Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WukoJKvYevk5DCDC_j-VNd6UEsY.roa
File: WukoJKvYevk5DCDC_j-VNd6UEsY.roa (raw, json)
Hash identifier: oH9XlTl7oEKCB+DPnY3H0aSfeO00Y6Ze9ixEhvL+Fj8=
Subject key identifier: 5A:E9:28:24:AB:D8:7A:F9:39:0C:20:C2:FE:3F:95:35:DE:94:12:C6
Certificate issuer: /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial: 0195EC1F89F5BAC457AD0E2843757D38E268
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WukoJKvYevk5DCDC_j-VNd6UEsY.roa
Signing time: Mon 31 Mar 2025 12:14:04 +0000
ROA not before: Mon 31 Mar 2025 12:14:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210869
IP address blocks: 45.13.68.0/22 maxlen: 23
45.13.68.0/24 maxlen: 24
45.13.69.0/24 maxlen: 24
45.13.70.0/24 maxlen: 24
45.13.71.0/24 maxlen: 24
2a0e:df00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:1f:89:f5:ba:c4:57:ad:0e:28:43:75:7d:38:e2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Validity
Not Before: Mar 31 12:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ae92824abd87af9390c20c2fe3f9535de9412c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:04:c2:c2:2a:89:c6:84:d2:af:46:27:b0:
38:ac:8d:f7:0f:31:c5:3a:70:c0:61:67:27:c2:11:
05:bd:ff:88:e4:85:a4:ea:a0:bb:94:63:6a:6a:e4:
42:3c:bb:bd:7a:0b:66:59:b3:6e:ab:50:e3:2f:a8:
af:cc:9a:26:97:f1:01:fa:bd:16:f0:64:e3:17:93:
45:1c:6c:8f:9b:f3:99:46:85:20:9b:fb:02:48:98:
5b:fc:25:6d:56:75:53:be:93:8b:cf:5b:1f:d6:92:
ef:86:9b:d8:3e:6d:60:4e:fb:44:48:4f:1c:52:02:
83:73:22:98:59:df:e0:2c:c1:6f:9f:91:6a:2b:96:
94:cc:a4:9c:3a:49:6c:ac:08:16:90:1c:3d:71:b9:
d2:a0:09:5a:5a:de:7c:72:a1:24:97:02:c2:75:bf:
38:9e:30:ce:81:91:cd:03:b8:99:97:00:86:16:2b:
4c:30:4f:76:34:97:ca:d3:e2:35:05:98:73:87:c7:
37:5b:45:8e:90:48:f4:21:4c:90:2e:a5:00:fe:83:
46:fb:d6:07:91:77:9e:f7:52:5e:6d:c8:4f:11:49:
88:8c:cc:b8:16:7c:1c:f3:07:97:d1:19:4f:b4:e4:
79:3f:b1:a9:e6:0c:18:3f:4a:cb:88:e1:c8:16:d0:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E9:28:24:AB:D8:7A:F9:39:0C:20:C2:FE:3F:95:35:DE:94:12:C6
X509v3 Authority Key Identifier:
keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WukoJKvYevk5DCDC_j-VNd6UEsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.68.0/22
IPv6:
2a0e:df00::/32
Signature Algorithm: sha256WithRSAEncryption
10:0f:50:0b:d0:0a:90:1a:74:4e:f8:34:63:c6:2e:2a:9a:53:
ad:07:64:9d:f2:a0:2d:8c:6a:5c:13:e7:28:35:14:57:90:bd:
0b:e8:34:68:5f:d9:ce:17:a0:34:60:3c:65:7c:b4:d3:17:ed:
ec:61:0d:d5:4c:08:03:d9:fe:c8:b5:8e:38:3d:39:78:07:f1:
56:9f:5c:0a:73:77:59:25:bc:60:10:67:21:7f:8b:f0:14:8a:
ac:0b:ae:23:e4:f1:e3:af:2b:b9:2a:97:06:30:1e:67:2f:8e:
d4:67:15:dc:e6:3e:c5:46:93:39:37:75:e7:8d:04:c1:bb:5f:
a6:3e:01:d9:dd:d9:c6:ba:d1:5e:bd:32:86:81:53:05:67:3a:
d4:18:87:51:76:39:b5:a6:50:3e:c8:79:18:d9:2d:e4:84:4c:
8b:3e:1a:b5:c5:c4:ea:03:07:f6:80:7e:1f:01:a4:41:05:97:
b0:70:18:56:df:b9:04:ee:b7:98:61:b8:d3:99:d5:0b:60:b7:
e3:02:4d:0e:42:a7:45:2a:f9:f7:4d:0f:51:be:a1:01:5f:ff:
a1:bc:dd:e2:65:fc:22:2f:c3:9c:fb:fb:f7:f1:2a:40:9b:8a:
07:79:e7:bf:bd:d0:e8:2a:67:94:f7:86:09:cf:1c:8f:b6:e9:
4a:cd:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net