Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/Cb_VZxWIl2cY2o2ZBTucsnEEWjg.roa
File: Cb_VZxWIl2cY2o2ZBTucsnEEWjg.roa (raw, json)
Hash identifier: /SsWz/hUvU9SGekEx+HWP4EztqAG6V0iTZmAGxcY5SU=
Subject key identifier: 09:BF:D5:67:15:88:97:67:18:DA:8D:99:05:3B:9C:B2:71:04:5A:38
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 01942068300764AFC1F7704D706AEBF7F74C
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/Cb_VZxWIl2cY2o2ZBTucsnEEWjg.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201714
IP address blocks: 45.85.100.0/24 maxlen: 24
185.66.4.0/22 maxlen: 24
185.66.4.0/24 maxlen: 24
185.66.5.0/24 maxlen: 24
185.66.6.0/24 maxlen: 24
185.66.7.0/24 maxlen: 24
2a03:1ea0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:30:07:64:af:c1:f7:70:4d:70:6a:eb:f7:f7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09bfd5671588976718da8d99053b9cb271045a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:c4:0d:2e:a1:8b:44:5b:2b:c0:49:fc:78:
5b:aa:f2:10:71:df:e2:2f:26:15:68:59:d5:b7:16:
2a:bf:7d:c4:41:72:e8:2d:b6:be:91:af:cb:38:da:
a7:4f:67:cd:d6:68:7f:8f:0c:ff:60:8c:81:fd:d1:
8c:47:10:cf:e0:87:f0:61:0f:8e:ff:db:f8:3d:ec:
52:d6:af:d2:65:74:02:77:49:b7:63:01:6f:af:ea:
8c:7c:ba:83:d2:ea:eb:57:49:05:15:0e:6a:ff:c6:
0d:db:d6:f2:ff:34:cc:e1:5f:e0:e8:fb:ac:8a:8f:
42:99:3c:a1:e5:74:67:60:62:70:1b:8a:de:a9:c9:
fa:f6:0f:5f:49:bf:53:f1:90:8b:1a:5d:ad:7e:3b:
a5:75:8b:cd:f4:a6:eb:2d:ba:ae:0e:a1:a2:34:c3:
2f:a3:0b:38:e8:08:22:18:b1:42:96:79:b3:e6:e0:
5d:a2:e8:8b:81:c7:2a:3b:b7:d4:83:b6:56:54:b2:
88:cb:ed:71:3b:25:7d:d4:d6:4e:86:cd:b7:7c:5f:
95:fa:19:f5:e1:07:f0:b3:f1:e0:c3:85:6f:eb:ca:
50:83:dc:83:52:52:24:fd:44:97:c3:74:3d:7b:74:
e5:e8:57:bb:9d:69:64:4c:09:0f:dd:01:f2:27:93:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BF:D5:67:15:88:97:67:18:DA:8D:99:05:3B:9C:B2:71:04:5A:38
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/Cb_VZxWIl2cY2o2ZBTucsnEEWjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.100.0/24
185.66.4.0/22
IPv6:
2a03:1ea0::/32
Signature Algorithm: sha256WithRSAEncryption
28:58:97:a4:f5:62:c4:71:a7:b5:72:9f:9a:dc:d8:34:45:ed:
ef:18:4a:f6:50:5b:e1:5d:f8:c7:04:a0:7c:cf:49:ff:98:af:
c6:cf:b7:42:db:51:10:ea:09:60:33:58:9a:25:ed:07:15:47:
e7:5a:fd:67:e8:50:61:be:dd:76:23:72:12:f0:9c:bd:db:ba:
ab:59:5a:55:5e:f9:16:3c:8b:1d:12:d4:cb:8f:9d:ff:96:dc:
ee:32:fb:de:c9:fc:74:25:6e:c7:3d:7c:92:18:73:5a:40:2d:
8e:ab:b5:df:15:cf:d4:50:5c:af:48:56:0b:13:13:4b:37:28:
1b:6a:63:70:0c:a8:20:41:ae:24:5b:42:db:2f:bc:e1:2d:ef:
23:c5:43:90:db:3f:b1:5b:ba:f2:28:49:7a:9f:22:a5:78:d7:
d0:08:80:08:12:bf:86:e0:40:b9:d3:89:72:c3:c7:12:84:44:
d2:4a:57:4c:8d:55:d9:e2:9a:44:ea:91:a1:b2:28:de:05:cd:
8e:8b:78:44:a0:91:a6:78:a3:c0:45:c0:68:82:59:d9:5d:d6:
b4:09:e8:b0:6f:e1:b6:f8:b5:cf:4a:c4:a1:bc:98:a4:17:42:
73:82:bd:c4:7c:cb:8d:d5:59:e3:85:6c:48:c1:91:da:0b:4c:
1e:15:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:20:28 2025 by rpki-client on console.sobornost.net