Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4wB5_T0jk4P4KADzxLz0fXClyZI.roa
File: 4wB5_T0jk4P4KADzxLz0fXClyZI.roa (raw, json)
Hash identifier: yoE5xhZ5P74UZPw/zerGUPPFkfvvRsEX9cU7+6ivbpo=
Subject key identifier: E3:00:79:FD:3D:23:93:83:F8:28:00:F3:C4:BC:F4:7D:70:A5:C9:92
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195EB22A08D3A4C2E5DA2D6A929A362612A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4wB5_T0jk4P4KADzxLz0fXClyZI.roa
Signing time: Mon 31 Mar 2025 07:37:49 +0000
ROA not before: Mon 31 Mar 2025 07:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.87.243.0/24 maxlen: 24
45.146.128.0/24 maxlen: 24
2a09:17c0:1000::/48 maxlen: 48
2a0a:2d02::/32 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a13:18c0:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:22:a0:8d:3a:4c:2e:5d:a2:d6:a9:29:a3:62:61:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 31 07:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e30079fd3d239383f82800f3c4bcf47d70a5c992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:98:d7:1f:ea:b5:6f:9e:d0:3b:73:83:b8:
92:78:66:fe:1a:1a:21:bb:ec:09:c6:34:39:17:5b:
40:e3:12:4d:19:31:08:23:20:70:9d:88:79:1d:b3:
58:cb:af:fb:cf:e5:57:17:6f:00:48:33:50:6a:cc:
f3:d1:a1:a8:14:d1:1a:fe:b3:ea:98:42:bc:d8:4f:
8d:82:2b:af:50:f4:5a:8a:a8:c5:bd:6b:a0:02:2c:
9d:29:a6:d3:ae:bb:80:f8:fa:25:5d:d0:b1:6a:47:
40:66:8d:5a:06:84:44:03:29:e2:b4:6f:19:c2:0c:
d7:98:d3:16:f1:ac:dd:ad:1d:01:27:e7:e5:cb:5d:
3e:a5:66:86:ea:87:70:d4:32:60:dd:53:56:ba:c2:
48:78:95:cd:fa:0b:a8:75:fe:df:06:b3:5c:95:ac:
5a:a8:45:7a:5a:12:cc:38:a2:fe:43:11:0a:e3:57:
8b:cf:b8:e6:d0:6c:c9:1d:65:e4:e9:61:8b:e6:87:
55:32:8b:b0:ad:1e:c0:af:54:10:76:b2:96:e3:69:
20:32:d6:17:73:e1:e4:32:b6:92:7c:58:e7:69:17:
19:40:3e:34:ac:88:83:42:10:40:33:20:bc:86:3d:
c0:7f:2a:76:a0:68:58:71:f9:55:c7:e6:7e:ae:1e:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:79:FD:3D:23:93:83:F8:28:00:F3:C4:BC:F4:7D:70:A5:C9:92
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4wB5_T0jk4P4KADzxLz0fXClyZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.243.0/24
45.146.128.0/24
IPv6:
2a09:17c0:1000::/48
2a0a:2d02::/32
2a0f:3d80:123::/48
2a13:18c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e9:72:9a:78:ac:29:bf:00:dc:33:49:a1:fa:97:2c:f0:58:
30:af:1e:6c:89:a2:ad:e1:52:eb:1e:dd:e7:73:0f:3e:74:6b:
42:e9:31:c1:c5:7e:59:48:5b:01:3b:e9:e0:d8:7d:73:b8:e5:
3e:df:7f:44:c9:68:d0:59:dc:f4:42:82:98:19:19:e0:e6:7b:
f9:58:2d:f7:0c:65:f0:02:11:1f:81:82:85:1a:9a:b2:0b:2b:
06:9a:9d:dd:53:66:9b:39:cf:d0:85:6e:68:e0:90:0a:f7:95:
42:ff:4b:62:4d:fa:39:72:d6:a6:29:6a:a4:f2:4c:0c:ee:99:
3b:c2:ce:57:c8:44:c0:90:3c:ba:9c:7b:a1:56:bb:1f:bd:b9:
c6:96:b5:b2:05:9e:d3:fa:42:17:c0:3d:1c:5c:b7:45:47:cc:
8c:80:66:48:de:a2:8d:47:68:81:1f:f3:1a:5a:75:c9:70:87:
3a:d4:0f:bd:4f:c9:23:3d:3e:4c:63:fc:de:42:29:58:4f:bc:
53:c8:6f:0c:11:87:17:a8:88:85:af:39:84:e1:5a:a2:8c:d2:
43:5c:ee:09:c6:45:19:ad:4d:b7:be:a8:eb:2f:2b:7a:64:6a:
35:2e:87:c4:6b:8b:e5:08:13:a6:90:20:33:a2:ee:92:da:de:
51:9c:9e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net