Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/qKIz6NW658QiWYOFcDWwBberXPk.roa
File: qKIz6NW658QiWYOFcDWwBberXPk.roa (raw, json)
Hash identifier: XrH4aIQQINYqHfRuibGZ0Zr0PYKUQ4mNWHvnArdnsa0=
Subject key identifier: A8:A2:33:E8:D5:BA:E7:C4:22:59:83:85:70:35:B0:05:B7:AB:5C:F9
Certificate issuer: /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial: 019426D9861BB7621D13760FC9A1AE52B1C6
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/qKIz6NW658QiWYOFcDWwBberXPk.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209322
IP address blocks: 45.67.76.0/24 maxlen: 24
45.67.77.0/24 maxlen: 24
45.67.78.0/24 maxlen: 24
45.67.79.0/24 maxlen: 24
2a07:3c80::/40 maxlen: 40
2a07:3c80:200::/40 maxlen: 40
2a07:3c80:400::/40 maxlen: 40
2a07:3c80:600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:86:1b:b7:62:1d:13:76:0f:c9:a1:ae:52:b1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8a233e8d5bae7c4225983857035b005b7ab5cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:27:3f:bd:c6:85:10:b6:ce:9c:84:45:aa:
6e:08:41:a1:cc:63:5c:23:74:9b:2e:3a:b2:08:c5:
11:c8:af:38:12:ce:9c:d4:d0:c8:55:86:76:a3:7c:
3f:6b:ef:9a:91:9d:aa:96:ea:af:89:7a:02:67:3a:
8f:cf:d1:a2:26:e6:f2:84:bb:34:87:71:8a:f2:6f:
49:a2:65:55:57:f9:f4:c1:29:ea:ec:6a:a4:05:8f:
60:0b:ee:63:97:2b:a8:b9:96:d4:30:7f:23:f0:41:
60:43:45:ad:ee:30:f4:c6:5c:f4:64:6f:34:4a:67:
e6:fa:ae:b8:e3:21:f4:2f:af:e7:33:df:7d:76:f2:
6a:00:63:07:27:6c:18:0c:f7:bc:ea:3d:f0:a7:de:
03:11:7a:75:7d:a8:3b:aa:58:b0:9e:08:ef:da:a1:
93:61:86:6b:c8:80:11:52:62:e1:73:87:af:58:30:
82:5f:02:3d:17:50:41:71:10:88:5e:8c:88:34:f4:
b7:58:4b:b8:15:94:3c:74:de:82:aa:37:c8:3e:26:
42:32:af:19:ec:1e:f0:64:23:15:c0:4e:f5:17:46:
bc:8c:05:35:41:5f:82:e0:56:2a:c9:90:f4:45:8f:
2e:9b:50:65:5d:b9:8a:d4:9d:67:07:94:dd:bb:99:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:33:E8:D5:BA:E7:C4:22:59:83:85:70:35:B0:05:B7:AB:5C:F9
X509v3 Authority Key Identifier:
keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/qKIz6NW658QiWYOFcDWwBberXPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.76.0/22
IPv6:
2a07:3c80::/40
2a07:3c80:200::/40
2a07:3c80:400::/40
2a07:3c80:600::/40
Signature Algorithm: sha256WithRSAEncryption
73:f3:bd:c0:63:1d:9f:85:e3:78:23:d8:32:91:ab:4b:e4:ab:
40:15:dc:1f:07:79:aa:c7:82:38:46:2c:98:55:69:f6:9c:f2:
ed:92:9f:ef:5e:87:b2:50:69:68:57:ad:36:b7:d5:f4:fc:47:
dc:8e:49:02:1c:2a:f3:1e:37:a2:4e:0c:51:7f:73:2a:2a:cb:
ca:c5:09:c6:24:4d:3a:d0:e6:a4:8f:73:b7:74:1f:51:14:95:
14:ee:96:12:6b:c2:7f:ea:8c:c0:cb:ab:f6:31:57:ff:1c:85:
ad:8d:bb:17:fa:c0:46:53:da:b4:8b:46:fd:e1:0e:69:9e:1b:
47:40:04:88:64:60:22:1d:5e:87:d9:e8:b4:26:35:90:f9:45:
c0:a9:05:c3:91:24:a1:18:5f:61:f0:de:fd:09:16:26:68:97:
b3:e7:91:19:87:6a:5b:58:c7:b5:51:4b:0d:24:12:f3:ee:dc:
08:8f:95:4a:c5:46:44:13:a0:b7:b1:c8:91:d4:c0:47:5c:6c:
57:98:81:50:87:3d:94:e0:2a:58:fc:2a:ae:e5:67:08:aa:0b:
15:b9:99:70:b3:46:a3:5e:87:b9:e2:1b:52:01:22:1d:3f:50:
2c:d2:d9:93:e9:76:22:94:27:e2:50:ac:41:02:59:2f:57:a1:
eb:33:05:64
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZQm2YYbt2IdE3YPyaGuUrHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzM3ZWFkNmI5YjkzZGQwZDc1OGFiZjlkN2IzMDMwNzJh
OTllYjkwHhcNMjUwMTAyMTE0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGEyMzNlOGQ1YmFlN2M0MjI1OTgzODU3MDM1YjAwNWI3YWI1Y2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+EnP73GhRC2zpyERapuCEGhzGNc
I3SbLjqyCMURyK84Es6c1NDIVYZ2o3w/a++akZ2qluqviXoCZzqPz9GiJubyhLs0
h3GK8m9JomVVV/n0wSnq7GqkBY9gC+5jlyuouZbUMH8j8EFgQ0Wt7jD0xlz0ZG80
Smfm+q644yH0L6/nM999dvJqAGMHJ2wYDPe86j3wp94DEXp1fag7qliwngjv2qGT
YYZryIARUmLhc4evWDCCXwI9F1BBcRCIXoyINPS3WEu4FZQ8dN6CqjfIPiZCMq8Z
7B7wZCMVwE71F0a8jAU1QV+C4FYqyZD0RY8um1BlXbmK1J1nB5Tdu5kT9wIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFKiiM+jVuufEIlmDhXA1sAW3q1z5MB8GA1UdIwQY
MBaAFOszfq1rm5PdDXWKv517MDByqZ65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDct
OWNhMTAwNDI4ZjEwLzEvcUtJejZOVzY1OFFpV1lPRmNEV3dCYmVyWFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iOGMzMGMtODJkOS00NmJiLWJiMDctOWNhMTAwNDI4ZjEw
LzEvNnpOLXJXdWJrOTBOZFlxX25Yc3dNSEtwbnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAMBAIAATAGAwQCLUNMMCYE
AgACMCADBgAqBzyAAAMGACoHPIACAwYAKgc8gAQDBgAqBzyABjANBgkqhkiG9w0B
AQsFAAOCAQEAc/O9wGMdn4XjeCPYMpGrS+SrQBXcHwd5qseCOEYsmFVp9pzy7ZKf
716HslBpaFetNrfV9PxH3I5JAhwq8x43ok4MUX9zKirLysUJxiRNOtDmpI9zt3Qf
URSVFO6WEmvCf+qMwMur9jFX/xyFrY27F/rARlPatItG/eEOaZ4bR0AEiGRgIh1e
h9notCY1kPlFwKkFw5EkoRhfYfDe/QkWJmiXs+eRGYdqW1jHtVFLDSQS8+7cCI+V
SsVGRBOgt7HIkdTAR1xsV5iBUIc9lOAqWPwqruVnCKoLFbmZcLNGo16HueIbUgEi
HT9QLNLZk+l2IpQn4lCsQQJZL1eh6zMFZA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net