Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/04xKoR3HixjwEV_dOrG3hKpzMP4.roa
File: 04xKoR3HixjwEV_dOrG3hKpzMP4.roa (raw, json)
Hash identifier: XSQ1jLSVKuR/7tbazdYV2Fv1OeY0/BCC+/gGVvZRwVw=
Subject key identifier: D3:8C:4A:A1:1D:C7:8B:18:F0:11:5F:DD:3A:B1:B7:84:AA:73:30:FE
Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial: 01941F8C1D603A138290DBE1A32F6DBCE89D
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/04xKoR3HixjwEV_dOrG3hKpzMP4.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206375
IP address blocks: 45.135.204.0/24 maxlen: 32
45.135.205.0/24 maxlen: 32
45.135.206.0/24 maxlen: 32
45.135.207.0/24 maxlen: 32
139.28.104.0/24 maxlen: 32
139.28.105.0/24 maxlen: 32
139.28.106.0/24 maxlen: 32
139.28.107.0/24 maxlen: 32
185.188.128.0/24 maxlen: 32
185.188.129.0/24 maxlen: 32
185.188.130.0/24 maxlen: 32
185.188.131.0/24 maxlen: 32
185.219.176.0/24 maxlen: 32
185.219.177.0/24 maxlen: 32
185.219.178.0/24 maxlen: 32
185.219.179.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1d:60:3a:13:82:90:db:e1:a3:2f:6d:bc:e8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d38c4aa11dc78b18f0115fdd3ab1b784aa7330fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:d3:63:4f:fb:6b:d5:9e:aa:30:31:91:31:
28:07:9f:ee:d9:99:5a:53:8c:46:0a:c6:45:e3:49:
b3:af:21:2d:c7:36:70:d6:ed:7a:56:4f:55:60:53:
b9:83:0c:f3:19:f1:cc:af:d5:c7:5f:0f:3f:15:64:
9c:1e:ee:ed:dc:c2:2e:ae:2f:b9:0f:50:8a:65:95:
b4:cf:52:a7:6e:e1:a4:64:84:aa:1e:28:e5:a5:76:
82:80:1e:aa:2b:73:23:34:a3:ed:0b:1e:75:4d:28:
66:f2:4a:62:4c:aa:60:0c:ad:16:03:0b:ca:72:22:
7a:28:72:c2:79:3a:67:54:47:51:55:2e:e4:20:c8:
5a:7b:bd:53:e4:e7:88:54:70:e3:02:01:3f:c0:da:
76:3b:b9:4e:8c:1b:a8:37:3a:d4:f9:0e:86:9d:48:
f3:b3:e9:7c:d3:d7:d4:8f:59:98:8c:f6:9d:bd:e6:
05:e3:9c:79:8d:b0:98:f4:88:bb:ba:37:53:a5:68:
3f:a4:63:42:ff:7f:59:59:ee:3b:f3:99:7b:4a:3c:
93:7f:55:78:90:33:92:7f:5d:6c:3a:a2:ec:bb:83:
6d:4d:19:dc:08:9b:95:42:7e:5e:b8:10:ea:20:e2:
a7:f9:a5:71:81:44:21:04:42:8b:61:d3:2d:44:a6:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8C:4A:A1:1D:C7:8B:18:F0:11:5F:DD:3A:B1:B7:84:AA:73:30:FE
X509v3 Authority Key Identifier:
keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/04xKoR3HixjwEV_dOrG3hKpzMP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.204.0/22
139.28.104.0/22
185.188.128.0/22
185.219.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:29:9d:23:be:6b:ea:d4:3c:2b:72:86:e5:21:82:2b:e6:4f:
4a:34:3f:f7:9b:8d:d3:84:c4:73:c5:ba:d1:57:17:aa:07:f0:
71:7b:70:6e:b6:a6:82:00:34:14:a7:5d:02:db:f6:d2:62:a6:
50:da:68:64:e6:81:0f:3e:bf:dd:1e:7c:92:7a:5e:ff:f0:79:
6c:d9:79:97:e5:61:41:c0:26:c4:25:a3:1a:96:e7:52:ce:7a:
3a:11:8e:80:ca:c8:12:97:c4:66:c0:88:e0:cd:cc:71:29:12:
82:27:35:d7:d7:e7:08:38:a1:be:23:57:59:1c:b0:06:fa:fe:
27:3c:23:f4:32:02:f6:b0:0e:2d:b8:a5:e1:50:bb:f9:5f:29:
bc:dd:15:4e:7d:c3:b4:d4:3b:9e:16:e2:08:7c:4d:17:ab:0c:
e8:97:50:42:07:53:9c:79:26:3c:49:8e:cc:dd:95:e9:d6:23:
7c:82:74:11:f6:87:d0:38:b9:7b:78:fe:93:0e:a2:7f:28:fc:
ec:3d:44:33:d6:ca:98:8b:42:08:38:1b:7d:4a:ce:6b:98:58:
1b:72:54:b8:0e:89:17:35:9f:be:1a:09:03:0f:36:79:ea:82:
78:07:8f:26:fb:58:c7:86:84:a4:7c:fd:1f:53:ea:8e:5a:14:
4c:92:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net