Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/4nxR8Cxl20Qx8l54ebHfYex0okU.roa
File: 4nxR8Cxl20Qx8l54ebHfYex0okU.roa (raw, json)
Hash identifier: t9zbsq/Krtk5PxUO6ZUUhhC5Dk5KGf8sczc82Xlxw4s=
Subject key identifier: E2:7C:51:F0:2C:65:DB:44:31:F2:5E:78:79:B1:DF:61:EC:74:A2:45
Certificate issuer: /CN=78688182b8f253c5cf946294786b7901435fc8c3
Certificate serial: 01946441C1DFC08EDAA667E614A900F070E4
Authority key identifier: 78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/4nxR8Cxl20Qx8l54ebHfYex0okU.roa
Signing time: Tue 14 Jan 2025 10:00:18 +0000
ROA not before: Tue 14 Jan 2025 10:00:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199904
IP address blocks: 45.141.192.0/22 maxlen: 24
91.193.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:41:c1:df:c0:8e:da:a6:67:e6:14:a9:00:f0:70:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78688182b8f253c5cf946294786b7901435fc8c3
Validity
Not Before: Jan 14 10:00:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e27c51f02c65db4431f25e7879b1df61ec74a245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:31:9a:63:76:fd:46:3e:be:7b:1b:cb:5f:
3b:0b:a3:da:7e:b0:53:c1:50:a6:b5:f1:fe:e9:6c:
a0:49:37:e9:69:f0:de:4a:cb:01:6b:ea:52:c6:d3:
3d:c4:02:14:e3:4e:50:4e:12:c1:2a:b4:aa:68:4c:
7f:12:68:4b:8d:3a:5a:a9:f6:17:06:1b:4e:c9:cb:
b2:7a:a7:f1:4e:d3:0a:86:79:61:9e:1a:37:1f:9b:
b4:da:55:71:53:f4:8b:f4:95:d4:fd:87:d0:72:4e:
52:8c:c7:c1:ca:e2:62:e0:45:e9:32:3f:12:21:52:
1e:bd:50:ff:fd:1e:3f:cf:e0:de:fc:cf:87:b5:26:
9e:13:53:c8:f0:8f:19:42:ae:e8:c3:20:ff:e3:f8:
2e:f4:f3:88:2d:8f:2b:43:7f:aa:44:29:0f:38:f2:
27:ea:76:2f:27:45:d8:90:0f:c5:80:d0:1f:52:36:
22:4b:8a:fd:0c:84:c4:35:66:fa:bd:ac:24:da:27:
35:a0:be:28:9d:d9:36:19:d4:d3:fa:30:ec:98:c1:
5f:17:15:23:d5:fd:0a:1d:05:86:53:e0:b9:6e:ec:
bc:89:44:a4:a2:ae:b8:32:71:04:b5:28:56:63:58:
c4:fe:97:6d:b4:52:a0:6f:38:1f:71:94:5f:8c:79:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7C:51:F0:2C:65:DB:44:31:F2:5E:78:79:B1:DF:61:EC:74:A2:45
X509v3 Authority Key Identifier:
keyid:78:68:81:82:B8:F2:53:C5:CF:94:62:94:78:6B:79:01:43:5F:C8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGiBgrjyU8XPlGKUeGt5AUNfyMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/4nxR8Cxl20Qx8l54ebHfYex0okU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dfdb6-7a4d-43c3-870f-c86c2fc6c61b/1/eGiBgrjyU8XPlGKUeGt5AUNfyMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.192.0/22
91.193.52.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:dc:f3:51:1d:a5:e9:d8:cb:08:9a:75:4e:05:c9:af:b3:70:
4c:23:36:8d:11:2c:92:a8:08:56:6c:86:a0:49:b1:15:35:e5:
6f:32:a3:26:4a:d4:6e:6d:7f:b7:9b:91:7f:07:c4:fe:cd:18:
cd:b3:31:63:87:64:31:96:76:c7:72:21:42:e1:42:4a:2e:5a:
34:87:b5:ec:09:51:6d:55:ab:84:54:1c:20:76:fb:8d:06:62:
c2:73:37:80:f7:39:83:89:49:5f:99:fd:9f:e3:9d:02:e3:57:
5f:16:99:ef:43:1f:64:6d:36:65:7f:a9:c1:62:29:7c:6b:be:
67:5a:a0:b5:05:8e:3f:00:ff:ab:b5:61:26:3d:dc:1e:36:8b:
7c:34:28:f3:72:3f:a9:03:19:33:60:6c:54:98:e2:73:71:16:
56:e3:29:77:ac:f6:a4:16:2f:06:e6:ad:c4:e9:5f:d6:2f:1d:
4f:c7:17:be:40:46:20:aa:28:9d:16:4e:e3:0b:85:8d:4d:2c:
b2:43:03:37:b0:57:a7:3b:11:8d:72:11:5a:65:47:c0:96:67:
54:97:a7:d6:8c:c7:45:75:b4:0b:50:9c:e1:ea:29:da:2f:e4:
e5:6a:f3:df:b3:f5:10:43:1b:a1:91:94:67:a8:0e:38:20:a4:
dc:6f:02:0c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRkQcHfwI7apmfmFKkA8HDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Njg4MTgyYjhmMjUzYzVjZjk0NjI5NDc4NmI3OTAxNDM1
ZmM4YzMwHhcNMjUwMTE0MTAwMDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjdjNTFmMDJjNjVkYjQ0MzFmMjVlNzg3OWIxZGY2MWVjNzRhMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeAxmmN2/UY+vnsby187C6PafrBT
wVCmtfH+6WygSTfpafDeSssBa+pSxtM9xAIU405QThLBKrSqaEx/EmhLjTpaqfYX
BhtOycuyeqfxTtMKhnlhnho3H5u02lVxU/SL9JXU/YfQck5SjMfByuJi4EXpMj8S
IVIevVD//R4/z+De/M+HtSaeE1PI8I8ZQq7owyD/4/gu9POILY8rQ3+qRCkPOPIn
6nYvJ0XYkA/FgNAfUjYiS4r9DITENWb6vawk2ic1oL4ondk2GdTT+jDsmMFfFxUj
1f0KHQWGU+C5buy8iUSkoq64MnEEtShWY1jE/pdttFKgbzgfcZRfjHlcgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOJ8UfAsZdtEMfJeeHmx32HsdKJFMB8GA1UdIwQY
MBaAFHhogYK48lPFz5RilHhreQFDX8jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYt
Yzg2YzJmYzZjNjFiLzEvNG54UjhDeGwyMFF4OGw1NGViSGZZZXgwb2tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yZGZkYjYtN2E0ZC00M2MzLTg3MGYtYzg2YzJmYzZjNjFi
LzEvZUdpQmdyanlVOFhQbEdLVWVHdDVBVU5meU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLY3AAwQA
W8E0MA0GCSqGSIb3DQEBCwUAA4IBAQDK3PNRHaXp2MsImnVOBcmvs3BMIzaNESyS
qAhWbIagSbEVNeVvMqMmStRubX+3m5F/B8T+zRjNszFjh2QxlnbHciFC4UJKLlo0
h7XsCVFtVauEVBwgdvuNBmLCczeA9zmDiUlfmf2f450C41dfFpnvQx9kbTZlf6nB
Yil8a75nWqC1BY4/AP+rtWEmPdweNot8NCjzcj+pAxkzYGxUmOJzcRZW4yl3rPak
Fi8G5q3E6V/WLx1Pxxe+QEYgqiidFk7jC4WNTSyyQwM3sFenOxGNchFaZUfAlmdU
l6fWjMdFdbQLUJzh6inaL+TlavPfs/UQQxuhkZRnqA44IKTcbwIM
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net