Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/08evUpXsyAPB9m1i5yjV5oz1esw.roa
File: 08evUpXsyAPB9m1i5yjV5oz1esw.roa (raw, json)
Hash identifier: vQX+ikiXTHSqymHxaB/XvD/QqJEhDTJRgfstS4d4Uvw=
Subject key identifier: D3:C7:AF:52:95:EC:C8:03:C1:F6:6D:62:E7:28:D5:E6:8C:F5:7A:CC
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 0195C9B09DE9036A17081B0B13C7A24947B8
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/08evUpXsyAPB9m1i5yjV5oz1esw.roa
Signing time: Mon 24 Mar 2025 19:45:49 +0000
ROA not before: Mon 24 Mar 2025 19:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205097
IP address blocks: 94.45.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:b0:9d:e9:03:6a:17:08:1b:0b:13:c7:a2:49:47:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Mar 24 19:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3c7af5295ecc803c1f66d62e728d5e68cf57acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:1f:e4:02:f1:51:11:78:d0:ed:fb:1f:11:
2e:48:2c:4a:30:0d:ef:b6:83:00:f4:a8:fd:23:3b:
30:d0:a0:ce:e9:81:33:6b:5c:37:6e:df:c0:0e:36:
2e:96:76:48:8e:e7:44:57:d2:bf:e2:b0:1f:e3:59:
10:cf:80:83:ef:5c:26:1c:e1:f2:c0:58:2b:b3:24:
d6:c6:92:20:5f:ab:3c:2a:d6:d2:da:2e:bb:a8:f6:
1a:bd:9d:01:b6:b1:78:cf:cd:3c:2c:1c:40:23:04:
16:43:f7:24:74:de:36:77:15:29:99:40:ad:e5:44:
0f:ec:66:a8:aa:c6:19:1a:30:2a:59:87:91:9b:b8:
ab:ad:1b:d2:1c:24:28:ab:47:61:99:0b:60:e7:7c:
6b:7c:2e:e6:5b:8e:ce:c6:78:39:14:11:85:3a:e3:
57:11:d1:55:28:b1:b0:0b:22:5c:d9:3d:c8:f9:e0:
05:b2:08:d2:1d:ba:6a:10:c4:52:52:21:99:78:d2:
17:34:13:5e:c9:c4:41:ac:35:01:89:b2:fb:ff:2c:
19:b6:96:57:e3:fd:d2:78:96:82:55:1c:9a:02:bb:
f1:9c:4b:ec:85:7b:fb:e8:99:96:f2:85:48:77:d3:
e0:31:4f:7b:8e:37:19:55:ba:c0:1d:f9:67:87:01:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C7:AF:52:95:EC:C8:03:C1:F6:6D:62:E7:28:D5:E6:8C:F5:7A:CC
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/08evUpXsyAPB9m1i5yjV5oz1esw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.142.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1d:43:f9:35:95:ea:c5:e4:a4:ec:90:4c:a0:87:19:00:b6:
41:3e:4c:36:97:b0:21:65:cf:ad:2d:5a:75:18:97:99:d5:ea:
a2:37:ae:16:e8:60:59:1f:7b:07:d0:50:92:59:91:53:ca:44:
2c:50:b0:e9:0c:32:36:db:4a:8b:56:44:c9:bb:ca:ba:41:58:
cf:02:78:16:d4:09:de:bf:b9:8d:6a:1c:e6:ba:f3:e6:ac:29:
1e:86:ce:46:72:fb:91:74:42:a5:e0:7c:68:70:43:c4:c9:76:
7f:a0:ca:2a:49:31:b5:a1:27:0f:0a:02:8e:20:43:da:aa:06:
91:49:c8:e4:c3:e8:d1:19:2c:2d:31:c8:bc:0a:2a:cd:07:79:
1e:61:53:9e:53:fd:bb:de:c0:b0:62:3b:6e:55:de:80:58:0d:
f1:81:97:ae:0c:de:4e:c5:e5:f8:b6:3f:aa:1a:b0:6a:4d:cf:
d5:9a:34:46:fc:f6:44:08:ba:78:68:c1:e0:13:04:44:26:bd:
13:ed:c5:f6:dc:b5:8e:a9:a2:0b:ed:a4:9a:56:a4:91:d0:df:
08:d1:c2:26:31:c2:6a:c8:26:4d:24:c0:ee:27:d7:fd:42:f1:
64:49:e6:3d:6a:63:20:0e:7b:cc:de:bd:5d:28:0a:4a:5e:e0:
7e:56:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:03 2025 by rpki-client on console.sobornost.net