Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa
File: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (raw, json)
Hash identifier: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=
Subject key identifier: 91:20:46:5F:A5:6C:27:E0:21:79:15:5E:0F:13:2C:A0:AA:45:41:86
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 01962DAEE9F09C232F746D37636A30947A9A
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa
Signing time: Sun 13 Apr 2025 05:45:59 +0000
ROA not before: Sun 13 Apr 2025 05:45:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202658
IP address blocks: 45.14.248.0/22 maxlen: 22
185.157.184.0/22 maxlen: 22
2a01:ff40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:ae:e9:f0:9c:23:2f:74:6d:37:63:6a:30:94:7a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Apr 13 05:45:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9120465fa56c27e02179155e0f132ca0aa454186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:3a:3d:ae:4f:f1:a5:2a:ab:ad:41:33:55:
92:89:0d:1b:39:71:39:2a:49:b7:c2:cd:a3:32:ea:
e9:f3:13:9b:3b:e1:c6:9b:91:7b:b3:e9:bb:d8:15:
bd:f8:f4:ad:95:59:16:f1:23:a0:79:33:24:8f:1d:
28:8a:3a:c8:90:03:bf:9d:96:66:2f:cd:24:d5:91:
58:97:db:3f:0e:15:02:f0:43:4f:d7:81:8e:88:6f:
71:3b:97:af:01:9e:89:1b:97:91:39:97:47:92:4f:
31:6d:a4:98:68:a6:ab:b3:14:de:a7:61:23:f7:2f:
12:09:16:71:a5:0a:8c:3c:c6:2c:60:64:f8:49:4b:
10:46:09:0a:b1:82:b4:0e:28:ad:ff:95:2e:a0:b4:
84:9c:5a:c8:f0:cb:f3:88:8f:85:c6:cc:0c:c3:25:
f6:f0:30:93:ee:c3:1f:2e:24:0e:f2:32:75:1b:c6:
4c:46:7c:5d:67:76:89:fc:6d:9f:21:97:53:37:57:
a8:7d:a3:0e:5c:26:92:8c:cd:f9:a9:5d:7a:44:ee:
d7:ad:de:33:21:b8:25:33:d3:80:35:13:5a:b6:ac:
bb:59:30:d5:83:d2:15:9b:5a:81:38:e5:27:94:1c:
7b:7a:3d:ef:88:20:eb:24:13:09:ee:91:9d:51:99:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:20:46:5F:A5:6C:27:E0:21:79:15:5E:0F:13:2C:A0:AA:45:41:86
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.248.0/22
185.157.184.0/22
IPv6:
2a01:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
93:23:1d:98:68:7f:26:11:82:7c:71:fa:a2:57:b2:7b:5f:4e:
36:a9:38:3e:33:0a:7a:ac:90:97:c4:4a:27:5d:6e:d1:60:75:
76:ba:12:da:07:3d:c8:ca:5a:be:39:9c:a6:12:59:c2:e5:dc:
28:00:bc:a1:5a:a2:5c:29:54:d0:99:82:dc:c1:e8:8b:a4:b8:
63:97:cf:30:0e:e8:c0:95:b2:c0:44:8d:77:e7:0d:75:81:eb:
e0:a9:26:46:70:30:1c:c6:a3:70:f9:9a:03:f7:57:e2:22:f1:
72:31:33:6c:fa:bb:06:76:6c:44:32:31:d7:b9:48:42:6b:e9:
ee:6b:3a:a7:4e:73:61:7c:1e:03:d0:f1:a5:13:70:58:47:d1:
f5:b6:1a:d9:f4:3d:de:60:b6:bd:c5:ec:b0:c6:f5:22:6b:b2:
ba:c3:eb:86:b7:05:3e:45:f3:01:01:79:a1:c5:d6:ae:44:8d:
ff:c1:c5:30:4e:b7:39:21:4f:86:d5:ee:23:b2:45:c3:37:2c:
3a:bc:c5:39:ee:0f:9e:6c:f8:13:09:e8:9a:29:88:7b:59:62:
d6:cc:b5:4c:3e:34:f4:b8:93:2f:3d:df:a9:d1:09:c1:17:be:
0f:29:6c:1c:2f:f6:d4:84:96:ad:d8:b4:59:e5:d7:a2:3b:1b:
d5:1d:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net