Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/e2ra7SZuMEl8qkkfBrD8bYWazhM.roa
File: e2ra7SZuMEl8qkkfBrD8bYWazhM.roa (raw, json)
Hash identifier: /u1YY2ApTixT8z+lVFj8LhVszE9MVXTJO+7jjq0U+4g=
Subject key identifier: 7B:6A:DA:ED:26:6E:30:49:7C:AA:49:1F:06:B0:FC:6D:85:9A:CE:13
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 0195AE9D291872C385D8EBBF732AB212BE09
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/e2ra7SZuMEl8qkkfBrD8bYWazhM.roa
Signing time: Wed 19 Mar 2025 13:34:49 +0000
ROA not before: Wed 19 Mar 2025 13:34:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214089
IP address blocks: 45.94.100.0/22 maxlen: 22
45.94.100.0/24 maxlen: 24
45.94.101.0/24 maxlen: 24
45.94.103.0/24 maxlen: 24
193.178.44.0/22 maxlen: 22
193.178.44.0/24 maxlen: 24
193.178.45.0/24 maxlen: 24
193.178.46.0/24 maxlen: 24
193.178.47.0/24 maxlen: 24
2a12:b840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:9d:29:18:72:c3:85:d8:eb:bf:73:2a:b2:12:be:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Mar 19 13:34:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b6adaed266e30497caa491f06b0fc6d859ace13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:00:28:ef:85:5c:06:73:85:42:42:c8:43:
bd:a7:80:97:46:71:39:3f:ad:da:ba:0e:ca:19:00:
2c:1c:c8:6c:be:ee:1c:1f:ea:23:fd:4b:31:74:a6:
cd:c8:99:1c:36:ee:a4:b1:aa:ab:69:f4:69:4a:22:
37:39:c8:83:e0:23:4b:84:2b:35:49:52:09:ef:50:
3e:7c:0c:33:b8:a8:05:31:63:55:f4:7a:d6:16:0b:
01:b2:c4:41:6f:be:cc:27:ed:a6:df:24:7a:08:eb:
df:bb:38:37:ec:13:7a:ec:25:26:af:b5:a5:3a:88:
be:3e:9d:9a:e8:08:b3:1e:b1:03:d2:9c:56:89:f4:
26:9d:c8:25:57:72:57:9e:40:0b:4c:5d:00:7f:63:
5e:59:18:d4:64:e2:93:5e:f4:97:c2:2f:9a:7c:a6:
6c:b6:18:16:a3:3d:8d:bc:ed:4b:d3:92:c9:ca:12:
ad:ac:df:95:2c:46:0e:0d:aa:fe:93:67:53:38:3c:
ad:b7:67:04:b6:03:67:74:90:93:d5:5c:ff:85:54:
7d:f8:38:7d:57:68:2e:ad:75:8c:79:20:7b:90:4c:
6c:8c:72:5d:36:35:8a:0f:ab:29:6c:30:bf:de:b5:
76:cf:96:4d:cf:f5:27:f5:5b:c5:ab:31:07:11:12:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6A:DA:ED:26:6E:30:49:7C:AA:49:1F:06:B0:FC:6D:85:9A:CE:13
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/e2ra7SZuMEl8qkkfBrD8bYWazhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.100.0/22
193.178.44.0/22
IPv6:
2a12:b840::/32
Signature Algorithm: sha256WithRSAEncryption
40:e9:9a:fd:b5:96:57:be:3d:4f:6e:d1:e4:93:9a:95:ca:cf:
26:9d:61:e3:9a:22:a7:be:1b:14:5b:19:ff:a2:be:16:be:7b:
eb:75:33:08:4b:d9:6d:12:dd:80:45:e8:7d:2d:53:23:d6:a2:
f9:fa:94:09:68:26:da:d2:b6:b2:bc:91:e4:97:cb:dd:bb:94:
89:8e:09:cf:0b:5d:ec:d1:80:7c:62:c0:e9:66:41:3c:df:61:
c7:58:16:5e:07:5e:3e:91:5d:96:00:e9:1b:db:47:08:e5:51:
dc:70:fa:ca:e2:e6:4f:63:fd:f3:81:72:78:fe:9b:27:9e:ec:
91:7b:6b:8b:99:94:64:9b:56:33:87:c2:24:9a:ee:af:d1:8b:
3a:fa:30:0a:cd:03:85:84:a0:44:20:7a:f4:7f:f9:a1:da:53:
31:76:e9:2d:fe:4b:a9:52:74:17:cc:73:95:7b:a1:f8:8a:cf:
fc:d0:ac:38:d1:e2:f0:b1:3d:05:91:c3:00:78:e3:c6:2f:65:
05:8c:e0:12:91:8e:07:37:f9:a1:f7:bf:5b:11:ae:67:63:31:
19:13:49:b3:91:03:4d:ca:e1:f0:62:e5:0e:ff:6a:3d:02:3d:
7e:3b:b0:b0:88:38:9f:5b:9b:d3:ed:a8:ff:04:6b:00:30:8e:
0d:25:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net