Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/MYyuhG97imzI5Pm1fkTfDLbKlzY.roa
File: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (raw, json)
Hash identifier: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=
Subject key identifier: 31:8C:AE:84:6F:7B:8A:6C:C8:E4:F9:B5:7E:44:DF:0C:B6:CA:97:36
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 019424B2AD76D3FB2DF52C6A4B434F2B16F1
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/MYyuhG97imzI5Pm1fkTfDLbKlzY.roa
Signing time: Thu 02 Jan 2025 01:47:57 +0000
ROA not before: Thu 02 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39522
IP address blocks: 45.87.208.0/22 maxlen: 22
45.87.208.0/24 maxlen: 24
45.87.209.0/24 maxlen: 24
45.87.210.0/24 maxlen: 24
45.87.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ad:76:d3:fb:2d:f5:2c:6a:4b:43:4f:2b:16:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Jan 2 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=318cae846f7b8a6cc8e4f9b57e44df0cb6ca9736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:72:3c:db:c8:7d:22:18:f3:3d:7f:b0:6c:
8c:76:af:bf:8f:24:66:db:fc:df:69:66:d2:8a:2f:
10:7e:c8:e6:d0:2c:22:c4:89:aa:c1:a6:fd:02:b7:
e9:fa:45:0a:b3:e3:56:e1:c3:45:59:3f:2c:30:a7:
2c:98:86:18:49:c1:f6:f9:85:73:c4:b5:01:b3:25:
55:0a:38:16:8d:f1:79:1c:90:60:50:19:ec:d6:fe:
6c:62:d3:a5:4c:6c:21:f0:86:32:0b:52:11:7a:9b:
8f:e1:09:ab:32:89:23:61:7a:09:8b:d0:a6:57:56:
41:1b:08:51:75:8d:21:8f:38:3d:bc:86:f6:f6:f8:
88:2e:9c:26:2b:73:8b:a9:f6:cd:b6:28:e9:22:d2:
05:eb:6a:a4:aa:d0:db:c8:3d:f9:8e:cb:4e:28:fb:
69:bd:dd:86:47:49:d4:eb:95:20:7f:6c:5e:4b:c8:
63:4a:46:51:bb:4b:bf:5c:63:3d:bf:8a:21:7f:ed:
e9:47:68:6b:f7:ab:23:75:c2:04:69:06:7b:df:7d:
50:47:6a:1e:59:0b:bb:86:6e:7b:4e:5b:79:f6:83:
df:69:ed:87:15:30:4d:d6:41:37:27:5d:bc:83:58:
12:1e:a6:e7:71:01:d3:59:37:71:f3:7c:6a:d8:2f:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:AE:84:6F:7B:8A:6C:C8:E4:F9:B5:7E:44:DF:0C:B6:CA:97:36
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/MYyuhG97imzI5Pm1fkTfDLbKlzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:b6:ad:c5:87:82:72:de:05:81:9e:0a:3a:67:6a:a2:c8:bb:
43:fb:37:1c:dc:ca:7f:27:64:65:13:11:93:7a:31:f9:b1:53:
b4:aa:b2:25:88:88:b6:9c:89:62:cf:7b:4d:99:2b:0b:49:ed:
13:39:4d:ad:27:cb:1c:ff:5c:9b:35:05:d1:c7:3d:fb:8a:78:
dc:73:c1:b3:2e:ec:54:ea:fd:48:0a:a2:30:1b:dc:b8:71:cc:
22:10:17:5c:47:0a:6e:28:e7:d4:db:9a:21:c3:bf:e8:25:29:
87:e5:6c:85:70:a1:e5:11:a4:e9:78:56:20:23:e8:c3:22:c0:
f0:1c:43:6a:85:e3:fd:3d:d3:a2:5b:80:97:fd:91:a4:5b:84:
75:58:c4:8d:09:cc:13:e6:0d:c3:46:67:95:1d:0f:f9:f5:a1:
30:12:e5:7b:16:24:41:c5:26:73:82:84:c4:3c:13:39:91:6e:
91:6c:8b:2d:ae:79:a5:b8:c0:7c:de:8c:ea:b0:d5:1e:b0:01:
ea:84:51:f4:17:9f:e9:36:50:4d:96:47:f6:16:f9:46:5b:7f:
dd:ae:cd:73:6e:74:59:24:ac:8f:0c:be:5a:5c:36:08:9d:da:
8f:3a:27:e9:dc:d7:54:3f:ad:dd:c6:5c:0d:39:b1:8c:2a:e3:
c6:22:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net