Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa
File: OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa (raw, json)
Hash identifier: PbCMLXyHRgfKX4P/i6p6IrPplONleRWnbtsOIMdtbRA=
Subject key identifier: 39:8F:86:23:1F:61:0F:51:78:38:57:F8:9F:EC:B4:24:AD:40:35:98
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 019614A352B424CF81CDCDFF78B0FE141BDE
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa
Signing time: Tue 08 Apr 2025 09:02:49 +0000
ROA not before: Tue 08 Apr 2025 09:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 45.154.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:a3:52:b4:24:cf:81:cd:cd:ff:78:b0:fe:14:1b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Apr 8 09:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=398f86231f610f51783857f89fecb424ad403598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:38:e3:41:72:48:a7:4f:dc:6f:51:31:81:
6b:a3:77:ac:43:6d:09:33:fc:0d:2f:90:44:a7:67:
15:14:4c:54:0b:84:e0:64:29:e0:b9:29:3f:c5:ad:
ed:6b:cd:a2:b5:85:64:cf:18:65:57:54:b2:0e:69:
26:f3:66:7a:1a:27:da:10:15:86:46:3c:16:22:d7:
e5:8f:d9:c7:eb:ee:65:9d:4f:50:c6:77:59:03:ea:
92:10:e7:4d:f5:9f:83:60:e5:20:89:89:83:4c:67:
1b:74:de:40:1d:4b:af:61:82:68:5b:56:5c:44:94:
c9:34:26:f6:f5:71:2f:12:7e:b4:ee:47:6a:c5:26:
44:ed:b2:57:14:6f:1d:09:90:11:d9:97:dd:4f:4e:
55:f3:10:d5:ca:db:6d:a9:8f:b2:b4:06:5c:6b:7b:
f2:02:b6:e3:c6:19:59:bd:9a:59:59:36:fa:3f:1e:
8a:c1:93:87:f3:77:06:b3:41:14:19:80:04:c5:8d:
d8:d3:8b:6e:ff:fc:e8:57:3d:eb:cd:1f:ff:24:5e:
b8:44:e4:a4:5f:0e:51:17:81:46:29:ec:06:5d:42:
6b:a3:11:be:b7:91:bc:5e:9b:13:8e:c3:b7:c3:53:
e7:c7:a4:31:6f:41:a1:de:a1:24:fe:d9:63:e5:8d:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:86:23:1F:61:0F:51:78:38:57:F8:9F:EC:B4:24:AD:40:35:98
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.158.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d7:4a:a2:13:9f:69:dc:f8:3b:f7:de:c8:b1:aa:40:a6:90:
76:be:1e:e2:86:1d:28:30:89:60:50:5b:54:45:52:b1:fb:63:
fc:3c:54:7e:79:24:73:f8:3e:ee:27:d1:95:cf:08:55:86:1f:
b5:3e:e3:9d:d5:79:52:fb:a0:fb:e1:87:9c:a6:ea:ed:9c:91:
5f:56:21:a8:e5:37:ae:18:b4:70:62:66:08:77:42:d4:65:54:
ee:e1:9e:20:db:fb:6e:5c:73:da:c5:27:45:80:1e:37:8e:0f:
5a:b4:ec:bd:1e:64:16:72:c9:36:88:c8:49:6f:86:81:4b:07:
a9:e0:15:90:92:52:63:de:52:90:8c:e9:4c:11:c0:9f:c6:33:
31:2f:bb:22:5b:bd:a6:49:78:f9:56:d9:e7:07:40:8c:f3:50:
3c:6f:3c:22:92:bc:96:f8:16:1a:78:85:00:c4:5d:c9:07:11:
de:c6:5c:d7:1b:da:31:40:7a:b6:2d:ec:40:eb:4a:14:d9:85:
b5:d7:d8:bb:e0:63:3f:74:81:26:41:4e:91:e7:1b:f6:81:83:
cf:d8:6f:d0:7e:a7:c8:d4:9f:b8:4f:57:90:2b:8a:5b:0f:aa:
fd:df:87:b5:70:1a:8a:89:13:ba:f7:52:d7:3d:d3:80:70:10:
4e:57:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net