Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/1-Smkp6h6clLOytvsZTW7IYXWdA0.roa
File: 1-Smkp6h6clLOytvsZTW7IYXWdA0.roa (raw, json)
Hash identifier: ea3w2mh66EAHkh2gpMZxmUqrFjNif7rFJ3Ux5dT6P3Y=
Subject key identifier: F9:29:A4:A7:A8:7A:72:52:CE:CA:DB:EC:65:35:BB:21:85:D6:74:0D
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 019421B254BB2AA2D137B9FD39FFF105E99C
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/1-Smkp6h6clLOytvsZTW7IYXWdA0.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39896
IP address blocks: 45.159.108.0/22 maxlen: 22
45.159.108.0/24 maxlen: 24
45.159.109.0/24 maxlen: 24
45.159.110.0/24 maxlen: 24
45.159.111.0/24 maxlen: 24
146.255.24.0/21 maxlen: 21
193.150.128.0/20 maxlen: 20
193.150.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:54:bb:2a:a2:d1:37:b9:fd:39:ff:f1:05:e9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f929a4a7a87a7252cecadbec6535bb2185d6740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:70:4b:5b:8e:54:98:a7:86:0d:8f:0b:f3:
1f:ef:76:fc:2f:cd:4a:91:07:0b:41:3b:45:19:4b:
7f:bb:cd:aa:f8:85:50:38:11:ef:15:fe:04:d7:30:
3e:fc:97:86:37:b7:d3:0d:d1:6c:b5:11:b2:34:d1:
f9:2d:19:36:68:0b:79:88:07:f6:1f:22:95:9a:44:
50:3a:f5:d0:11:e4:64:ac:95:f2:8d:90:2c:d3:17:
25:69:ca:4b:2f:e5:32:dc:e2:a5:63:e2:6c:04:77:
12:eb:7a:cc:95:1e:1b:a5:8b:62:2d:6a:c2:30:6b:
d6:2d:69:f1:a4:69:53:90:d5:a3:2e:da:eb:a2:47:
fc:0f:58:c1:e0:08:bd:8b:80:6b:66:ec:d2:e6:83:
47:7c:84:18:32:ea:0d:60:9c:63:99:86:83:3c:0c:
cf:d8:a6:14:6a:18:18:04:ef:ef:06:86:76:25:70:
04:7b:f1:aa:da:31:8e:3b:d1:10:93:c9:9f:b4:51:
76:37:c2:34:8a:ea:23:03:00:ca:f9:9b:c4:33:c1:
62:8d:64:cc:18:cf:8b:de:08:65:4b:cc:09:eb:b5:
31:97:4f:45:0c:f7:74:74:65:ad:a7:50:08:e7:bd:
20:98:da:c7:b7:6e:ff:15:99:6a:85:47:e8:78:c6:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:29:A4:A7:A8:7A:72:52:CE:CA:DB:EC:65:35:BB:21:85:D6:74:0D
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/1-Smkp6h6clLOytvsZTW7IYXWdA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.108.0/22
146.255.24.0/21
193.150.128.0-193.150.151.255
Signature Algorithm: sha256WithRSAEncryption
70:57:5d:9d:bf:13:ce:37:a0:c3:87:9f:ce:53:7f:54:f3:ce:
ab:dd:a0:e3:55:a8:d1:d0:67:a4:8a:45:05:2e:05:ba:f7:02:
ad:6b:7c:37:8f:ee:59:88:60:f9:e0:29:7f:ea:2a:00:fb:78:
ad:a2:95:50:ad:db:68:bb:6b:c0:47:2a:d6:be:4b:c3:ae:23:
56:0d:8c:01:39:7c:c6:e6:71:7d:b8:90:07:b5:86:4a:5d:f8:
fa:2f:bd:a0:1d:d5:81:15:e3:f9:cd:b2:7e:41:8f:e4:cf:c7:
a6:a7:0a:c1:8f:fe:40:4a:3f:aa:44:eb:f8:c1:e3:a2:65:30:
7f:68:3c:53:5e:89:c5:cb:09:7f:f3:52:df:56:1f:02:ed:0e:
04:0f:eb:5a:f4:94:79:6d:c1:22:8d:4a:49:e3:7d:8b:58:81:
92:80:4c:bd:06:bc:da:29:55:3c:8c:a1:b3:25:a8:45:cb:9d:
4c:40:8e:c9:b4:c8:ab:8a:28:fe:22:02:0a:1b:78:c3:41:fd:
12:a0:f9:60:f7:88:5b:e1:fb:14:f0:90:a1:e5:9f:fa:a9:61:
4d:3a:03:b6:ea:98:b2:4d:bb:8d:6c:61:f1:db:c0:14:8c:35:
7d:58:d6:8b:09:ae:a8:db:81:2f:28:34:f6:ce:80:d5:1b:83:
15:a4:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net