Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/EFku_9VXqbesZmjqxLjBcuB7CJQ.roa
File: EFku_9VXqbesZmjqxLjBcuB7CJQ.roa (raw, json)
Hash identifier: NldkodBx9XHI5VbEYIs7dZXK6yR3WU54I+HEv9PZwY0=
Subject key identifier: 10:59:2E:FF:D5:57:A9:B7:AC:66:68:EA:C4:B8:C1:72:E0:7B:08:94
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 0194236A3C5A6E8489AE838365265D545AFB
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/EFku_9VXqbesZmjqxLjBcuB7CJQ.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201188
IP address blocks: 45.151.184.0/22 maxlen: 22
45.151.184.0/24 maxlen: 24
45.151.185.0/24 maxlen: 24
45.151.186.0/24 maxlen: 24
45.151.187.0/24 maxlen: 24
2a0f:3500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3c:5a:6e:84:89:ae:83:83:65:26:5d:54:5a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10592effd557a9b7ac6668eac4b8c172e07b0894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:b1:1d:24:5a:50:e5:67:7f:60:93:28:b0:
c3:64:96:82:64:bf:f1:ab:8a:45:51:4f:66:3f:5f:
4d:9b:df:7f:0a:0e:6c:64:7b:b6:14:22:3c:6c:f0:
c3:a3:2d:29:dc:f6:ac:6c:4b:e4:45:d6:06:ae:6e:
81:1b:cd:9c:17:12:92:dd:cb:4f:82:fc:da:3c:6e:
e8:2d:57:5f:e6:93:32:12:15:87:cf:8d:24:f6:83:
37:05:b8:96:3a:41:1a:45:19:e6:82:06:78:23:8a:
a2:3f:3b:68:1e:10:a5:c8:66:15:e8:e3:a5:9c:d6:
60:14:77:06:49:9b:fa:b6:ce:72:0a:8a:e8:69:0a:
cb:63:a4:43:c9:84:72:65:22:32:31:20:f3:68:7c:
b6:7c:75:20:e6:47:07:b9:f3:5f:3a:87:d7:fc:b0:
cb:7f:6d:e2:01:36:c0:6f:f2:af:5c:9b:72:2b:7a:
fb:97:9c:d6:a5:16:b3:25:85:0f:3e:ca:e8:bf:e7:
d2:6e:c9:4f:82:c7:4d:fe:cc:09:d5:d7:6e:2b:32:
a1:c7:0e:7b:e5:ec:9b:88:b1:73:f4:92:91:d6:93:
d4:2e:7f:9c:fa:b8:60:f8:e5:d8:94:ec:13:ca:35:
a6:56:ac:50:0e:b6:38:97:94:8d:24:b2:c3:e9:98:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:59:2E:FF:D5:57:A9:B7:AC:66:68:EA:C4:B8:C1:72:E0:7B:08:94
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/EFku_9VXqbesZmjqxLjBcuB7CJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.184.0/22
IPv6:
2a0f:3500::/29
Signature Algorithm: sha256WithRSAEncryption
41:21:44:a3:d9:68:c1:18:9d:95:37:5c:68:07:7a:dd:64:80:
7f:22:32:60:69:d0:a1:18:cb:b2:a3:17:81:2c:05:65:f9:e1:
ed:46:ce:61:d3:8c:e9:1b:33:48:47:44:ca:35:54:23:e4:39:
b6:2b:df:7c:96:15:ac:c4:ac:e1:d5:6b:d3:08:84:99:e2:c9:
4f:8a:a6:f6:9b:83:12:41:08:de:18:84:a4:e2:17:49:b7:f1:
ee:01:77:aa:67:5f:f4:8b:04:0d:b6:8f:ac:e1:b3:12:91:19:
3b:e0:8d:de:ad:34:9a:aa:a3:5d:ac:24:2a:c6:ee:ea:42:b8:
c1:34:b1:34:c8:5c:ed:a6:bf:ee:af:48:ac:37:2b:8a:4e:93:
48:c6:a9:be:ba:e4:d8:57:f7:48:f7:99:df:8f:bd:8c:a5:27:
8a:5a:27:30:f2:d7:26:6d:da:78:17:85:4e:58:dd:d4:93:61:
f2:5a:69:e0:f9:43:1e:22:6d:f9:99:45:35:3b:c8:ee:e3:fb:
1b:5b:60:8e:d8:54:83:57:5e:35:a1:0b:fd:ef:ac:21:35:04:
99:05:25:1c:b8:4d:4f:85:85:05:00:3c:f3:9b:89:4d:f0:e0:
e8:29:fa:e8:a6:82:45:ac:fa:c5:65:6d:5a:fc:66:7c:2d:b7:
95:fa:2e:ce
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjajxaboSJroODZSZdVFr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx
NDlhZmEwHhcNMjUwMTAxMTk0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDU5MmVmZmQ1NTdhOWI3YWM2NjY4ZWFjNGI4YzE3MmUwN2IwODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq76xHSRaUOVnf2CTKLDDZJaCZL/x
q4pFUU9mP19Nm99/Cg5sZHu2FCI8bPDDoy0p3PasbEvkRdYGrm6BG82cFxKS3ctP
gvzaPG7oLVdf5pMyEhWHz40k9oM3BbiWOkEaRRnmggZ4I4qiPztoHhClyGYV6OOl
nNZgFHcGSZv6ts5yCoroaQrLY6RDyYRyZSIyMSDzaHy2fHUg5kcHufNfOofX/LDL
f23iATbAb/KvXJtyK3r7l5zWpRazJYUPPsrov+fSbslPgsdN/swJ1dduKzKhxw57
5eybiLFz9JKR1pPULn+c+rhg+OXYlOwTyjWmVqxQDrY4l5SNJLLD6ZhuPQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBBZLv/VV6m3rGZo6sS4wXLgewiUMB8GA1UdIwQY
MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt
ZWYyZDUzYjVhMzRkLzEvRUZrdV85VlhxYmVzWm1qcXhMakJjdUI3Q0pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk
LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZe4MA0E
AgACMAcDBQMqDzUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBIUSj2WjBGJ2VN1xoB3rd
ZIB/IjJgadChGMuyoxeBLAVl+eHtRs5h04zpGzNIR0TKNVQj5Dm2K998lhWsxKzh
1WvTCISZ4slPiqb2m4MSQQjeGISk4hdJt/HuAXeqZ1/0iwQNto+s4bMSkRk74I3e
rTSaqqNdrCQqxu7qQrjBNLE0yFztpr/ur0isNyuKTpNIxqm+uuTYV/dI95nfj72M
pSeKWicw8tcmbdp4F4VOWN3Uk2HyWmng+UMeIm35mUU1O8ju4/sbW2CO2FSDV141
oQv976whNQSZBSUcuE1PhYUFADzzm4lN8ODoKfropoJFrPrFZW1a/GZ8LbeV+i7O
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net