Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/jHj1kA03qC8i8hguuEC8ASnj4XQ.roa
File: jHj1kA03qC8i8hguuEC8ASnj4XQ.roa (raw, json)
Hash identifier: 6J5ezyoc/LI46xWXhW/cUUltYyOZg4CBJG0jaVAl1nQ=
Subject key identifier: 8C:78:F5:90:0D:37:A8:2F:22:F2:18:2E:B8:40:BC:01:29:E3:E1:74
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 019421443A40E0BEC67B55EC30EE26CBD350
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/jHj1kA03qC8i8hguuEC8ASnj4XQ.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25465
IP address blocks: 45.83.96.0/24 maxlen: 24
45.83.97.0/24 maxlen: 24
45.83.98.0/24 maxlen: 32
45.83.99.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3a:40:e0:be:c6:7b:55:ec:30:ee:26:cb:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c78f5900d37a82f22f2182eb840bc0129e3e174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:1a:ba:1a:06:8b:fd:fe:11:b8:6e:06:de:
07:c5:f2:db:4b:ac:5c:4d:de:b6:27:d2:8e:5c:3c:
e7:f7:95:b4:39:88:98:38:9b:7a:b4:ee:3c:51:b3:
20:7d:5e:93:16:95:0e:ec:5e:fc:7a:1c:7b:59:ac:
fb:3d:43:34:41:0a:f8:82:62:21:70:42:9d:29:1e:
a3:53:63:02:cf:87:21:0e:d2:3e:58:96:f5:be:4d:
9d:80:90:22:b9:45:4f:26:7c:10:bc:95:1c:fb:a9:
c8:4e:d9:1e:a1:f1:0b:c7:a6:de:fd:23:a0:a3:97:
92:c2:98:fc:a8:81:20:09:30:71:b6:88:9a:f1:66:
c5:72:28:64:9a:4e:31:f7:49:83:b8:84:b9:2e:3b:
f5:a2:d4:0f:09:1a:a9:69:b0:59:f6:70:a1:bc:b9:
1f:17:7f:c8:94:2b:4a:00:ef:dc:2f:a9:63:10:1d:
13:3d:7b:1e:21:3f:4f:ea:cd:58:52:6f:74:b3:9c:
42:ec:c6:d6:ea:e1:18:bd:48:48:52:f7:8f:25:bc:
d9:c6:c7:16:52:e3:67:27:6b:17:52:9d:a0:59:9c:
05:ce:ea:0e:9c:ce:22:20:72:d1:9e:9e:5e:7e:77:
47:5e:93:7e:66:59:2a:e0:f4:5c:5b:3c:47:a0:5c:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:78:F5:90:0D:37:A8:2F:22:F2:18:2E:B8:40:BC:01:29:E3:E1:74
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/jHj1kA03qC8i8hguuEC8ASnj4XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.96.0/22
Signature Algorithm: sha256WithRSAEncryption
20:2d:b5:ba:86:bc:73:ce:f2:0a:59:dd:e1:40:6e:f6:60:65:
45:76:9a:87:52:ce:50:58:91:ab:e0:6c:04:19:05:ee:ef:76:
8e:18:76:a9:2b:9d:91:30:5a:3c:3f:e5:f5:57:d8:18:9c:61:
d1:fe:0d:aa:7a:a2:0e:fa:7e:00:e3:5b:d6:c5:26:9c:af:f3:
2c:c5:93:13:db:b3:9a:d2:e7:63:80:d8:e5:01:21:0a:aa:01:
b3:91:88:3f:e3:24:be:e7:09:45:d4:ed:df:90:9c:18:a0:fc:
68:e4:84:67:e2:0f:e9:95:3c:75:16:8f:e3:90:08:a4:14:7d:
c5:3c:7b:44:6e:e2:7f:a6:cd:d1:c7:f8:fb:d9:09:0a:9d:8d:
6c:b8:61:02:86:df:c6:11:13:2e:76:cd:b6:54:92:54:4a:f1:
89:18:b2:de:3d:21:a0:12:0a:a2:e3:34:48:1e:fe:05:e8:5d:
25:d9:42:c6:fa:15:f2:a4:4a:02:fc:b0:ad:4b:46:09:ad:e8:
6d:43:bc:fd:01:45:02:78:95:b1:02:bd:59:23:71:14:ea:75:
12:c1:ee:fb:f0:a9:09:98:91:a7:a8:d6:74:1e:1f:e7:30:9c:
90:b4:85:fe:03:a3:42:71:9a:93:fe:8c:75:81:3b:97:cc:08:
5e:d5:fa:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRDpA4L7Ge1XsMO4my9NQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzNmYjNiNzI1MjBiODE2OWEyOTI4ZDUzODJlNDlkNjc1
YWQwNjAwHhcNMjUwMTAxMDk0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzc4ZjU5MDBkMzdhODJmMjJmMjE4MmViODQwYmMwMTI5ZTNlMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqAauhoGi/3+EbhuBt4HxfLbS6xc
Td62J9KOXDzn95W0OYiYOJt6tO48UbMgfV6TFpUO7F78ehx7Waz7PUM0QQr4gmIh
cEKdKR6jU2MCz4chDtI+WJb1vk2dgJAiuUVPJnwQvJUc+6nITtkeofELx6be/SOg
o5eSwpj8qIEgCTBxtoia8WbFcihkmk4x90mDuIS5Ljv1otQPCRqpabBZ9nChvLkf
F3/IlCtKAO/cL6ljEB0TPXseIT9P6s1YUm90s5xC7MbW6uEYvUhIUvePJbzZxscW
UuNnJ2sXUp2gWZwFzuoOnM4iIHLRnp5efndHXpN+Zlkq4PRcWzxHoFxAQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIx49ZANN6gvIvIYLrhAvAEp4+F0MB8GA1UdIwQY
MBaAFBwz+ztyUguBaaKSjVOC5J1nWtBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDct
OTUwNDU1ODY4MDJlLzEvakhqMWtBMDNxQzhpOGhndXVFQzhBU25qNFhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDctOTUwNDU1ODY4MDJl
LzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVNgMA0G
CSqGSIb3DQEBCwUAA4IBAQAgLbW6hrxzzvIKWd3hQG72YGVFdpqHUs5QWJGr4GwE
GQXu73aOGHapK52RMFo8P+X1V9gYnGHR/g2qeqIO+n4A41vWxSacr/MsxZMT27Oa
0udjgNjlASEKqgGzkYg/4yS+5wlF1O3fkJwYoPxo5IRn4g/plTx1Fo/jkAikFH3F
PHtEbuJ/ps3Rx/j72QkKnY1suGECht/GERMuds22VJJUSvGJGLLePSGgEgqi4zRI
Hv4F6F0l2ULG+hXypEoC/LCtS0YJrehtQ7z9AUUCeJWxAr1ZI3EU6nUSwe778KkJ
mJGnqNZ0Hh/nMJyQtIX+A6NCcZqT/ox1gTuXzAhe1fpb
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net