Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/a6gSjoyyxA0jzVsKg2TRp_kSrLQ.roa
File: a6gSjoyyxA0jzVsKg2TRp_kSrLQ.roa (raw, json)
Hash identifier: TkZgEIE0WCyZ9imlr2J33jw3qYRJMd6zJEIKXRGdgO0=
Subject key identifier: 6B:A8:12:8E:8C:B2:C4:0D:23:CD:5B:0A:83:64:D1:A7:F9:12:AC:B4
Certificate issuer: /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial: 0194258F59BBE16042CDC7793794CBE68B3B
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/a6gSjoyyxA0jzVsKg2TRp_kSrLQ.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 45.81.140.0/24 maxlen: 24
45.81.141.0/24 maxlen: 24
45.81.142.0/24 maxlen: 24
45.81.143.0/24 maxlen: 24
91.188.216.0/24 maxlen: 24
91.188.217.0/24 maxlen: 24
91.188.218.0/24 maxlen: 24
91.188.219.0/24 maxlen: 24
185.182.188.0/24 maxlen: 24
185.182.189.0/24 maxlen: 24
185.182.190.0/24 maxlen: 24
185.182.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:59:bb:e1:60:42:cd:c7:79:37:94:cb:e6:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ba8128e8cb2c40d23cd5b0a8364d1a7f912acb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:ae:10:0d:64:6c:d9:63:7b:3d:6d:19:d2:
2b:3f:be:5f:05:bc:63:1c:12:29:fb:96:c7:f5:45:
69:98:8d:45:34:6a:09:07:90:0b:94:9f:fa:ce:b1:
0f:66:15:6c:58:7b:22:eb:67:44:b7:14:7e:ed:01:
c0:74:f6:b9:d4:7e:be:71:a2:b0:50:d6:ad:a2:54:
27:ea:2b:5e:d3:54:47:22:da:d9:8d:41:76:11:b6:
69:b4:fa:d1:c9:59:d4:cc:fc:e1:e6:fb:16:8f:63:
01:3b:05:7c:44:0a:fd:87:78:c1:ac:02:73:fa:aa:
dd:f5:bd:9e:c3:0d:df:95:26:f9:8e:37:4c:20:5b:
9c:10:8f:de:25:60:ee:28:7e:58:9b:1c:47:39:64:
7c:0f:1b:02:a1:f8:6f:1a:e7:d3:17:2c:39:7c:38:
2b:49:ee:05:14:e5:ff:aa:e5:98:6c:e6:1b:12:26:
34:3f:c7:0d:74:90:a6:ff:d5:b4:9e:a4:16:3f:fb:
cf:35:21:e0:2c:bd:8c:7a:4d:d5:25:56:39:0f:f8:
9b:57:a0:13:1e:3d:3a:c1:ec:13:ca:48:17:ad:68:
66:5f:9c:d2:35:03:37:b7:0e:90:18:00:bc:9b:dc:
5c:fe:61:2b:0f:a2:84:59:91:df:70:e7:59:40:1d:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A8:12:8E:8C:B2:C4:0D:23:CD:5B:0A:83:64:D1:A7:F9:12:AC:B4
X509v3 Authority Key Identifier:
keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/a6gSjoyyxA0jzVsKg2TRp_kSrLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.140.0/22
91.188.216.0/22
185.182.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:37:ee:d9:d2:d9:df:19:bf:18:c0:3a:dd:2a:51:45:f0:b5:
e3:32:52:c3:fc:e4:14:e9:a5:21:81:ce:dc:a9:69:13:82:d3:
8b:65:e2:4a:f4:a3:0b:d3:c2:58:5b:48:bf:9c:f0:b9:d2:68:
5f:9d:65:4d:06:e7:e3:2b:5d:9e:b7:35:a0:71:27:ca:7e:e1:
89:71:17:5c:45:61:f1:1b:92:d3:8e:80:de:62:3b:ef:95:a5:
92:1f:4a:99:b4:de:0e:07:23:1f:e3:ed:3d:14:8a:48:86:28:
d1:c7:17:c4:70:25:aa:27:0f:07:08:05:c5:4d:4e:c6:0e:6a:
84:5f:09:41:4b:f9:77:07:c0:1e:19:2e:4d:2d:05:b3:c3:df:
40:49:92:ad:9d:b1:46:ec:1a:96:9a:1d:2c:c4:0e:d9:0e:0a:
f6:af:b8:ee:e9:87:18:b0:c2:56:50:16:d9:64:f3:20:db:28:
b9:a3:fb:8a:d2:81:e2:a0:ec:65:54:7d:d7:3d:0b:f3:01:52:
ff:27:f5:d1:94:70:aa:c1:7f:98:69:74:2f:8e:f7:3b:c7:36:
0a:b6:40:06:10:b2:ad:c6:8a:54:ab:46:fd:4e:db:3a:bf:d8:
63:5f:27:b5:f7:dc:5d:25:b4:ed:fd:01:a5:27:b3:5b:3c:e6:
9d:16:16:a2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlj1m74WBCzcd5N5TL5os7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMjdkNDVmYzE4YmE5MTdhYjFlODlhMTdlZjBiNjM2MDk4
NDgyMjQwHhcNMjUwMTAyMDU0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmE4MTI4ZThjYjJjNDBkMjNjZDViMGE4MzY0ZDFhN2Y5MTJhY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3muEA1kbNljez1tGdIrP75fBbxj
HBIp+5bH9UVpmI1FNGoJB5ALlJ/6zrEPZhVsWHsi62dEtxR+7QHAdPa51H6+caKw
UNatolQn6ite01RHItrZjUF2EbZptPrRyVnUzPzh5vsWj2MBOwV8RAr9h3jBrAJz
+qrd9b2eww3flSb5jjdMIFucEI/eJWDuKH5YmxxHOWR8DxsCofhvGufTFyw5fDgr
Se4FFOX/quWYbOYbEiY0P8cNdJCm/9W0nqQWP/vPNSHgLL2Mek3VJVY5D/ibV6AT
Hj06wewTykgXrWhmX5zSNQM3tw6QGAC8m9xc/mErD6KEWZHfcOdZQB2hJQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGuoEo6MssQNI81bCoNk0af5Eqy0MB8GA1UdIwQY
MBaAFK8n1F/Bi6kXqx6JoX7wtjYJhIIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80NDE3NTUtYjUyZi00ZmI2LWIzZWYt
N2FjYmM2YzlmOTg1LzEvYTZnU2pveXl4QTBqelZzS2cyVFJwX2tTckxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80NDE3NTUtYjUyZi00ZmI2LWIzZWYtN2FjYmM2YzlmOTg1
LzEvcnlmVVg4R0xxUmVySG9taGZ2QzJOZ21FZ2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVGMAwQC
W7zYAwQCuba8MA0GCSqGSIb3DQEBCwUAA4IBAQAaN+7Z0tnfGb8YwDrdKlFF8LXj
MlLD/OQU6aUhgc7cqWkTgtOLZeJK9KML08JYW0i/nPC50mhfnWVNBufjK12etzWg
cSfKfuGJcRdcRWHxG5LTjoDeYjvvlaWSH0qZtN4OByMf4+09FIpIhijRxxfEcCWq
Jw8HCAXFTU7GDmqEXwlBS/l3B8AeGS5NLQWzw99ASZKtnbFG7BqWmh0sxA7ZDgr2
r7ju6YcYsMJWUBbZZPMg2yi5o/uK0oHioOxlVH3XPQvzAVL/J/XRlHCqwX+YaXQv
jvc7xzYKtkAGELKtxopUq0b9Tts6v9hjXye199xdJbTt/QGlJ7NbPOadFhai
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:08 2025 by rpki-client on console.sobornost.net