Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/1rrQNZWItDgfdECFOf22Jh7vi4k.roa
File: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (raw, json)
Hash identifier: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=
Subject key identifier: D6:BA:D0:35:95:88:B4:38:1F:74:40:85:39:FD:B6:26:1E:EF:8B:89
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 019423697798F72B1314CA30500463D2420B
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/1rrQNZWItDgfdECFOf22Jh7vi4k.roa
Signing time: Wed 01 Jan 2025 19:48:21 +0000
ROA not before: Wed 01 Jan 2025 19:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198034
IP address blocks: 45.10.44.0/24 maxlen: 24
91.230.169.0/24 maxlen: 24
185.153.28.0/23 maxlen: 23
185.153.30.0/23 maxlen: 23
2a12:9240::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:77:98:f7:2b:13:14:ca:30:50:04:63:d2:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Jan 1 19:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6bad0359588b4381f74408539fdb6261eef8b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:ff:23:03:db:82:1c:b1:f0:d3:32:de:0e:
a1:0e:f9:96:ef:0d:a9:a9:09:5b:05:11:b9:47:87:
a4:d1:70:13:d0:bb:82:b3:a1:ba:45:43:82:52:ae:
ed:32:58:ac:e1:f1:4e:9d:05:18:76:3b:6a:b3:b9:
6d:82:8e:88:0f:78:d7:c2:ec:f5:24:7e:7a:10:8d:
92:6b:41:ef:86:b9:bc:9a:e1:95:07:4c:31:08:48:
de:aa:26:cc:32:2b:8c:c0:ed:9a:86:a8:cb:56:80:
34:f5:c9:c5:53:f9:d1:c2:91:53:1e:93:79:f0:a0:
49:6a:20:e1:c8:1f:e0:15:67:9e:0f:d7:6e:02:f8:
7f:e3:32:6b:9f:9d:35:39:b4:32:79:0c:68:6b:67:
1a:fa:cf:5c:89:56:ac:c9:1e:88:2e:0d:92:1e:7f:
b8:86:4f:3d:94:a1:11:3c:38:a5:b7:61:c4:bb:90:
41:77:b0:12:59:09:63:41:38:71:c5:75:cf:be:c4:
54:ad:c0:c2:89:48:e3:a0:7f:89:da:25:6d:cd:de:
61:ee:7c:3d:1d:6e:87:26:25:19:3d:0f:4b:d6:b2:
51:71:16:a8:fa:d9:52:35:23:1d:68:24:08:1f:8e:
79:12:f0:ce:3f:fa:fa:cb:6b:12:ad:96:94:4b:fa:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BA:D0:35:95:88:B4:38:1F:74:40:85:39:FD:B6:26:1E:EF:8B:89
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/1rrQNZWItDgfdECFOf22Jh7vi4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.44.0/24
91.230.169.0/24
185.153.28.0/22
IPv6:
2a12:9240::/32
Signature Algorithm: sha256WithRSAEncryption
29:64:5b:80:85:d7:21:fb:ae:d7:da:73:fd:17:42:24:7b:de:
b2:3f:21:1d:04:4b:dd:5d:44:f1:b5:2b:a5:7e:74:46:ad:85:
4a:9b:24:d7:9d:b3:bd:fe:6b:4e:13:16:92:60:22:48:38:eb:
2f:5a:d3:72:ca:17:ab:19:7e:89:bb:f8:e9:23:cd:b5:9d:9b:
53:d5:66:fd:43:89:11:46:15:9b:8d:99:56:bc:9d:5b:96:ca:
31:ab:dd:20:dd:ce:04:f6:4c:93:2d:68:73:79:50:e8:9c:3b:
76:6d:e6:75:b9:b3:fe:1f:a7:dc:bc:ba:24:0c:20:50:37:6a:
dc:6a:2c:9d:66:21:74:a6:cc:9f:7c:df:78:21:d0:1b:ac:67:
e0:42:93:b1:ff:23:ab:36:09:82:0c:f9:f1:f1:21:89:a1:9b:
35:04:b1:a2:2c:a3:b8:8c:e7:30:eb:67:1a:ac:70:19:98:5b:
db:b8:28:4f:f5:64:96:93:81:57:26:b6:33:30:9b:53:e0:b7:
47:3b:5d:56:3b:24:c9:ce:61:9c:e4:c8:07:14:63:e6:5a:6b:
6c:8f:4e:57:e7:14:39:6f:93:c0:fc:18:cb:b5:3c:e0:b3:25:
44:e8:74:11:b5:50:ac:cf:c9:ec:be:92:0c:d6:6e:26:f4:76:
d6:34:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net