Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IOgOMaJXG8xLH5S7_T3apmdTUGQ.roa
File: IOgOMaJXG8xLH5S7_T3apmdTUGQ.roa (raw, json)
Hash identifier: oVdLyYFpxOrdLcGglCXuOYozaiIEZOeD2vcp7lYY8rs=
Subject key identifier: 20:E8:0E:31:A2:57:1B:CC:4B:1F:94:BB:FD:3D:DA:A6:67:53:50:64
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195EB2475D77258DD3B9D018E966093B9E1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IOgOMaJXG8xLH5S7_T3apmdTUGQ.roa
Signing time: Mon 31 Mar 2025 07:39:49 +0000
ROA not before: Mon 31 Mar 2025 07:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.87.243.0/24 maxlen: 24
45.146.128.0/24 maxlen: 24
2a09:17c0:1000::/48 maxlen: 48
2a0a:2d02::/32 maxlen: 48
2a13:18c0:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:24:75:d7:72:58:dd:3b:9d:01:8e:96:60:93:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 31 07:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20e80e31a2571bcc4b1f94bbfd3ddaa667535064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:28:7b:44:58:12:e6:c9:f9:a7:c7:8a:57:32:
75:09:ec:4a:97:2e:e3:fe:71:df:25:0e:54:3e:f8:
86:14:5a:ad:69:32:02:3f:b0:42:4d:bd:4b:96:d3:
15:eb:7c:75:f4:e3:e5:34:bc:4c:d3:f0:46:3a:c3:
18:7d:67:cb:18:a3:43:8c:93:c3:49:b1:21:e0:69:
95:06:f7:b6:40:6c:83:3f:ea:e1:5e:44:fd:92:55:
d9:44:67:32:70:02:83:01:98:30:56:a0:e6:2f:41:
84:63:8c:dd:0f:f5:8f:60:70:8e:16:ad:3e:df:a5:
08:87:4c:8b:49:35:7c:08:cd:e9:1b:b7:4e:87:d5:
2e:9d:61:0a:fb:fa:4a:4c:17:c7:c3:f1:a0:60:03:
35:8a:8a:ce:12:c6:47:44:27:57:0e:86:cf:34:6e:
b4:17:00:1b:fc:ac:c5:89:32:4a:2e:8f:a6:ba:07:
8c:7b:fd:a4:d9:cf:00:ad:b2:1f:ae:2c:04:1d:83:
7b:c2:53:61:b9:c6:3f:46:b5:a6:d3:f1:f6:07:29:
fb:ce:54:64:8c:89:61:13:1e:8e:cb:33:6b:7e:b4:
e0:45:c1:5b:b8:e4:e6:39:1d:8f:31:c4:e7:71:d9:
41:34:74:31:99:23:73:86:52:00:5f:d4:2e:0f:f9:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:0E:31:A2:57:1B:CC:4B:1F:94:BB:FD:3D:DA:A6:67:53:50:64
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IOgOMaJXG8xLH5S7_T3apmdTUGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.243.0/24
45.146.128.0/24
IPv6:
2a09:17c0:1000::/48
2a0a:2d02::/32
2a13:18c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
c3:84:d0:c2:d5:a6:58:fb:7d:ef:55:46:ed:48:c3:fb:3d:0c:
4d:08:6c:b4:9d:7d:d5:a4:3f:60:f1:18:f9:72:0e:e8:01:82:
ce:7c:db:8f:79:c0:73:dd:af:93:ab:ca:bd:41:23:ae:ca:71:
e7:a4:14:f0:80:9a:b8:cf:b7:4e:6a:2e:91:b6:fe:f6:b0:98:
50:88:b1:7a:0a:72:46:77:20:86:bc:f6:b1:1b:91:71:3a:e6:
a7:2b:d2:21:ef:63:dd:fd:e5:a2:e1:23:c8:57:dd:2b:5d:88:
46:88:c9:6b:b5:b0:2b:fb:06:2b:7f:f4:22:49:41:73:9f:d4:
c7:8e:22:ae:d6:8f:86:2e:48:64:97:62:1c:13:3b:5d:14:74:
33:55:03:4d:ea:45:9f:4b:f2:11:99:42:09:4f:81:08:25:8f:
c5:25:c8:fe:cc:a5:c2:70:d0:5e:01:ee:41:00:4f:aa:65:79:
16:d1:b7:72:8a:23:be:75:d6:6b:8b:33:73:a6:dd:e2:37:35:
63:81:15:21:83:13:f7:47:87:36:47:05:85:51:3d:10:42:b4:
11:c7:7a:61:c4:49:5d:3e:3b:79:4f:cc:1a:c3:15:5d:c3:9e:
39:b2:1f:af:88:83:1e:69:25:75:21:ee:7d:4b:8d:31:aa:20:
be:81:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net