Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/DzFwKCs4SLbfq2s9Q7Y4hhddAlg.roa
File: DzFwKCs4SLbfq2s9Q7Y4hhddAlg.roa (raw, json)
Hash identifier: uVhqZq8hFXzpst7g4lUJZCwbTahSvmYx+Wbki8iJE20=
Subject key identifier: 0F:31:70:28:2B:38:48:B6:DF:AB:6B:3D:43:B6:38:86:17:5D:02:58
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B8D5172E08E9A35AA432FBCD7492
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/DzFwKCs4SLbfq2s9Q7Y4hhddAlg.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199721
IP address blocks: 148.81.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b8:d5:17:2e:08:e9:a3:5a:a4:32:fb:cd:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f3170282b3848b6dfab6b3d43b63886175d0258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:fe:1b:2e:29:64:fa:1f:d8:86:0b:e2:dc:
e9:13:47:bf:70:b0:e3:ea:18:03:d0:9b:62:0a:74:
6a:a8:b8:9f:62:6c:71:9e:6a:1d:d3:ca:f5:ac:7e:
8f:58:b4:87:27:3c:e6:03:bc:4d:a6:de:db:d6:bc:
1e:08:72:3c:b0:9d:7a:76:c3:0e:c6:28:06:d1:66:
b0:47:95:2a:e0:ab:6b:3b:71:a7:9a:d6:96:56:a1:
6e:07:d3:7d:91:8b:e6:b4:d7:2e:5f:19:b3:08:1b:
95:4a:ce:4d:5c:39:25:0a:37:47:d3:93:a2:66:03:
53:57:cd:a5:33:6f:4b:bb:7f:07:a1:4f:e6:97:b8:
d7:2c:3b:fe:24:8f:08:7b:ce:c9:4e:ea:c5:b3:89:
4c:9e:fb:ce:4c:3f:03:20:6d:bb:1c:f0:be:6e:a1:
41:83:8e:9e:cd:55:fe:87:0c:dc:d0:b5:9b:a8:fa:
f0:45:44:68:b7:56:ff:0e:9a:d7:5e:93:a0:e1:d7:
0e:7a:b5:3e:b3:76:eb:7f:e2:25:db:1d:83:94:0d:
ae:a9:11:d5:7d:fe:18:10:3a:9e:7c:6d:41:c7:3b:
74:23:3a:3e:18:26:ac:30:3f:70:82:36:8d:b7:4f:
06:6e:cb:1b:62:40:fb:58:c0:4f:3c:0e:60:0e:ba:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:31:70:28:2B:38:48:B6:DF:AB:6B:3D:43:B6:38:86:17:5D:02:58
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/DzFwKCs4SLbfq2s9Q7Y4hhddAlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.110.0/24
Signature Algorithm: sha256WithRSAEncryption
65:57:78:79:fd:3d:7b:98:93:81:7d:46:26:be:a8:8f:7d:8e:
8f:18:e9:96:1c:5a:d9:9a:f7:da:29:a3:c3:30:e9:c0:f8:02:
64:32:97:e1:cc:6f:9b:11:62:28:86:cd:35:a1:e6:a1:4e:17:
16:7a:07:e8:b7:1b:3a:dd:59:2b:35:81:0b:17:85:6b:41:16:
d2:a5:98:05:0d:50:18:94:a3:f6:12:a0:58:dd:e2:fa:f3:1e:
0f:28:ca:55:34:17:18:98:21:11:89:cb:5c:e0:1d:16:f7:b3:
38:86:4b:71:84:43:67:b7:19:e1:2e:8c:d7:53:c4:ff:3a:b6:
4f:d9:0c:ef:7f:0b:ca:60:a2:6d:41:ec:b4:a8:03:89:fe:99:
bf:18:80:33:a1:f7:c9:ab:d2:a3:a7:67:b9:df:5c:60:a2:3e:
94:4e:83:f5:d0:17:b2:b3:91:e2:19:1a:b7:9e:6a:38:6f:9a:
80:40:fa:40:11:af:ee:37:25:fe:fb:a4:0c:be:05:8a:37:e7:
86:c3:fe:86:47:eb:cd:8d:40:79:b3:53:20:42:11:59:39:a0:
f4:f2:80:4a:ef:06:dd:a3:e0:6d:23:6d:89:0f:24:ba:37:70:
35:ed:27:ce:7f:11:2c:43:9b:88:48:a5:5a:bb:41:aa:17:bd:
f9:60:9c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net