Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/1-jLsTG6cvmUwTyWgEhQXDLCPCFU.roa
File: 1-jLsTG6cvmUwTyWgEhQXDLCPCFU.roa (raw, json)
Hash identifier: x3wYtd2Qrh73N7A7GUeTcWVw4Bi/gtMnpJOeGYnZ1cs=
Subject key identifier: FA:32:EC:4C:6E:9C:BE:65:30:4F:25:A0:12:14:17:0C:B0:8F:08:55
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019422FC2D1749FB9716E0680B74EC91DFE5
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/1-jLsTG6cvmUwTyWgEhQXDLCPCFU.roa
Signing time: Wed 01 Jan 2025 17:48:59 +0000
ROA not before: Wed 01 Jan 2025 17:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212372
IP address blocks: 45.132.56.0/24 maxlen: 24
45.132.57.0/24 maxlen: 24
45.132.58.0/24 maxlen: 24
45.132.59.0/24 maxlen: 24
160.238.124.0/23 maxlen: 23
160.238.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2d:17:49:fb:97:16:e0:68:0b:74:ec:91:df:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jan 1 17:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa32ec4c6e9cbe65304f25a01214170cb08f0855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:4d:c0:38:e5:28:52:95:93:e3:f6:26:fe:
74:2e:fa:b2:1e:a1:cd:9c:ca:3d:e6:43:61:fe:44:
f0:15:87:6e:bd:88:87:05:ae:5d:9a:cb:a2:b6:9e:
f6:d9:20:86:53:e2:95:86:a5:27:79:7a:9c:d3:ca:
4e:52:8a:de:bd:15:94:1c:98:44:01:fb:58:73:83:
ca:2b:ae:03:12:99:14:33:82:b7:70:e7:52:c2:83:
65:ec:e2:87:e8:93:6a:28:48:8e:9f:3e:a2:06:4d:
2c:4c:70:21:94:8e:6b:ce:f7:30:12:84:65:ff:15:
f4:68:46:4e:a3:13:36:43:cb:78:6d:2d:d7:a0:23:
d0:b8:27:a0:aa:96:47:96:a3:85:40:d0:8c:8e:f5:
51:d9:62:a6:d7:a3:ae:98:9c:ec:96:a0:fb:36:e8:
d9:2b:80:29:1b:7b:de:c2:f8:ea:68:62:ad:95:f0:
6c:c1:61:4b:3d:e8:93:e9:17:9c:63:e3:4c:30:17:
36:2d:25:82:ec:12:5f:b3:8e:8b:ab:5a:b6:f9:ad:
c5:fe:b7:b5:27:01:a2:55:24:b5:f0:f7:2b:2b:8a:
7e:41:20:c3:77:4e:80:8a:4a:48:a7:12:5f:bd:37:
1d:2f:28:eb:55:21:c9:be:76:a4:f5:b1:e4:93:b3:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:32:EC:4C:6E:9C:BE:65:30:4F:25:A0:12:14:17:0C:B0:8F:08:55
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/1-jLsTG6cvmUwTyWgEhQXDLCPCFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.56.0/22
160.238.124.0/22
Signature Algorithm: sha256WithRSAEncryption
73:eb:8d:4c:c2:09:d2:a9:2e:a7:28:d6:3f:22:e8:c3:53:d9:
d6:99:6a:c3:93:34:9a:65:59:e3:90:0b:6d:19:dc:55:2d:82:
aa:ab:00:6f:0f:41:10:4c:5d:4c:af:f2:4f:6d:1a:b5:42:51:
de:a6:77:45:7e:9c:e1:b9:71:8b:76:db:c5:7d:da:54:0c:f1:
5d:b2:7a:e6:93:a6:ef:fe:7b:9f:1c:da:aa:04:20:35:11:9c:
cd:7f:11:0a:38:71:e4:23:0d:a5:6e:a4:56:37:43:a8:2e:5f:
c2:9e:53:e5:2a:94:e0:a0:5d:b3:7c:1a:07:9a:d1:1d:54:20:
61:51:21:f2:e5:3a:3f:1b:53:f7:55:62:b0:68:38:f6:f4:0b:
1d:0c:34:80:5c:30:78:17:ae:d1:89:56:7b:04:2c:27:60:58:
17:d3:1a:05:fe:fa:95:8a:62:04:85:6c:50:7a:39:29:60:29:
f0:27:60:bc:32:f3:d8:47:aa:f3:f6:a5:ae:4b:2f:40:a5:21:
e7:24:56:df:9e:f7:fd:6a:18:2f:9f:f8:9b:65:1a:9d:af:fa:
c5:05:96:75:29:d8:1a:52:6b:42:ac:78:3f:65:de:1b:f6:56:
65:c6:25:a9:51:4a:37:70:a6:05:c5:ae:4a:cd:3e:55:3f:2f:
30:c8:7f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:05 2025 by rpki-client on console.sobornost.net