Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa
File: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (raw, json)
Hash identifier: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=
Subject key identifier: 5E:97:FC:3B:60:DF:C6:D4:91:31:82:DF:1F:82:61:7B:B8:C6:72:BE
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 019425203FC98BAC939C99A0D43FE280BD37
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa
Signing time: Thu 02 Jan 2025 03:47:38 +0000
ROA not before: Thu 02 Jan 2025 03:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47301
IP address blocks: 195.182.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:3f:c9:8b:ac:93:9c:99:a0:d4:3f:e2:80:bd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Jan 2 03:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e97fc3b60dfc6d4913182df1f82617bb8c672be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:73:58:4a:b3:cd:36:d4:31:46:a0:a1:f3:
d5:7d:ce:47:7a:62:2d:0a:59:08:1c:29:42:cf:f8:
b4:b5:1c:a6:bc:61:9e:78:9f:f1:b5:1d:29:56:54:
64:04:1d:ec:cc:1c:01:9a:17:63:bf:ed:27:31:20:
4c:88:2d:63:ff:b4:f1:d0:a5:a2:8a:6e:b4:d1:84:
25:c3:7c:17:fb:c6:38:66:ce:e0:a6:fe:ee:b1:4b:
43:5e:20:52:77:3e:4e:fe:9b:b4:67:74:4a:35:1c:
e0:e2:4f:1d:ab:73:cc:bf:33:a2:77:98:15:0c:08:
81:75:2a:60:1e:7c:74:82:c1:ce:ba:0a:5a:cf:b8:
6e:f2:ce:35:4a:11:40:ce:aa:d2:7e:c6:7e:84:fc:
64:b5:b1:c2:0e:e1:e6:1a:3e:24:4f:46:e4:09:a4:
5a:7a:f0:21:60:60:a4:96:56:64:4e:bc:ba:c1:93:
ee:d3:2c:34:49:eb:e0:3a:48:f9:9a:6c:29:17:ae:
56:ad:d8:3c:e9:4a:57:72:cf:64:89:7a:34:c8:1a:
42:af:32:f4:12:d9:1f:38:b9:ad:a2:2d:2d:da:fd:
c9:f0:f2:8a:7e:ba:b6:99:5d:6a:8f:f4:6d:14:cf:
64:0e:16:a6:81:a9:e8:10:13:99:bb:a8:8f:13:32:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:97:FC:3B:60:DF:C6:D4:91:31:82:DF:1F:82:61:7B:B8:C6:72:BE
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.34.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a8:cb:93:2b:75:b8:d4:76:89:46:d1:08:5e:a2:fe:f3:7b:
48:b2:91:84:e2:7e:67:d4:30:c2:a0:ba:c7:d7:5c:cf:3f:c2:
cd:f5:3e:c7:c6:38:a0:b4:f0:5d:da:3a:b4:6d:82:a4:48:5a:
2e:d5:60:05:56:5a:0c:dc:ac:cc:56:4f:94:b3:0c:05:c8:d5:
12:5e:62:18:ed:17:3e:74:bf:c3:6c:8d:d2:3b:7a:a3:d7:11:
bd:b0:16:7e:36:84:d6:22:2e:b3:58:7b:4b:58:0a:6d:26:e0:
61:a5:fc:66:1c:70:e4:8d:99:65:24:49:5b:29:d6:75:8b:18:
b7:e3:c4:8f:d9:8a:f4:4d:08:9c:85:4e:72:df:b5:61:17:d9:
14:ce:60:14:76:b9:bb:f7:8a:8d:24:89:bf:71:17:95:5b:f2:
d3:01:0d:ff:20:f8:2d:53:7e:2a:68:9a:ee:6b:c9:34:d7:9c:
a8:cf:aa:72:81:d3:96:ba:1d:03:f4:24:53:01:8c:d9:f9:ac:
31:2e:ac:c7:87:7b:83:96:32:2a:5e:25:ea:87:4b:7b:12:72:
5c:f0:3b:a7:24:1e:2d:15:00:4c:ab:c3:a8:51:89:0c:0f:c9:
35:21:79:77:4f:ff:ae:c0:0b:2e:60:bc:87:f1:0b:ba:be:bd:
a3:44:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net