Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ibOmWmMkqZptyIuLMKX80ndnCrU.roa
File: ibOmWmMkqZptyIuLMKX80ndnCrU.roa (raw, json)
Hash identifier: lK/5cBo1mj7Pjjk5vQIZJ9djzYGqcKAUUssU73joL2k=
Subject key identifier: 89:B3:A6:5A:63:24:A9:9A:6D:C8:8B:8B:30:A5:FC:D2:77:67:0A:B5
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424454D7467C81C632EA5BF6FD94D15D9
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ibOmWmMkqZptyIuLMKX80ndnCrU.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8869
IP address blocks: 212.133.128.0/18 maxlen: 18
212.133.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4d:74:67:c8:1c:63:2e:a5:bf:6f:d9:4d:15:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89b3a65a6324a99a6dc88b8b30a5fcd277670ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:a3:de:8c:54:6d:7f:1f:24:5b:ab:5d:ec:
81:74:ef:ca:87:0d:83:50:07:69:d2:82:86:7a:0e:
c4:4d:6f:c0:40:27:c9:cc:20:86:54:8f:c7:16:98:
7c:80:33:9c:b6:51:67:d4:41:ce:5f:c3:13:61:a1:
02:52:c9:42:f9:94:15:cf:4e:5c:6e:c8:da:38:4c:
7a:be:97:45:a3:23:af:51:15:e8:13:f2:91:5a:7f:
17:73:c9:65:ed:3c:b4:49:17:f7:0a:9a:88:a2:f3:
74:6d:31:90:e9:cf:82:e8:7a:6d:92:38:a1:6f:a6:
17:06:d4:d2:96:83:37:6b:d2:13:0b:0a:af:f8:42:
39:c4:d0:17:32:06:13:f0:7b:ea:44:43:bc:70:98:
9b:26:20:96:6e:de:14:41:a0:86:32:7b:4d:91:25:
08:72:b1:08:e1:b7:1c:21:73:76:75:b5:73:aa:e1:
34:cd:37:80:40:d4:b4:fd:f4:8b:df:21:a1:26:51:
40:a1:31:9c:71:27:c5:8c:37:8a:b6:8a:f3:55:0e:
5b:84:f5:e7:94:40:65:12:81:53:96:b9:6e:22:9f:
dd:f1:2b:1f:09:e3:36:ce:4c:4c:b4:78:72:c9:31:
39:b7:b8:fe:0e:11:7d:67:b7:d7:7b:28:66:b7:0a:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:A6:5A:63:24:A9:9A:6D:C8:8B:8B:30:A5:FC:D2:77:67:0A:B5
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/ibOmWmMkqZptyIuLMKX80ndnCrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.133.128.0/18
Signature Algorithm: sha256WithRSAEncryption
37:43:5a:e3:66:d4:7a:6d:33:ff:3f:06:0f:28:fe:34:04:a7:
ca:9e:c1:f3:8c:db:af:c0:70:78:ce:39:a3:41:de:2a:e3:c2:
6a:23:c4:ad:16:e6:31:f9:a7:75:65:18:ce:fa:82:0d:ab:3e:
e5:33:b9:b0:3f:74:e7:9d:a4:c9:c9:f8:7c:23:fe:1c:10:78:
d3:74:d2:b3:f6:3f:78:d4:cc:48:ef:10:5a:d8:1b:4b:ee:1b:
98:9e:2a:df:98:44:ea:68:87:21:bb:15:16:52:f7:f3:83:bb:
6b:f3:30:07:d9:40:ce:a8:b6:5b:6d:16:5f:56:01:88:89:d3:
6d:ed:78:c6:5e:27:46:03:93:97:52:57:eb:67:8c:10:e2:91:
ce:a7:b1:6d:b8:8e:36:c4:0a:bb:0e:26:e7:77:e2:2b:c5:3f:
fc:1d:9a:e5:e2:e8:18:a8:2c:61:a9:7a:9d:93:1d:2d:7f:44:
cb:a5:54:7f:19:5d:5c:ba:2c:18:b5:fc:f0:ed:4c:fa:b5:f8:
ee:a9:8c:a9:ba:83:00:4f:24:d1:92:b5:8b:14:a2:8f:43:0a:
d0:49:a0:38:32:a2:2d:9a:ff:37:f5:54:e9:91:be:d9:3f:08:
74:f2:a5:ff:fa:20:df:5e:43:50:62:7f:07:df:81:b9:0f:00:
34:9d:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net