Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/LJXfFjUyeBtIYJYHu_FuhqB1K7M.roa
File: LJXfFjUyeBtIYJYHu_FuhqB1K7M.roa (raw, json)
Hash identifier: UNA0suK2iB8VMx8ZOUiNd9zgODojPJ2lTfHJ5gbz9pQ=
Subject key identifier: 2C:95:DF:16:35:32:78:1B:48:60:96:07:BB:F1:6E:86:A0:75:2B:B3
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 019623999EEE4A4F708870D4D004FD43B281
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/LJXfFjUyeBtIYJYHu_FuhqB1K7M.roa
Signing time: Fri 11 Apr 2025 06:46:32 +0000
ROA not before: Fri 11 Apr 2025 06:46:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 45.136.37.0/24 maxlen: 24
45.136.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:99:9e:ee:4a:4f:70:88:70:d4:d0:04:fd:43:b2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Apr 11 06:46:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c95df163532781b48609607bbf16e86a0752bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:7d:b2:30:7f:ca:d3:c0:7d:30:80:09:30:
96:17:c9:bf:5e:76:c2:40:5d:c5:2b:fa:3d:da:0c:
bd:8f:e1:83:fe:e5:d8:a6:b9:de:97:35:b6:16:1c:
a6:a7:a8:94:7e:02:96:23:df:47:c9:eb:42:b8:5d:
94:ec:ee:83:d6:97:77:4b:e9:20:27:79:72:5b:32:
57:b3:3b:72:18:7f:7d:f3:19:67:c2:0d:7b:d0:fd:
fa:13:8b:f1:31:b9:a6:4b:bf:0d:9d:3a:4a:b6:4d:
5b:9b:43:33:88:5b:fe:34:c2:e1:21:9c:d6:3d:74:
68:5f:4d:b8:f5:d7:d8:16:8b:13:a6:1d:b1:0d:a5:
f7:34:87:97:69:a9:f9:e0:bc:07:7e:2a:37:a3:a7:
d2:24:2c:45:66:7f:44:4c:e8:a2:cd:80:73:a3:bf:
40:89:0e:fb:1a:02:71:be:af:a3:2d:f0:24:49:7a:
c8:59:7b:47:e0:eb:78:35:49:2c:7a:0b:6e:d9:53:
2e:12:da:00:20:ec:b2:1d:15:45:86:52:82:6b:c6:
a9:99:72:9c:53:14:ba:e6:60:6b:64:a4:40:5c:80:
7e:52:6b:c0:c9:c8:ab:be:a5:25:8c:8f:23:9d:e6:
6c:bc:8e:92:44:77:8f:1f:a6:8f:15:5a:07:aa:54:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:DF:16:35:32:78:1B:48:60:96:07:BB:F1:6E:86:A0:75:2B:B3
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/LJXfFjUyeBtIYJYHu_FuhqB1K7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.37.0/24
45.136.39.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a0:a9:ee:37:2a:75:67:cf:99:35:e5:03:1e:b7:68:0e:eb:
77:21:b0:98:85:a5:75:42:fa:45:56:9b:4e:3e:fe:6c:6b:c3:
c2:ae:72:61:9e:b0:f9:40:ce:83:d4:3a:65:ee:2b:4b:cc:7c:
7f:a1:40:1b:16:aa:55:d6:ce:56:9a:13:a3:32:b9:f9:8b:ef:
29:5b:72:5f:af:42:d3:af:9b:37:73:fc:c2:e8:01:eb:1a:02:
d8:11:1e:41:1f:e8:02:48:33:52:6d:19:65:0d:b2:a1:43:f7:
49:24:53:18:a3:eb:12:c2:fc:be:9f:27:6d:60:70:28:47:14:
b6:d8:7e:3f:f0:13:1e:21:ac:97:8c:b5:23:ec:3f:7c:5e:7f:
13:d6:b4:38:11:12:9a:59:a0:b9:8e:56:90:e3:68:07:c7:56:
3c:8c:13:b6:56:6e:af:72:45:ec:0f:e3:7b:2c:7f:d2:6c:5f:
36:c7:ec:5f:ea:32:94:5c:f7:91:50:fa:c5:98:c4:2b:a4:68:
cf:f5:3e:c4:f4:81:d1:b6:e1:66:74:e2:b4:c4:1e:f5:55:8a:
a1:a6:25:cb:17:f4:f9:24:d1:97:7b:7a:0f:ed:a0:05:19:ce:
a8:30:3a:c0:c4:28:68:7b:28:05:9e:20:f1:6e:99:76:ab:c6:
67:7f:11:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZYjmZ7uSk9wiHDU0AT9Q7KBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh
YTExMGIwHhcNMjUwNDExMDY0NjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzk1ZGYxNjM1MzI3ODFiNDg2MDk2MDdiYmYxNmU4NmEwNzUyYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYl9sjB/ytPAfTCACTCWF8m/XnbC
QF3FK/o92gy9j+GD/uXYprnelzW2Fhymp6iUfgKWI99HyetCuF2U7O6D1pd3S+kg
J3lyWzJXsztyGH998xlnwg170P36E4vxMbmmS78NnTpKtk1bm0MziFv+NMLhIZzW
PXRoX0249dfYFosTph2xDaX3NIeXaan54LwHfio3o6fSJCxFZn9ETOiizYBzo79A
iQ77GgJxvq+jLfAkSXrIWXtH4Ot4NUksegtu2VMuEtoAIOyyHRVFhlKCa8apmXKc
UxS65mBrZKRAXIB+UmvAycirvqUljI8jneZsvI6SRHePH6aPFVoHqlRqkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCyV3xY1MngbSGCWB7vxboagdSuzMB8GA1UdIwQY
MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt
NjI0ZjgzNjgyMTY5LzEvTEpYZkZqVXllQnRJWUpZSHVfRnVocUIxSzdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5
LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYglAwQA
LYgnMA0GCSqGSIb3DQEBCwUAA4IBAQAIoKnuNyp1Z8+ZNeUDHrdoDut3IbCYhaV1
QvpFVptOPv5sa8PCrnJhnrD5QM6D1Dpl7itLzHx/oUAbFqpV1s5WmhOjMrn5i+8p
W3Jfr0LTr5s3c/zC6AHrGgLYER5BH+gCSDNSbRllDbKhQ/dJJFMYo+sSwvy+nydt
YHAoRxS22H4/8BMeIayXjLUj7D98Xn8T1rQ4ERKaWaC5jlaQ42gHx1Y8jBO2Vm6v
ckXsD+N7LH/SbF82x+xf6jKUXPeRUPrFmMQrpGjP9T7E9IHRtuFmdOK0xB71VYqh
piXLF/T5JNGXe3oP7aAFGc6oMDrAxChoeygFniDxbpl2q8ZnfxFQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net