Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/liKr9r8FMDweCFSU14hBTeBiJGg.roa
File: liKr9r8FMDweCFSU14hBTeBiJGg.roa (raw, json)
Hash identifier: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=
Subject key identifier: 96:22:AB:F6:BF:05:30:3C:1E:08:54:94:D7:88:41:4D:E0:62:24:68
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 0194258F00BF34B98B1D6611E6231A5EB6E8
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/liKr9r8FMDweCFSU14hBTeBiJGg.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34037
IP address blocks: 141.136.32.0/24 maxlen: 24
141.136.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:00:bf:34:b9:8b:1d:66:11:e6:23:1a:5e:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9622abf6bf05303c1e085494d788414de0622468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:c3:fe:09:a2:b7:53:db:f3:80:43:84:42:
eb:4f:09:0b:67:cd:e1:07:ec:0b:0a:75:f3:22:72:
13:ad:ec:a8:24:7b:77:c2:ee:fc:c1:0b:fb:04:ea:
06:8a:90:44:e9:da:8b:b4:da:ac:5f:18:a0:f0:45:
50:a3:a9:a1:85:6c:ef:9f:d8:3d:4f:d9:40:56:1d:
d7:bd:5b:b2:59:24:62:82:66:b3:85:de:62:78:aa:
b6:67:2c:28:d0:ec:d0:2c:52:84:e6:fa:b8:ae:fb:
ac:bb:66:e1:b7:3b:ea:72:fd:a8:83:55:e4:9a:c2:
6a:87:51:56:26:e3:36:a9:0f:4a:6e:f6:29:2a:02:
76:d6:38:b1:ce:d5:b2:f3:70:f8:74:cc:8e:79:4a:
38:af:87:de:2d:a3:f2:04:43:cd:81:0a:51:66:4a:
9d:6f:0f:05:5d:b4:fc:b3:f7:89:5d:6f:3a:ab:f6:
02:7b:ec:6d:8a:41:32:f8:de:83:e3:f9:73:ce:72:
46:7b:b8:14:18:f3:73:bb:d3:88:1e:7a:68:cf:7d:
c7:75:a3:28:ea:b1:86:b3:3b:91:0b:b2:86:fd:3f:
aa:b4:48:44:54:a3:3f:d5:9b:aa:61:85:47:20:ea:
84:62:15:fb:66:95:be:86:79:d3:07:90:eb:33:2e:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:22:AB:F6:BF:05:30:3C:1E:08:54:94:D7:88:41:4D:E0:62:24:68
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/liKr9r8FMDweCFSU14hBTeBiJGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.32.0/24
141.136.37.0/24
Signature Algorithm: sha256WithRSAEncryption
38:81:fd:5b:c4:0b:a8:5c:d5:6f:e1:6e:96:93:45:db:38:27:
6d:79:8b:46:28:41:d8:1c:e7:bc:24:1e:aa:f5:f7:c9:a2:fa:
d6:ad:c8:cc:dc:df:dc:98:b0:bd:ba:a5:fd:13:a9:9c:19:e0:
ca:50:a1:4c:40:7c:94:4d:e5:d4:25:21:1c:08:d9:14:e5:1a:
0c:3f:4e:8b:11:d6:cf:3c:2b:49:4e:8e:51:8c:a9:c0:72:bc:
0b:1d:6b:29:18:9c:59:46:1e:1d:8c:85:bc:0a:ca:4b:3c:ce:
58:4c:81:d2:f7:e2:4c:46:08:4f:17:7a:6d:39:1c:30:f7:83:
42:a6:2e:67:6a:d2:dc:c9:7c:fc:cd:47:b9:2c:c7:a0:40:45:
e1:ca:c1:07:0b:fd:26:62:a6:13:13:19:11:27:9c:70:96:b7:
54:0d:76:5a:92:db:3e:86:13:19:4a:82:0e:d4:16:12:b1:3f:
67:4d:c6:fd:a6:7a:6c:9d:5c:47:6f:41:56:8e:05:23:62:d8:
85:90:63:86:4a:07:e2:6f:7d:f4:7c:ed:8e:4d:f7:c3:f0:db:
e7:72:f0:1f:e1:02:c1:84:d7:a9:2a:2c:b1:f7:60:6e:83:3b:
61:01:2f:2e:0b:48:6a:a9:b3:74:c9:b3:f6:ae:96:d5:8b:99:
b4:0d:83:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net