Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZpI5aDBFR8c5B7v-MS-Ja9HPlwI.roa
File: ZpI5aDBFR8c5B7v-MS-Ja9HPlwI.roa (raw, json)
Hash identifier: IkMFKd0BAZImQZ2otRsHK9tEsKAvsNsxWZxwxxrzGNY=
Subject key identifier: 66:92:39:68:30:45:47:C7:39:07:BB:FE:31:2F:89:6B:D1:CF:97:02
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019628327E4BFE34B694A1AA758959AC4C81
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZpI5aDBFR8c5B7v-MS-Ja9HPlwI.roa
Signing time: Sat 12 Apr 2025 04:11:59 +0000
ROA not before: Sat 12 Apr 2025 04:11:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134465
IP address blocks: 94.249.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:32:7e:4b:fe:34:b6:94:a1:aa:75:89:59:ac:4c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 12 04:11:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66923968304547c73907bbfe312f896bd1cf9702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:19:a6:51:59:33:66:73:b8:4e:97:e5:d2:
b9:e8:9d:da:be:04:7a:49:14:ed:c3:46:4a:29:91:
6c:a8:46:25:57:62:e4:e6:ad:15:9e:d6:05:55:ad:
d9:1c:a5:cf:c3:e7:c3:80:8b:60:d3:95:cc:8f:51:
93:71:98:54:6e:f8:bd:b2:d9:d9:1d:e2:78:b8:eb:
49:f2:cd:9c:5c:b9:bf:de:6d:bc:58:92:be:d7:cb:
03:40:7e:df:6b:a3:d0:14:4f:3a:3d:71:81:2f:2f:
d6:a1:77:c3:a4:d9:3d:63:fb:8f:f2:87:a5:2d:f9:
02:85:96:0b:39:ac:e1:93:d8:46:9d:5a:d8:86:9a:
68:5f:d5:0c:d4:d3:b3:55:76:1e:d7:13:f9:0a:fc:
a2:7a:f7:53:25:7f:db:64:4a:e4:0e:44:96:55:15:
e6:dd:42:d8:dd:54:fe:09:1f:59:01:96:02:96:70:
03:dd:31:ff:c7:af:2f:41:1d:32:6b:be:d2:74:49:
eb:4a:db:84:0e:71:bf:7f:35:90:c9:db:61:fb:c5:
17:66:8e:25:db:76:00:6f:58:96:87:77:db:48:63:
43:7a:1a:bb:a3:c7:72:f3:0b:6f:37:33:d4:69:d2:
89:fe:4d:eb:b1:a9:e0:1e:74:32:b1:25:ad:c1:f1:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:39:68:30:45:47:C7:39:07:BB:FE:31:2F:89:6B:D1:CF:97:02
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZpI5aDBFR8c5B7v-MS-Ja9HPlwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.151.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1a:5e:1d:98:cb:ce:0c:71:b8:b9:3d:a1:3e:c4:8c:21:b8:
0f:a2:ff:a8:22:51:17:d0:05:a6:5d:d9:09:91:42:03:b3:ed:
9f:d3:86:ff:7a:71:e9:fd:9d:d8:c3:06:82:04:26:97:44:1a:
fe:f3:c7:53:fe:63:75:b1:46:e1:73:4e:c0:06:84:b9:5d:af:
b9:f4:15:bf:35:b0:ac:77:c4:55:b1:c2:79:2f:21:e9:7b:46:
36:d2:bc:64:76:0a:8d:cc:58:bd:84:38:72:6b:bd:36:41:c0:
ab:66:52:d6:e5:60:12:13:7a:9f:f3:71:05:56:a2:57:ba:10:
37:1b:46:ca:ba:ab:57:0d:a5:ef:97:bd:32:3c:c6:b1:53:4e:
65:fd:36:f4:4b:e2:b6:b3:d6:95:ea:91:c6:71:f6:b7:8a:ec:
39:07:4f:09:b9:d4:9e:ff:74:62:9f:9a:8a:e3:d7:f4:eb:9e:
6d:4a:3e:8c:cf:e6:93:e6:4b:01:b1:d1:a7:e7:dd:85:4f:35:
43:ba:4d:6c:fa:08:8e:b1:10:cc:38:7c:58:07:ab:83:1d:8f:
f7:6e:93:e1:ab:d1:6d:46:1f:94:44:d9:ae:18:82:f8:50:af:
61:b9:d9:7e:62:f5:63:cb:65:e9:0a:c3:9a:39:61:33:bf:f1:
4d:50:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net