Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/RErNlaOpDzrD6wSfbbH1rz1M530.roa
File: RErNlaOpDzrD6wSfbbH1rz1M530.roa (raw, json)
Hash identifier: wgBHw0Ti6lWp1Z64AKciY1+PcChXXuuN8WEU42REeQ4=
Subject key identifier: 44:4A:CD:95:A3:A9:0F:3A:C3:EB:04:9F:6D:B1:F5:AF:3D:4C:E7:7D
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 0195184A4916B78DB246C987E5D3E558A86E
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/RErNlaOpDzrD6wSfbbH1rz1M530.roa
Signing time: Tue 18 Feb 2025 09:01:16 +0000
ROA not before: Tue 18 Feb 2025 09:01:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213968
IP address blocks: 86.48.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:4a:49:16:b7:8d:b2:46:c9:87:e5:d3:e5:58:a8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Feb 18 09:01:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=444acd95a3a90f3ac3eb049f6db1f5af3d4ce77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:10:e9:b5:dc:13:e8:47:6d:6c:ac:37:3f:
c6:0f:4a:00:80:93:4a:b0:7c:a7:94:0b:27:b9:d3:
9d:17:c1:a8:e3:46:8f:63:c3:64:f6:ff:68:1a:65:
df:5c:3a:29:d3:bf:34:9c:b0:c0:ea:9b:5d:d0:3d:
6c:91:41:9a:c7:71:ab:2b:1e:14:54:6a:f8:ec:72:
93:69:d3:26:16:ea:87:8a:88:c2:63:32:c8:43:7c:
a0:58:93:83:eb:ad:cf:77:6e:f4:15:f1:09:8f:6c:
9a:d7:4a:64:c9:6e:af:44:11:08:b6:37:02:2b:cc:
21:a4:55:3f:48:32:b8:6a:82:a3:b9:5e:78:45:49:
54:20:f2:7e:4b:90:12:ea:9c:80:8f:35:8a:17:46:
44:6e:20:0c:f0:d2:95:3d:50:86:05:9e:f1:21:41:
2a:e4:29:c8:4e:56:ff:48:9d:00:70:4d:a7:ed:0f:
ce:d5:2d:8b:e8:9e:c8:e3:d1:11:06:d0:ad:01:ff:
40:40:bf:3c:90:fc:3b:65:5a:61:1b:c6:d6:b9:e5:
5c:bf:bc:f7:70:f3:bf:62:ff:ad:dc:fb:61:13:81:
12:81:64:d5:79:c1:02:84:61:e4:66:d1:d5:fa:a4:
fb:6c:c1:4e:4e:88:94:bf:d6:2c:54:9b:7f:d1:98:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:CD:95:A3:A9:0F:3A:C3:EB:04:9F:6D:B1:F5:AF:3D:4C:E7:7D
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/RErNlaOpDzrD6wSfbbH1rz1M530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:1f:b8:d1:c0:a3:88:25:03:54:75:c8:ea:0f:bb:c3:f2:d1:
0a:ae:bc:11:03:00:b8:7e:2b:42:da:9e:59:48:66:be:8c:04:
9c:2a:34:c9:4b:cb:98:5e:9f:f2:d9:ce:0f:e6:10:78:8e:00:
d2:e9:b7:df:73:b9:cc:b0:70:47:aa:fc:18:d2:ce:81:b9:76:
b0:02:5b:cd:45:8f:8c:20:c7:45:82:b0:f0:d5:50:8c:4d:f4:
e3:c4:cf:0d:27:7b:f9:a7:b9:cb:ea:82:9f:5e:14:c4:48:d8:
e0:c4:67:9f:db:c6:32:7e:65:2c:7d:de:06:c2:aa:80:4f:4b:
8c:0d:22:e5:9d:b4:eb:f0:41:fe:27:28:f8:f5:97:e4:2e:74:
88:70:5b:13:63:8d:1d:b8:e1:f4:4a:52:ba:e3:d2:7a:b1:ec:
e9:bc:73:1e:68:7c:45:3e:37:8d:f9:07:70:f8:b8:43:24:2d:
78:27:5d:c0:d4:cf:6c:a0:a8:ec:64:27:95:3b:29:0a:4a:f8:
f2:e2:f8:7d:6e:2b:52:2e:5d:c9:8d:c1:d0:ba:e1:1e:8f:a2:
33:b7:4b:2c:7a:8f:bf:0d:68:be:8d:bc:d9:bd:6e:57:13:fc:
ad:c9:ba:b9:cb:77:ca:7b:de:f1:3f:7c:06:23:92:11:c3:81:
cf:32:2b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net