Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/GtNraMQppy3EFfJr2WpwYRpuyqw.roa
File: GtNraMQppy3EFfJr2WpwYRpuyqw.roa (raw, json)
Hash identifier: ZOPCzFa3rkstS0Tm6mKcSn5upo7zWRj6OtOmolhU5Ck=
Subject key identifier: 1A:D3:6B:68:C4:29:A7:2D:C4:15:F2:6B:D9:6A:70:61:1A:6E:CA:AC
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 019425FD94E90067ACA432DAF7EF11C89692
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/GtNraMQppy3EFfJr2WpwYRpuyqw.roa
Signing time: Thu 02 Jan 2025 07:49:23 +0000
ROA not before: Thu 02 Jan 2025 07:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216003
IP address blocks: 45.80.85.0/24 maxlen: 24
45.80.86.0/24 maxlen: 24
45.80.87.0/24 maxlen: 24
177.8.68.0/24 maxlen: 24
185.246.196.0/22 maxlen: 24
185.246.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:94:e9:00:67:ac:a4:32:da:f7:ef:11:c8:96:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ad36b68c429a72dc415f26bd96a70611a6ecaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:d1:23:2d:34:87:32:ae:43:70:b1:52:79:
62:28:cf:f6:9c:81:49:34:d8:f9:b6:7e:35:ec:db:
40:9d:e8:f2:ec:b4:2f:3d:95:20:57:8f:e6:fa:b0:
79:d3:aa:43:58:40:3b:86:66:46:b7:46:a1:fc:e0:
f8:a5:ba:ce:3d:b5:57:dc:eb:62:69:fb:80:e4:61:
0f:97:42:12:45:0e:fb:3b:2c:07:2e:a0:6a:41:86:
7a:44:ac:f4:9e:1e:97:fc:f7:07:20:2a:f8:bb:d5:
94:b3:db:7d:68:36:e4:a5:af:04:d6:e6:f1:f2:21:
80:7c:6c:e5:d8:f5:ea:6a:bd:65:5f:8d:1f:42:0c:
09:5f:a2:63:77:3c:de:26:f3:c7:75:91:91:12:16:
fa:19:3e:2b:52:90:88:bd:c0:4e:bd:c5:93:fb:ce:
66:67:5d:6c:6b:99:c2:d1:d7:01:a2:b3:ba:ef:d8:
f2:05:dd:54:b8:51:4e:86:fb:b7:d6:3a:df:76:49:
c6:fd:34:da:b0:96:e9:79:6a:0e:22:e5:8d:53:e6:
0c:5b:2e:93:f0:27:86:68:86:a9:18:91:b2:95:b8:
1a:66:be:e4:c9:54:b0:c1:a2:5e:a6:3b:c1:e3:1d:
44:66:f0:62:29:10:cd:0c:7d:17:72:f1:91:1c:97:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D3:6B:68:C4:29:A7:2D:C4:15:F2:6B:D9:6A:70:61:1A:6E:CA:AC
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/GtNraMQppy3EFfJr2WpwYRpuyqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.85.0-45.80.87.255
177.8.68.0/24
185.246.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:7d:88:4b:51:e3:49:16:ee:c0:c3:60:66:77:5a:98:31:87:
79:21:d0:68:b6:16:ed:94:4d:bf:72:62:1a:e9:58:55:8f:64:
f1:d0:34:c9:d4:b3:ec:1e:b8:e1:db:43:5c:95:bc:15:31:98:
79:8d:45:3b:5b:36:87:67:6e:cb:8d:1a:09:d1:34:4c:b4:de:
5b:f2:a7:f7:f7:44:ed:15:80:74:fc:c0:5f:9d:12:63:ff:8f:
fc:82:71:71:ef:c6:70:e4:9b:23:0f:88:68:ad:f3:f9:71:bd:
32:38:43:9b:50:77:0d:4a:8b:ae:ae:cc:d6:ea:e1:25:7e:85:
b1:6b:8a:60:7b:23:7e:21:9f:69:1a:0d:62:da:a3:93:dd:04:
0f:aa:7c:de:0b:1b:62:01:a6:36:9a:4a:25:36:b8:cc:fc:85:
05:7b:54:7e:c7:4e:79:73:1a:fe:09:5e:67:fd:5a:25:ea:e6:
be:ce:07:62:f5:13:8d:43:9a:ed:73:91:b6:6d:bf:99:4f:12:
5f:07:9a:15:e3:68:2b:f3:f2:90:06:98:39:24:1e:8e:6f:69:
70:0d:e0:03:9f:74:9c:e0:dc:49:03:ee:c5:2b:a4:8f:b8:52:
fa:37:8e:0c:3d:4c:e4:ed:1e:3a:43:b0:fd:f7:76:28:e1:fd:
01:43:21:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net