Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/jGS8snyePsO074NpCXFdKhJggqU.roa
File: jGS8snyePsO074NpCXFdKhJggqU.roa (raw, json)
Hash identifier: 1J9tKlx/RXf3qd/GUWmpIunUTtsz/Ug0Nekl3umQnis=
Subject key identifier: 8C:64:BC:B2:7C:9E:3E:C3:B4:EF:83:69:09:71:5D:2A:12:60:82:A5
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 01941FFA05306719092746C8FD412408345D
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/jGS8snyePsO074NpCXFdKhJggqU.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205953
IP address blocks: 45.159.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:05:30:67:19:09:27:46:c8:fd:41:24:08:34:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c64bcb27c9e3ec3b4ef836909715d2a126082a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:1c:18:e2:f8:45:93:ae:cd:57:49:6e:2b:
b1:10:58:8b:80:bb:59:9f:49:a4:49:4d:98:65:5c:
08:1d:7a:06:41:b1:0b:f5:fb:fc:bd:0e:28:5a:06:
1b:e8:da:2b:a2:db:3e:86:9a:18:79:07:d8:4b:a9:
05:0e:59:12:ac:66:ec:b9:e7:a8:01:e7:ca:5f:69:
0f:00:10:2f:d3:bd:d2:9c:4a:51:29:e6:4e:39:ea:
2a:bf:c2:12:10:81:a4:84:b4:e5:6a:c9:7e:d8:86:
a4:08:17:e7:46:df:bf:25:5e:da:4f:68:a5:ee:4d:
f0:a1:f4:30:bc:07:cc:03:d3:9c:6b:90:d8:16:27:
40:96:73:18:b6:03:ea:3f:9e:77:3b:44:ea:d8:3f:
83:9e:4b:b6:46:1f:09:73:ab:70:08:ee:ea:fb:f0:
78:94:07:87:7f:16:d6:96:ab:5d:84:41:a0:e3:5d:
59:69:d7:19:04:61:fe:39:3a:f9:90:b9:4e:53:1e:
73:13:d0:8a:90:b7:5d:52:db:ff:cd:0a:70:97:7d:
0e:14:4c:0b:a0:b7:70:49:b0:98:23:98:fa:df:5d:
4b:17:fb:35:2f:63:79:fe:5d:e5:51:7c:ca:dc:f3:
02:a0:91:d8:8e:3a:06:bf:03:8c:9b:92:21:1a:27:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:64:BC:B2:7C:9E:3E:C3:B4:EF:83:69:09:71:5D:2A:12:60:82:A5
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/jGS8snyePsO074NpCXFdKhJggqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:25:49:73:92:b3:ec:85:1d:81:67:f9:1f:4e:6c:20:f7:99:
99:58:0d:c0:be:87:a2:48:05:7b:60:bb:16:0c:60:ee:a6:25:
d5:75:53:4d:0c:97:0d:11:71:aa:2b:d2:0e:69:23:99:b8:d5:
21:7e:fe:f5:17:ce:82:2c:0b:17:db:dd:66:2b:9c:0a:a6:d9:
f8:44:3d:05:f7:8c:d6:03:a2:9e:a9:6e:a6:02:2a:99:10:86:
7b:b6:2c:ce:2e:11:df:b1:c3:b1:e2:97:d9:4d:fc:f7:36:ef:
a8:49:8c:f1:a0:e5:2e:44:27:79:bb:53:c0:65:d3:b2:fc:00:
50:bf:e7:94:33:bf:c0:1d:1b:61:14:17:28:77:29:c9:53:c9:
ba:09:36:96:54:e2:50:c5:4c:5d:df:20:3f:d7:81:a4:7f:af:
ae:08:51:64:13:b1:f9:7f:84:6e:c4:15:7c:5f:db:ef:54:d8:
00:d6:a8:30:21:82:de:7b:62:e4:ff:e1:35:c6:18:aa:6a:b7:
c8:70:44:b9:3b:4a:f8:dc:30:39:87:74:4b:af:d8:0f:6e:a4:
96:5b:c4:11:2b:7d:e1:82:87:7e:ee:53:ff:ca:10:a4:8a:72:
4f:5f:b1:04:64:e7:a0:ab:20:e0:bd:51:e9:52:fb:77:9f:3f:
9d:3b:db:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:33 2025 by rpki-client on console.sobornost.net