Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa
File: qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa (raw, json)
Hash identifier: Wc2JW8a4VkUPRVVW0ORvuNA6sC5FJWmi5KtU2JoA5R0=
Subject key identifier: A9:65:DC:7E:24:2E:3C:11:CC:8E:54:0A:91:68:80:7C:A8:18:67:38
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019425222676C75FE77E9F32ADC0FDFBB0F6
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62241
IP address blocks: 45.93.132.0/22 maxlen: 22
185.48.56.0/22 maxlen: 22
185.245.184.0/22 maxlen: 22
2a01:9520::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:26:76:c7:5f:e7:7e:9f:32:ad:c0:fd:fb:b0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a965dc7e242e3c11cc8e540a9168807ca8186738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e8:01:07:a7:fe:99:31:03:55:fd:5f:3f:82:
2a:1d:c7:f1:cb:47:01:16:df:c8:83:20:4c:47:58:
38:7e:92:a2:8f:ea:29:4e:ee:9b:82:f0:a9:96:fa:
e1:df:f7:89:52:67:fa:7a:45:9e:31:5f:e4:f1:2a:
4d:b9:57:b2:a9:87:78:65:ae:28:11:08:b3:56:6e:
9e:44:3a:43:ba:27:76:c9:5c:06:89:de:97:c1:d6:
0b:25:4d:b0:ab:6f:06:bd:92:ca:dc:72:e1:12:06:
26:9c:64:de:5d:65:9e:df:3b:15:fe:4f:ac:d3:05:
db:ba:57:fc:5f:db:a5:bb:ff:2f:4f:a7:ea:61:15:
ca:41:6e:fe:aa:43:6e:f0:ed:c4:50:88:73:5a:e7:
3f:13:65:27:0d:9c:10:da:c3:0f:2c:d2:48:42:2e:
4e:a4:55:e2:23:96:5e:42:46:11:94:bd:9f:c5:18:
a8:c0:b9:7f:c5:29:4a:6a:68:f8:e9:7c:1a:d4:a6:
91:18:36:7d:5d:c8:48:3e:60:4c:5d:20:dd:d1:1d:
ad:e3:a0:34:5d:a7:1d:6f:3a:11:ec:b4:52:03:4f:
92:c8:ca:c0:e0:d0:9f:50:37:d7:43:61:79:3f:e8:
ac:30:db:a2:85:e7:fe:9d:ff:b4:d5:7e:17:82:0e:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:65:DC:7E:24:2E:3C:11:CC:8E:54:0A:91:68:80:7C:A8:18:67:38
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.132.0/22
185.48.56.0/22
185.245.184.0/22
IPv6:
2a01:9520::/29
Signature Algorithm: sha256WithRSAEncryption
36:c7:68:ae:d3:a0:44:71:5a:61:6a:fc:74:2a:05:48:eb:a5:
c8:d6:47:f6:5c:18:40:c5:f1:dc:f9:6b:52:ae:4a:fe:a5:5f:
16:2b:78:56:5a:eb:6b:49:bb:62:bf:ee:91:ba:15:71:7b:3e:
13:f5:25:c4:30:3f:12:f5:4a:ee:f3:39:21:52:65:81:1c:18:
28:6b:1f:33:f5:5f:8c:9c:0c:38:eb:86:ff:d7:ac:36:e9:f1:
1c:25:e2:95:e4:19:83:6c:25:cc:72:e3:97:3c:95:5f:d8:0b:
4b:60:7a:de:4b:2b:3a:18:51:d5:9c:72:55:c1:93:eb:1d:76:
ef:65:2d:8c:70:66:4b:d1:cc:02:c7:9c:64:64:86:ba:e6:5a:
5c:10:3e:65:94:88:12:af:e3:a4:2b:9e:ec:c9:2f:87:7d:1c:
ba:88:93:49:ea:93:0e:d6:c3:7c:fe:1a:12:8c:44:d1:2d:f6:
de:00:62:ac:77:32:4c:c9:b0:3a:bb:43:b0:c1:71:5d:f9:ef:
69:31:62:7c:db:fd:b7:72:a7:56:79:bd:05:30:da:16:57:30:
9f:16:18:af:2a:e3:77:a7:6c:1c:54:f5:de:b0:4b:17:9f:49:
18:f9:3c:2b:92:1a:3d:ad:20:a8:ef:85:6b:21:0b:33:1f:ec:
62:3d:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net