Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/9xc32CvuOjNWHQB-PWYWWQOY_yA.roa
File: 9xc32CvuOjNWHQB-PWYWWQOY_yA.roa (raw, json)
Hash identifier: PjbNQ/Rs2a2yPfO42XDBv2ntO3mtq/Wj2Yqgz9eO9jA=
Subject key identifier: F7:17:37:D8:2B:EE:3A:33:56:1D:00:7E:3D:66:16:59:03:98:FF:20
Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Certificate serial: 0194221FCBE77324F71315E1B408EF1D686B
Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/9xc32CvuOjNWHQB-PWYWWQOY_yA.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50563
IP address blocks: 45.8.76.0/22 maxlen: 22
45.8.76.0/23 maxlen: 23
45.8.76.0/24 maxlen: 24
45.8.77.0/24 maxlen: 24
45.8.78.0/23 maxlen: 23
45.8.78.0/24 maxlen: 24
45.8.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cb:e7:73:24:f7:13:15:e1:b4:08:ef:1d:68:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f71737d82bee3a33561d007e3d6616590398ff20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:ac:07:af:8a:42:42:21:7e:27:3d:ed:32:
d6:2f:d9:9b:21:5a:07:e8:62:63:6d:af:17:08:84:
c9:98:d7:f2:4a:1a:b3:de:4b:97:d6:20:d8:26:6e:
81:fd:d0:c9:c0:d3:de:69:63:ed:30:c7:d0:e9:ef:
50:e7:76:76:33:82:87:84:58:86:f6:c5:fb:e2:4c:
dc:0d:b7:42:5b:a1:8f:5d:00:42:55:dc:26:b7:e3:
b1:fe:cd:f8:0a:6b:a9:5e:44:15:45:c4:88:61:a4:
81:e3:c2:f5:68:73:be:d1:93:e6:83:cc:fa:2e:c1:
03:22:b5:40:61:41:68:d6:6c:68:df:48:f1:b4:1f:
4c:4f:fa:27:4e:b2:2d:f2:be:d7:05:69:7d:25:79:
42:f3:dd:4b:f6:68:a2:96:ce:d6:93:48:6d:a3:6c:
e4:98:8c:c7:dd:f6:07:43:f3:40:e5:b6:f1:d1:f1:
5b:a3:55:d0:68:b7:34:00:60:01:04:d1:0e:07:49:
ac:04:d0:a6:50:f7:6c:2c:90:79:7e:66:54:67:31:
96:4c:7d:df:9d:6b:87:b9:68:bd:45:5f:48:4f:c3:
d1:d3:c5:a8:62:f4:6d:a9:ec:c1:c0:58:0b:9c:7e:
7d:ed:7f:65:eb:b6:30:fa:a5:d8:b4:73:79:07:c0:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:37:D8:2B:EE:3A:33:56:1D:00:7E:3D:66:16:59:03:98:FF:20
X509v3 Authority Key Identifier:
keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/9xc32CvuOjNWHQB-PWYWWQOY_yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:40:65:75:ad:7f:dd:90:39:98:48:e2:cc:27:d5:6d:f1:13:
e1:4a:2f:31:5c:31:8d:a5:2a:be:ca:8a:82:67:60:47:d6:7b:
38:af:be:47:45:b4:0f:92:57:3b:a9:19:26:21:3e:04:49:cd:
de:6b:d5:37:97:41:c5:61:94:eb:4c:08:53:17:ff:af:7c:ce:
a0:8f:2c:c2:4e:90:d7:58:05:66:c6:16:72:9d:ab:27:e3:60:
0d:c0:fa:ac:17:e1:3a:cf:96:11:cd:41:ec:84:47:47:56:44:
8a:f5:83:6f:de:7d:8a:0a:47:60:c9:8b:db:fb:b0:27:06:a2:
1b:21:ee:9b:fa:79:ea:5c:60:6f:1e:d0:65:f4:b3:1a:87:62:
c1:f8:28:4b:3f:8c:a3:66:05:25:08:b4:e3:0c:7f:d4:7c:58:
8f:d7:33:59:83:6d:4f:c7:2e:46:83:04:19:4f:ed:7e:3b:d3:
bd:29:16:a3:32:da:11:57:4e:65:a3:56:70:29:fe:a2:6d:b6:
75:1a:11:d6:0e:75:c4:e1:62:10:cd:a1:8b:87:aa:3f:37:69:
30:77:58:5c:c1:18:16:d3:29:b9:3e:3e:d4:60:a9:87:d2:94:
ed:84:2d:60:4c:7f:3b:83:56:f3:c9:34:03:73:4e:e8:ec:4d:
c6:f3:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net