Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/bZEqWQ4d1wH8hJyV04MAPEO0Ygo.roa
File: bZEqWQ4d1wH8hJyV04MAPEO0Ygo.roa (raw, json)
Hash identifier: om8LxQrZJkACoqW8VxCdwbEW0cMygwUVSRnGureg1Lk=
Subject key identifier: 6D:91:2A:59:0E:1D:D7:01:FC:84:9C:95:D3:83:00:3C:43:B4:62:0A
Certificate issuer: /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial: 0194228D2B1245D44CC8D8AAB4927968D390
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/bZEqWQ4d1wH8hJyV04MAPEO0Ygo.roa
Signing time: Wed 01 Jan 2025 15:47:44 +0000
ROA not before: Wed 01 Jan 2025 15:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45035
IP address blocks: 85.204.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2b:12:45:d4:4c:c8:d8:aa:b4:92:79:68:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d912a590e1dd701fc849c95d383003c43b4620a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:04:5c:84:74:4d:4f:73:10:66:74:54:6e:
84:80:62:40:42:ef:13:6f:42:55:55:9f:57:d1:98:
c7:82:d2:10:f9:77:ac:83:10:b2:46:2e:8a:0b:c5:
eb:e3:72:2e:89:4d:5a:13:02:80:72:22:08:cc:cf:
6a:d6:06:ec:89:ea:fb:be:47:99:10:3a:66:81:10:
f6:44:cc:f9:57:71:1f:78:38:fe:2b:ce:12:34:b8:
e1:68:c2:0a:73:6e:d8:ed:54:ba:21:79:92:6e:ff:
54:12:0c:a7:7c:65:53:87:25:8f:28:89:a1:e3:6c:
4f:6c:39:30:64:9a:7d:82:58:bd:d5:b1:18:06:c1:
b8:25:8b:db:bb:ef:52:7e:66:fa:a0:08:75:b1:12:
6f:34:b4:36:1d:88:fc:d9:f6:73:f8:0d:1a:de:9d:
fe:bd:a5:a5:85:e3:78:e1:e8:d0:72:a2:1a:f7:ee:
a2:a5:5e:f4:fc:72:11:1a:d1:ec:82:bf:ae:da:86:
84:d7:e3:d6:69:80:ad:96:a8:02:c5:2f:e5:d4:31:
1d:96:41:58:2f:ce:4c:ae:4f:45:ac:98:5c:a1:ff:
d9:d0:04:e9:e9:93:52:d3:6c:95:e2:02:9a:3c:65:
b0:eb:b5:fa:87:d3:a5:2a:86:80:c9:48:40:99:ab:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:2A:59:0E:1D:D7:01:FC:84:9C:95:D3:83:00:3C:43:B4:62:0A
X509v3 Authority Key Identifier:
keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/bZEqWQ4d1wH8hJyV04MAPEO0Ygo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.45.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ca:96:56:b0:8a:ae:3f:72:af:33:87:ce:dc:d9:20:ac:65:
41:17:a7:08:1a:d6:ec:ef:71:6e:85:0f:f1:36:ca:92:14:b7:
38:96:9d:ff:45:10:43:ef:ca:02:16:34:48:3f:5e:f0:a3:1a:
75:69:7d:f1:e6:03:9a:dc:0a:2a:85:31:e8:3b:dd:93:10:74:
d9:68:d6:a6:84:53:04:25:f2:a3:ce:09:0d:67:17:08:68:e5:
b7:d4:e3:55:d4:86:09:c0:97:f5:95:d9:58:04:98:ea:83:84:
71:e9:7e:80:65:6d:21:25:03:04:77:ed:c3:21:45:17:03:5f:
19:30:7b:70:5c:23:74:01:32:13:ed:2e:42:ed:e1:27:b1:bc:
d8:41:2e:4a:1a:c0:b3:0c:f5:11:ea:ae:4d:ac:80:2a:62:f8:
99:e1:25:70:c5:14:22:b1:7b:00:b3:33:cd:e6:50:ca:76:38:
87:56:cc:0e:46:c1:10:aa:f4:c9:af:4b:da:76:01:7d:c5:c9:
06:d3:f4:8f:58:34:04:1d:fb:49:ff:4f:bf:08:4c:88:d7:30:
f5:fa:33:2e:20:c4:82:97:26:be:dc:03:87:bf:36:91:ba:ed:
e2:2a:9f:88:b5:3e:0c:8d:42:12:11:c2:d6:df:36:7c:31:00:
f0:dd:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net