Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/XjirH4cwDvxlRkAGxm7FSwAK2sM.roa
File: XjirH4cwDvxlRkAGxm7FSwAK2sM.roa (raw, json)
Hash identifier: YF/U/qPEr6M3Q+MIXQrnfUUKIV5n5WTRe7Dd9hsZTtM=
Subject key identifier: 5E:38:AB:1F:87:30:0E:FC:65:46:40:06:C6:6E:C5:4B:00:0A:DA:C3
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 0195F6DBB9B9AC0999C8B73712DF34D1E07C
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/XjirH4cwDvxlRkAGxm7FSwAK2sM.roa
Signing time: Wed 02 Apr 2025 14:15:49 +0000
ROA not before: Wed 02 Apr 2025 14:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2821
IP address blocks: 45.10.139.0/24 maxlen: 24
185.101.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:db:b9:b9:ac:09:99:c8:b7:37:12:df:34:d1:e0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Apr 2 14:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e38ab1f87300efc65464006c66ec54b000adac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:4d:27:d9:7d:28:9f:dd:80:92:cd:ff:1f:
e9:b9:cc:80:53:bd:55:59:c4:58:dc:a2:07:c1:81:
33:d2:f5:ac:72:12:5b:67:82:ef:87:e6:94:87:8c:
4d:00:c0:63:59:25:b9:34:5f:24:9e:05:10:98:ad:
5e:02:46:91:92:b5:c5:29:62:88:6b:86:af:17:a3:
df:57:8a:29:87:2e:ea:c5:20:88:ab:f7:51:30:47:
80:5d:cc:84:0a:ea:92:f1:29:7b:a3:76:c6:97:db:
c6:46:8f:43:54:df:1f:f1:b5:18:1f:c5:06:a1:ae:
a7:29:2c:2c:6c:61:86:e7:34:f8:fd:cc:de:54:59:
27:c2:e6:59:7f:21:6e:14:8c:65:5d:4a:b8:f4:de:
8b:c1:d8:8b:a9:6d:b0:08:11:ab:5c:96:4c:f4:49:
8e:a6:21:3a:25:39:c0:26:b7:8c:e9:ad:07:73:6c:
a8:3c:ae:c2:a6:1a:3a:0a:21:56:26:cc:95:23:e6:
f0:8e:1c:4e:00:5a:f8:79:a9:23:b7:17:ac:ce:3f:
21:7d:14:5b:50:3b:b3:b1:ad:a7:99:ec:4b:d8:76:
37:b7:07:98:af:0c:a7:a7:47:d1:88:f7:90:df:44:
e6:51:95:02:5c:46:4d:72:31:ac:b6:5e:28:b5:11:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:AB:1F:87:30:0E:FC:65:46:40:06:C6:6E:C5:4B:00:0A:DA:C3
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/XjirH4cwDvxlRkAGxm7FSwAK2sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.139.0/24
185.101.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2f:a9:25:5f:6f:07:74:22:ab:e5:f9:09:66:83:44:57:3f:
89:34:54:a2:c6:5c:1e:8e:a2:bd:a8:44:8e:04:be:ca:d1:21:
95:e3:e0:74:23:09:74:16:b5:78:d9:5d:69:07:02:72:ee:46:
fd:d2:53:b9:21:a2:49:f5:0d:c2:66:21:d2:56:26:9f:23:3a:
e3:7c:10:00:89:61:ae:61:d8:41:7b:7a:ab:58:90:a2:f1:d9:
b4:e2:b7:7e:73:8f:5e:fb:c2:df:fd:b4:dc:7e:ce:31:1f:82:
fb:d4:5c:6e:39:f3:75:63:7b:57:6d:da:86:e6:46:4e:79:1e:
24:4d:4b:d5:7b:46:6f:f6:15:d1:b9:63:7e:27:7d:6a:d5:5d:
cc:2c:5d:13:a5:86:75:0c:c3:a8:b3:f0:ed:0c:c0:5a:2f:47:
10:92:56:ed:9b:2c:ae:df:8a:eb:f7:f1:88:39:ee:9f:b3:6f:
54:92:8e:21:f6:47:86:83:2e:8b:f5:8e:9d:2a:81:00:cc:65:
49:3b:b5:2e:a0:32:ec:c8:3e:e1:a3:a2:2e:db:bf:2d:c1:1c:
d8:6f:cc:d4:f2:79:7e:04:8c:0c:7b:f1:ed:16:94:da:c8:71:
89:71:d6:58:e0:f8:71:a9:83:f4:93:22:6a:b3:4f:6e:5e:8b:
35:3a:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net