96.0/21
185.119.188.0/22
IPv6:
2a04:e580::/29
Signature Algorithm: sha256WithRSAEncryption
54:86:3a:b7:bb:69:fb:8e:3b:c1:14:0b:70:44:3f:a2:7b:97:
ea:da:c2:c2:a2:a7:04:cc:42:2a:1a:c4:67:7f:56:d1:5a:30:
e2:f1:61:1e:50:38:cd:f9:5c:98:fe:4c:c2:92:5e:c9:74:e6:
b2:b1:00:1c:cf:e1:32:43:f0:8a:27:c0:fd:17:fd:0a:29:75:
6f:c2:6e:11:d4:be:dd:3a:83:85:7b:9b:37:fc:99:98:35:3c:
6d:9e:03:9d:a4:c6:42:0e:64:74:16:6a:ff:28:fb:e6:16:85:
da:fd:7d:e4:43:73:db:25:34:52:02:55:20:6d:91:6d:97:fd:
b4:fc:18:92:6c:13:ff:34:2d:59:54:6f:dd:75:14:3a:62:c4:
d3:27:63:5e:00:3c:7b:9c:d1:13:aa:27:6e:bd:b2:32:52:6f:
cf:e2:07:a2:2d:d6:1a:69:fc:e0:33:8b:75:c5:1d:6e:dc:28:
ec:ca:26:ae:ba:51:b3:97:94:b4:c1:be:91:bd:db:69:ed:81:
2a:b3:3a:54:6d:d9:ee:61:2d:16:6c:4a:df:45:96:0b:72:ae:
05:43:c6:f4:14:fb:cb:20:29:70:90:ad:1a:1b:b9:31:96:a0:
9f:ea:1f:8b:d5:e7:24:40:90:a5:90:90:d0:3f:48:e1:ce:53:
cd:06:e1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net