Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p0NkRucX8XtjldYtmvyARmljupk.roa
File: p0NkRucX8XtjldYtmvyARmljupk.roa (raw, json)
Hash identifier: Bv7gMSk+NdAkGAWtjqJgbII+A0zT+2M62wRkVelvw2o=
Subject key identifier: A7:43:64:46:E7:17:F1:7B:63:95:D6:2D:9A:FC:80:46:69:63:BA:99
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01961170D7BBFD4BBCEADF34FD8B43CAB1EB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p0NkRucX8XtjldYtmvyARmljupk.roa
Signing time: Mon 07 Apr 2025 18:08:49 +0000
ROA not before: Mon 07 Apr 2025 18:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 45.85.160.0/24 maxlen: 24
45.92.247.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
185.242.246.0/24 maxlen: 24
195.66.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:70:d7:bb:fd:4b:bc:ea:df:34:fd:8b:43:ca:b1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 7 18:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7436446e717f17b6395d62d9afc80466963ba99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:a4:25:7d:68:91:f7:7c:14:69:96:11:b2:
04:c2:c4:c5:c6:70:4a:1f:cc:5c:7b:bc:aa:25:93:
52:d4:e4:99:42:27:3f:a4:fb:46:64:c2:7a:a8:1d:
5c:1e:24:63:5d:45:91:9a:05:62:04:d0:ea:20:12:
c0:3f:87:6d:d5:45:59:ec:4c:46:a8:7d:47:eb:14:
26:ce:91:61:27:82:89:f9:f3:ae:d6:d4:04:9b:4a:
0c:89:f0:53:61:4d:c8:ee:ae:4c:27:e7:e3:10:18:
dd:66:5e:66:36:d4:6e:93:a2:9e:73:9b:77:64:90:
b4:f4:27:c3:73:9c:5f:67:96:81:15:5e:0a:69:99:
a2:b7:86:d2:20:32:fe:3e:53:1d:73:49:9a:fc:bc:
c0:f5:8c:77:38:ad:ce:b4:97:82:18:26:8b:cc:cb:
58:5e:1d:a3:d0:51:a4:2a:ac:3c:a4:47:20:61:7b:
0c:d7:16:8a:96:de:28:1f:fa:89:70:39:89:dc:c0:
49:28:3d:a5:ce:c4:23:16:ef:fc:cb:30:52:9f:a0:
5e:3c:be:5a:9e:34:b1:79:a9:71:8a:ff:88:f6:47:
d4:e8:4c:a9:e2:7b:10:68:33:7e:4d:46:f6:c1:7b:
80:d7:75:41:15:7f:5d:04:bb:58:6e:09:f8:d9:8c:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:43:64:46:E7:17:F1:7B:63:95:D6:2D:9A:FC:80:46:69:63:BA:99
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p0NkRucX8XtjldYtmvyARmljupk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.160.0/24
45.92.247.0/24
45.128.77.0/24
185.242.246.0/24
195.66.24.0/24
Signature Algorithm: sha256WithRSAEncryption
22:18:84:c6:dd:4e:a9:a5:12:66:e8:39:7d:da:2d:3f:b6:ae:
49:6d:37:64:70:2e:41:d1:ec:91:e9:93:d0:ce:91:03:fc:93:
38:74:ca:91:da:89:52:d4:87:59:16:6d:25:58:7f:e7:a2:36:
e0:01:79:07:bf:0b:c8:5a:8b:a5:be:98:42:95:9e:16:a9:e2:
f9:1f:05:41:59:97:b3:12:20:19:f0:50:d0:c3:2b:4c:e2:7b:
60:3e:48:d9:a1:84:ee:51:17:7b:2d:26:65:d3:73:78:bf:3b:
ca:88:60:19:f6:1a:93:08:06:87:b4:3d:ae:c5:e4:ef:dd:ec:
19:be:4d:36:ee:a9:15:a1:50:5d:c7:2c:f5:4f:e1:87:fd:b1:
1e:6f:25:cb:ba:6a:be:5d:e1:48:2a:87:a2:cd:6e:c7:47:9a:
1b:17:16:93:68:1a:41:d9:24:ae:cd:e8:29:0f:4f:ca:77:c8:
10:72:07:cb:7c:43:fb:db:49:3a:61:2c:c0:4b:44:c9:5b:80:
64:77:3d:90:90:55:cb:59:75:4a:c5:8b:1c:98:42:c9:d1:17:
3c:f7:96:56:82:23:9b:13:1d:74:af:46:f5:2b:33:d6:8d:a2:
01:38:06:34:7e:e3:da:8c:f8:94:8d:ed:f9:2a:a8:5c:25:cc:
d1:a0:d7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net