Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/FQLYEgJnBcxXVB0fnnabFYqwVJ4.roa
File: FQLYEgJnBcxXVB0fnnabFYqwVJ4.roa (raw, json)
Hash identifier: V3224FLOv1W7X3uBW6dltktQIsCoHudHe1QUTyJjYBE=
Subject key identifier: 15:02:D8:12:02:67:05:CC:57:54:1D:1F:9E:76:9B:15:8A:B0:54:9E
Certificate issuer: /CN=ede7662d597fafc96dd765577508c3ed029d6567
Certificate serial: 019423D77183E680BA5F906DEBD366016271
Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/FQLYEgJnBcxXVB0fnnabFYqwVJ4.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44205
IP address blocks: 45.8.120.0/22 maxlen: 22
45.144.180.0/22 maxlen: 22
185.115.120.0/22 maxlen: 22
2a06:7600::/29 maxlen: 29
2a0e:8900::/29 maxlen: 29
2a0e:f340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:71:83:e6:80:ba:5f:90:6d:eb:d3:66:01:62:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1502d812026705cc57541d1f9e769b158ab0549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:22:58:fa:50:8f:5f:1b:58:43:19:5a:98:
b4:55:11:93:56:ef:87:e1:1f:d0:67:7c:37:d0:cd:
c0:4f:53:d8:03:25:97:1a:ab:a7:17:c0:27:ae:f3:
5f:b8:ed:a9:2a:7e:45:0c:01:cc:f3:ed:ba:d9:43:
6a:14:0e:0f:2f:fa:d4:81:58:37:5f:74:dd:62:c5:
47:4d:69:ff:b6:21:23:23:f0:31:12:f4:7a:fe:c1:
50:24:30:67:e6:40:e6:b3:4a:7d:80:62:15:9a:30:
46:4c:40:6d:4c:14:c5:63:29:22:4c:71:f5:1c:ba:
e8:c4:c1:37:12:ef:3c:fb:d0:49:20:fe:34:24:5e:
8f:e2:b7:c0:4c:85:9b:aa:8a:98:d9:f8:f7:c0:36:
f3:c9:77:30:4a:e6:d3:77:6c:6a:76:bf:12:9a:6d:
f3:51:90:d6:69:57:22:b4:98:df:6f:99:c9:3d:bb:
39:61:32:2d:fe:94:c6:b3:0b:e5:4b:5d:d8:77:83:
8e:b4:41:2b:f0:2d:9e:71:cb:6c:ed:0d:4f:21:95:
19:d4:67:0c:f0:16:0c:80:f1:ce:5d:e6:2c:fb:9f:
98:82:1c:b5:93:25:c0:9f:27:a7:e4:90:25:35:ed:
77:6c:11:12:e9:27:c3:73:56:4e:0e:2c:53:4d:7c:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:02:D8:12:02:67:05:CC:57:54:1D:1F:9E:76:9B:15:8A:B0:54:9E
X509v3 Authority Key Identifier:
keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/FQLYEgJnBcxXVB0fnnabFYqwVJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.120.0/22
45.144.180.0/22
185.115.120.0/22
IPv6:
2a06:7600::/29
2a0e:8900::/29
2a0e:f340::/29
Signature Algorithm: sha256WithRSAEncryption
2d:e3:5e:f4:1e:78:b0:b8:7a:8f:4a:e3:6e:ae:11:0c:97:f6:
27:e7:72:93:4e:df:76:ce:3d:85:c6:1c:b0:67:ea:16:ad:c1:
3e:e3:a2:e1:66:ee:bf:2e:5f:25:21:e4:84:4c:51:8b:c0:e1:
df:d8:32:a9:8d:03:a3:bc:22:72:fc:9e:a3:0a:5b:ed:e0:82:
99:0a:0a:75:c6:56:2a:a4:32:df:eb:84:c1:3c:14:a5:e8:b2:
dc:76:66:8e:e4:c4:87:4d:48:33:e8:33:9f:00:c0:67:8f:d8:
95:d4:bb:f1:52:d4:45:12:6a:12:63:ba:4a:e5:92:8d:49:c6:
9b:43:2d:b2:1a:ce:4d:94:c4:f2:80:5f:1d:d9:71:b2:fd:4a:
d1:d0:6a:55:ce:72:7f:71:4e:dd:cc:e9:36:c1:c2:5a:83:24:
11:65:68:31:d2:82:c2:20:01:8f:75:9f:24:ed:62:9c:0a:01:
8a:bd:c5:d8:e0:28:92:c4:22:72:7e:ae:3c:06:f1:1f:de:88:
84:c5:fd:e1:a7:4d:da:15:28:c5:e1:2f:7e:62:66:45:9c:e7:
62:11:cf:9f:45:e8:58:da:8f:bb:2e:ef:9c:08:f2:ee:22:1c:
02:3c:ad:ac:36:98:fe:e8:bc:e3:61:e7:0c:c7:d8:90:41:ea:
29:41:2f:35
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZQj13GD5oC6X5Bt69NmAWJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTc2NjJkNTk3ZmFmYzk2ZGQ3NjU1Nzc1MDhjM2VkMDI5
ZDY1NjcwHhcNMjUwMTAxMjE0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTAyZDgxMjAyNjcwNWNjNTc1NDFkMWY5ZTc2OWIxNThhYjA1NDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaMiWPpQj18bWEMZWpi0VRGTVu+H
4R/QZ3w30M3AT1PYAyWXGqunF8AnrvNfuO2pKn5FDAHM8+262UNqFA4PL/rUgVg3
X3TdYsVHTWn/tiEjI/AxEvR6/sFQJDBn5kDms0p9gGIVmjBGTEBtTBTFYykiTHH1
HLroxME3Eu88+9BJIP40JF6P4rfATIWbqoqY2fj3wDbzyXcwSubTd2xqdr8Smm3z
UZDWaVcitJjfb5nJPbs5YTIt/pTGswvlS13Yd4OOtEEr8C2eccts7Q1PIZUZ1GcM
8BYMgPHOXeYs+5+Yghy1kyXAnyen5JAlNe13bBES6SfDc1ZODixTTXzjeQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFBUC2BICZwXMV1QdH552mxWKsFSeMB8GA1UdIwQY
MBaAFO3nZi1Zf6/JbddlV3UIw+0CnWVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTIt
ZDM1N2Y1YWVlYjg1LzEvRlFMWUVnSm5CY3hYVkIwZm5uYWJGWXF3Vko0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTItZDM1N2Y1YWVlYjg1
LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQCLQh4AwQC
LZC0AwQCuXN4MBsEAgACMBUDBQMqBnYAAwUDKg6JAAMFAyoO80AwDQYJKoZIhvcN
AQELBQADggEBAC3jXvQeeLC4eo9K426uEQyX9ifncpNO33bOPYXGHLBn6hatwT7j
ouFm7r8uXyUh5IRMUYvA4d/YMqmNA6O8InL8nqMKW+3ggpkKCnXGViqkMt/rhME8
FKXostx2Zo7kxIdNSDPoM58AwGeP2JXUu/FS1EUSahJjukrlko1JxptDLbIazk2U
xPKAXx3ZcbL9StHQalXOcn9xTt3M6TbBwlqDJBFlaDHSgsIgAY91nyTtYpwKAYq9
xdjgKJLEInJ+rjwG8R/eiITF/eGnTdoVKMXhL35iZkWc52IRz59F6Fjaj7su75wI
8u4iHAI8raw2mP7ovONh5wzH2JBB6ilBLzU=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net