Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/B5U5hiuj472vo3lxpeeTGMOW5Ps.roa
File: B5U5hiuj472vo3lxpeeTGMOW5Ps.roa (raw, json)
Hash identifier: 5BiNFG9KLdrNVXjd/lTiLpF2pyPe+QUD5bM50jqM//w=
Subject key identifier: 07:95:39:86:2B:A3:E3:BD:AF:A3:79:71:A5:E7:93:18:C3:96:E4:FB
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 019422FC060CF4AA11DDB869A71D908CD8A2
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/B5U5hiuj472vo3lxpeeTGMOW5Ps.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48146
IP address blocks: 45.141.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:06:0c:f4:aa:11:dd:b8:69:a7:1d:90:8c:d8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=079539862ba3e3bdafa37971a5e79318c396e4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:60:36:fe:07:89:b1:f6:da:77:23:a3:e9:
0e:d5:a5:0f:b1:69:b7:2a:85:bb:7e:12:d7:d7:bb:
d7:3f:f2:f7:a0:41:f9:9e:b2:02:a3:95:db:8f:33:
ec:4d:e8:15:08:0e:b3:9d:fb:20:91:7b:5e:bb:72:
fd:04:00:43:eb:a6:8b:75:8d:56:f7:ad:57:66:be:
35:fb:fe:e4:81:16:41:e8:b8:38:8e:9a:09:33:1a:
6f:7e:9a:98:f0:cb:8a:7a:03:86:58:e7:b4:3d:99:
9e:a4:e5:3b:a4:cf:a6:f2:b5:c9:f2:cb:7d:af:aa:
5c:96:3d:f2:2e:4c:02:84:4b:a1:d0:b4:0b:c7:cb:
ab:f1:5e:1a:31:68:a3:e6:ba:5b:86:d6:02:b3:f5:
86:cc:96:ab:f5:97:7a:79:a0:3f:e4:36:fc:e7:30:
00:23:6c:69:49:59:94:fc:a0:19:1d:c3:10:f9:2f:
d4:41:91:65:aa:0b:3f:75:0c:5d:f5:fc:1d:da:37:
ed:d9:7a:f9:06:1c:98:b0:32:ca:5e:7a:08:c3:f5:
1f:3d:a0:1b:55:cd:0a:f3:dc:7d:81:21:9b:45:ac:
9a:29:45:da:10:38:e7:95:7e:30:97:2e:0c:74:11:
b0:c7:f9:16:1c:c3:b1:95:0c:d0:08:cb:09:a2:bc:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:39:86:2B:A3:E3:BD:AF:A3:79:71:A5:E7:93:18:C3:96:E4:FB
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/B5U5hiuj472vo3lxpeeTGMOW5Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:52:63:73:52:b1:84:eb:5a:69:3b:eb:3e:41:b8:5c:60:33:
d4:3d:12:31:e0:3c:47:c3:8b:0b:a2:7e:e9:b5:99:29:e8:28:
41:5c:0c:e1:90:08:fe:e7:8c:be:ff:57:a1:bf:35:3e:4e:6f:
57:b5:b9:e8:84:0f:9f:49:2c:a5:0a:6e:bc:7b:6a:d5:5a:31:
26:c3:6f:b4:2b:17:ae:fc:97:21:f0:ba:14:a4:e5:4a:52:f9:
db:ec:99:80:cd:eb:63:ad:af:c4:b0:07:90:29:31:67:14:f1:
96:12:1b:c7:ff:65:e1:ce:f7:d5:68:cd:1a:5d:49:fd:73:0f:
9b:28:4c:18:73:af:68:49:dc:15:b5:6c:ce:ec:ac:d8:06:a3:
34:5a:db:88:57:66:3b:ca:71:04:b7:b0:8f:8b:53:43:31:13:
0f:9c:c6:51:b0:1b:85:62:00:34:ee:7a:03:d5:7a:a1:09:a7:
c3:40:67:ab:9c:19:de:2c:95:ab:dc:c9:8e:67:44:53:95:53:
4e:b7:d5:5d:12:a6:a1:e9:34:c2:70:02:38:d7:7b:ba:96:a0:
62:23:a5:29:a5:7b:b5:fc:81:08:aa:87:24:0a:c0:dd:35:64:
48:75:1a:dc:c4:77:06:b0:56:18:bd:32:7b:8d:ba:0b:0e:e5:
68:ed:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net