Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/cm2Rm_FntGHtGWI_7GUiO2qtyH0.roa
File: cm2Rm_FntGHtGWI_7GUiO2qtyH0.roa (raw, json)
Hash identifier: z7D2/1wU+sPa2Gujh1pTMmzRxT9D48TbIRTtZAd7l9A=
Subject key identifier: 72:6D:91:9B:F1:67:B4:61:ED:19:62:3F:EC:65:22:3B:6A:AD:C8:7D
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 0194DAED8541D48DC667F75295E95DBF1C34
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/cm2Rm_FntGHtGWI_7GUiO2qtyH0.roa
Signing time: Thu 06 Feb 2025 11:03:06 +0000
ROA not before: Thu 06 Feb 2025 11:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.15.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:ed:85:41:d4:8d:c6:67:f7:52:95:e9:5d:bf:1c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Feb 6 11:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=726d919bf167b461ed19623fec65223b6aadc87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:82:5e:89:9a:ba:a2:1c:72:69:94:a9:9b:
28:1a:5d:03:19:68:43:29:23:c3:fd:b9:19:00:dc:
49:3d:a8:4a:2d:1d:4e:45:bf:ba:66:60:7d:03:57:
dc:41:e7:d2:6e:2d:ba:a3:39:7f:49:6b:c6:8d:c9:
74:15:89:dc:8d:8e:0b:0c:39:6b:a1:3b:16:60:56:
9e:93:5f:eb:ab:3f:59:76:6e:b6:9b:0c:67:72:9c:
ec:3e:33:26:4e:a8:ed:3a:1f:69:27:c0:28:f9:87:
bd:98:cf:c6:f8:4f:78:04:ee:5c:6f:29:8e:61:f8:
e6:e6:42:aa:43:e8:91:ca:aa:b9:d9:46:32:d4:43:
ce:2d:f8:67:9d:86:c1:5b:1b:e3:49:5f:55:7c:4d:
40:c3:a9:4a:29:70:d2:8e:28:2a:d6:f4:bf:a0:5f:
55:fc:f6:51:b0:6f:e5:87:4f:4f:4c:38:53:97:8d:
35:0b:ad:d3:5c:fe:ce:ea:dc:71:fe:0c:03:c1:c1:
2a:53:d9:d4:fa:f8:52:21:f4:12:f1:e3:dd:37:43:
2c:6e:38:fa:92:18:99:a3:32:e6:f9:db:4a:76:0d:
58:df:a4:50:cd:27:d0:3b:a1:29:db:ba:e3:0d:76:
fd:35:0e:a5:20:bd:3e:ad:38:70:f4:f0:2c:e0:01:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6D:91:9B:F1:67:B4:61:ED:19:62:3F:EC:65:22:3B:6A:AD:C8:7D
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/cm2Rm_FntGHtGWI_7GUiO2qtyH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.106.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:d1:9f:cb:2d:04:4c:b4:4d:38:d3:f5:0d:fe:af:db:dc:ed:
85:60:8f:6f:a5:02:19:02:ff:51:9b:e6:19:61:53:4f:b4:2d:
51:09:8d:1c:66:27:b8:23:ba:ec:1d:a5:75:5e:58:ec:21:9b:
82:d3:dc:67:07:c5:37:be:e7:9b:23:b7:86:b5:50:17:a6:58:
05:e6:6e:1c:a4:5f:90:14:10:7c:d9:80:c5:59:cd:da:f7:7e:
05:51:6c:cc:48:50:82:cc:00:8f:ec:88:27:8d:71:b5:26:05:
2c:33:cb:6e:57:9f:2b:67:08:fc:8c:85:08:8c:7d:43:e4:8b:
60:8c:66:db:5d:50:c4:59:f1:86:69:09:5b:84:b0:ec:31:53:
c7:63:13:13:ad:8f:e8:84:5c:fd:47:33:04:e4:88:ca:1d:37:
1b:da:4f:47:0f:df:be:80:13:b3:d5:62:16:26:e5:3e:bb:36:
a7:21:2a:19:98:86:c8:2b:fe:99:04:b5:94:46:4a:f2:62:05:
73:02:83:ec:41:26:a6:85:f7:61:b1:36:a8:73:2b:c3:9f:42:
cf:19:91:52:e0:94:8d:de:ba:2b:ce:9a:6b:c9:f4:9e:73:10:
65:5f:36:b1:38:4e:c7:c1:e1:bd:7c:17:a6:9b:76:61:49:5c:
5a:ce:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:21 2025 by rpki-client on console.sobornost.net