Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa
File: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (raw, json)
Hash identifier: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=
Subject key identifier: 16:0E:72:6B:D8:C4:10:DC:F3:BE:61:B0:1F:66:24:A6:B9:B9:60:83
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 01942747B3E1119182F75B003C2F242230E6
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa
Signing time: Thu 02 Jan 2025 13:49:58 +0000
ROA not before: Thu 02 Jan 2025 13:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201547
IP address blocks: 5.45.44.0/22 maxlen: 22
5.45.45.0/24 maxlen: 24
5.45.46.0/24 maxlen: 24
2a0d:1740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b3:e1:11:91:82:f7:5b:00:3c:2f:24:22:30:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Jan 2 13:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=160e726bd8c410dcf3be61b01f6624a6b9b96083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:c5:5b:e4:d1:33:44:6b:5b:14:34:25:d3:
c7:3c:33:7a:f8:af:ea:7f:da:3c:5a:88:44:b8:c4:
22:47:20:97:d5:a2:70:79:4f:2f:af:7f:cf:80:bb:
e5:9e:05:8a:1e:a8:2c:82:98:a5:05:d7:fc:48:2e:
6e:5e:d3:d6:66:59:b3:61:03:c9:69:be:26:eb:ca:
10:a5:f4:03:c6:f8:6c:a0:ca:6e:d9:02:bc:32:e8:
75:65:7b:71:3e:9c:8a:52:02:83:3c:af:e9:da:34:
5a:ef:cb:e6:21:c8:e1:7b:97:c2:a0:f9:ba:36:7c:
ef:69:1f:ac:24:ca:64:b6:cc:40:b6:b1:02:1d:df:
0f:7a:5f:ca:06:93:4c:95:7f:2f:3b:84:31:54:29:
03:53:1b:d8:56:94:1e:60:6c:44:56:04:59:3b:3b:
b4:2d:a4:55:f7:9b:e8:1b:57:af:4a:f7:95:de:93:
c7:b6:23:47:41:9f:7c:08:2d:ce:d8:f8:e4:c8:41:
c7:1b:f5:83:06:b0:d6:95:a8:0d:4e:01:a3:e1:e4:
52:a2:2b:55:02:15:64:a3:cf:db:d8:19:95:05:fc:
00:f6:9f:f0:c8:6d:01:79:34:45:a6:fa:10:83:db:
6c:d4:84:5f:de:5d:04:13:f9:15:26:04:79:60:80:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:72:6B:D8:C4:10:DC:F3:BE:61:B0:1F:66:24:A6:B9:B9:60:83
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.44.0/22
IPv6:
2a0d:1740::/32
Signature Algorithm: sha256WithRSAEncryption
43:43:2a:87:36:77:69:98:c9:ff:97:31:8a:d7:c0:1c:b8:2a:
e0:40:4f:15:33:b5:1e:05:cc:b5:64:c4:66:06:79:df:11:a0:
95:1f:64:35:e6:7f:0d:05:f2:f1:2e:2f:b0:b6:ee:d9:7d:c4:
e5:79:83:1f:b3:b7:6c:99:0d:18:df:af:ba:e4:55:ba:39:eb:
8a:48:f6:ae:18:9c:5c:67:3d:c4:e2:80:f9:f9:87:a4:08:ea:
4b:09:e5:99:4f:fc:60:77:69:70:c6:b7:b2:4d:9c:e7:31:21:
f4:7e:6c:54:89:2e:bd:6a:a4:d6:a1:da:57:84:d4:b5:d0:87:
82:9d:f0:28:76:06:6d:de:8b:4e:cd:be:12:fa:3a:73:5a:a9:
e3:cc:05:7c:20:d4:db:a7:81:a8:0d:ee:47:22:22:fc:27:4b:
52:04:d1:6e:56:1a:03:a0:3a:3e:53:98:98:da:95:af:2d:53:
fc:92:7a:02:e4:d9:be:e0:af:65:e9:54:94:89:a9:cd:af:ed:
f0:91:52:0c:9b:db:52:63:98:59:05:31:6e:94:dc:95:e1:ba:
2f:43:bf:7d:f0:53:39:0c:37:c3:2b:d4:8c:bc:5b:65:22:be:
82:eb:b7:85:09:08:7b:b0:c2:a9:0d:4d:1e:5e:41:ea:5e:36:
60:d2:37:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net