Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/00NF96d-dOF2R-sgDmx7SF7E4DA.roa
File: 00NF96d-dOF2R-sgDmx7SF7E4DA.roa (raw, json)
Hash identifier: 2kpq15gaRBQ+O1CnsoIPK/y+/hQJxoJIQJu3v6gmr5I=
Subject key identifier: D3:43:45:F7:A7:7E:74:E1:76:47:EB:20:0E:6C:7B:48:5E:C4:E0:30
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244551182336644DFF97D307544AA27D
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/00NF96d-dOF2R-sgDmx7SF7E4DA.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30734
IP address blocks: 62.244.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:51:18:23:36:64:4d:ff:97:d3:07:54:4a:a2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34345f7a77e74e17647eb200e6c7b485ec4e030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:54:ff:ef:60:bb:c8:72:51:9c:16:5b:47:
c0:2f:29:7b:d3:29:f9:70:7e:89:f5:9e:75:fe:82:
42:cc:30:05:ae:07:94:d4:49:bc:f7:eb:bb:65:79:
86:f4:d1:31:4b:20:31:f3:85:52:80:22:05:9b:f9:
97:55:4a:99:d7:f4:db:6b:ab:e0:aa:b5:83:3b:3d:
24:1a:83:1b:24:68:4e:66:a3:9d:82:49:98:10:f5:
da:3d:ec:af:ff:1d:6c:1e:ad:11:5d:82:22:ee:4e:
fa:0a:7d:86:48:4e:1f:c6:cf:66:96:77:5d:1f:f8:
40:ec:ae:7a:31:79:66:ba:ae:7b:86:16:09:6c:39:
a0:9c:36:e0:41:98:07:da:d4:cb:04:35:61:97:b4:
4e:a7:d1:21:c7:9b:06:f8:db:68:7f:1e:b0:f1:fb:
ef:f3:c4:08:d6:09:48:a8:57:bc:d9:d4:ed:44:27:
2e:82:25:9f:ea:0e:11:36:65:e0:58:98:30:3e:91:
f8:19:64:07:21:e3:a9:25:b6:23:81:cd:d0:c6:33:
03:8c:30:6f:da:ed:02:ee:49:0a:7e:20:56:80:d2:
fe:9e:81:b4:eb:d6:6b:83:6d:d5:5f:9e:0f:42:4d:
22:c4:74:45:1f:5f:b8:15:a5:0f:82:13:31:78:d4:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:45:F7:A7:7E:74:E1:76:47:EB:20:0E:6C:7B:48:5E:C4:E0:30
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/00NF96d-dOF2R-sgDmx7SF7E4DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.221.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:02:e8:2e:83:78:04:90:51:c8:f6:1f:e0:eb:8e:85:2d:fd:
fc:07:f6:58:7a:cb:fd:0a:c7:de:fb:99:fe:9b:ff:0b:5d:c3:
1e:95:f0:e5:d3:0e:e6:a0:07:54:51:5d:78:b9:94:47:c2:ac:
34:54:2d:aa:e4:58:73:98:4a:32:74:e7:1f:a3:c8:08:ec:8d:
17:f4:ed:db:fa:1e:11:81:db:1e:ae:85:56:35:63:7c:cf:14:
00:8d:56:14:0a:78:f4:5d:3b:c7:9d:05:e5:2e:30:69:ff:96:
82:8c:87:e7:96:fb:9b:cc:b3:7b:d5:d7:fa:92:9d:81:c0:16:
8f:0c:ae:a3:fe:63:b6:e4:03:8f:20:24:88:a7:84:5d:41:c7:
91:a6:8f:2b:ac:59:40:07:19:78:41:8e:4d:ed:74:46:5f:51:
bb:cb:db:85:63:16:2b:f8:a4:87:7b:16:43:c6:2f:8a:3c:03:
df:9c:b6:6d:d0:17:20:8c:c2:5b:f7:06:7f:a1:24:5e:c4:7b:
24:8b:92:3d:00:d5:f5:52:f6:51:dc:88:cb:c7:d9:9d:5e:d2:
ca:7a:07:cb:ed:3c:31:b1:6f:60:27:29:0c:2a:06:6a:81:ce:
42:01:89:6f:ff:fe:c3:0a:68:a5:66:83:2a:d8:44:04:4e:48:
d8:3b:b2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net