Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa
File: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (raw, json)
Hash identifier: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=
Subject key identifier: 71:E1:4F:0B:F6:63:EA:9D:DC:B8:1F:2A:5D:07:8C:AA:F6:5F:65:AE
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0195D4108F2D985F915E9E5D81B89105F4E6
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa
Signing time: Wed 26 Mar 2025 20:06:49 +0000
ROA not before: Wed 26 Mar 2025 20:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30286
IP address blocks: 145.43.252.0/23 maxlen: 23
145.43.252.0/24 maxlen: 24
145.43.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:10:8f:2d:98:5f:91:5e:9e:5d:81:b8:91:05:f4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Mar 26 20:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71e14f0bf663ea9ddcb81f2a5d078caaf65f65ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:5d:7e:be:4a:2a:e6:71:2a:fb:c5:ad:c9:
a0:12:82:8e:52:83:31:e9:e2:79:63:a9:e4:57:7b:
2c:f6:51:3d:a6:f1:3c:ac:16:7c:3b:cf:3b:41:06:
dc:39:07:45:82:ae:df:10:71:05:37:44:c0:12:55:
81:d3:c2:67:52:de:da:7c:62:6c:4a:e8:b6:b3:88:
d1:80:c3:af:88:32:da:61:17:e6:7c:51:1a:26:0e:
f8:bb:42:d8:af:92:7d:72:19:38:ec:e4:ba:68:a9:
07:8c:c6:72:f6:b7:ef:3f:07:64:12:f4:54:29:42:
db:10:7e:59:c8:5d:cf:52:38:aa:4c:1b:e9:42:ca:
1c:b5:b5:69:84:02:e0:58:8f:58:68:7e:5a:5b:c6:
c0:e5:e2:d0:41:39:59:59:f8:0c:8b:8b:f1:85:81:
dd:be:e9:99:95:47:2b:c9:b7:5f:06:b5:74:a7:70:
34:de:4a:8f:6b:40:6c:77:7f:cd:83:70:5b:ea:29:
6d:c1:c0:67:65:d2:81:e3:b3:54:96:be:13:4f:51:
34:f4:cd:90:1f:a7:df:f0:be:3c:83:a2:b2:38:fe:
e9:fa:2f:a8:a1:6d:a4:b6:b8:7a:30:5c:63:dd:cb:
7d:42:1a:63:d1:1d:bd:3a:c6:54:7f:73:96:14:19:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:4F:0B:F6:63:EA:9D:DC:B8:1F:2A:5D:07:8C:AA:F6:5F:65:AE
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.252.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:2c:67:c7:eb:4a:ae:8e:4b:73:72:b0:bb:37:43:21:e8:53:
e6:b8:62:13:5a:8a:73:27:80:bb:5b:97:8c:69:85:6d:2e:d2:
be:ea:35:52:bf:73:3e:3c:f9:a0:13:18:e1:64:b1:c0:4b:dd:
65:31:3d:0d:51:3d:ec:0d:66:14:43:38:1c:f8:2f:17:5a:e1:
9b:c3:fe:93:b9:b0:b7:8a:b3:90:4f:28:33:53:4d:77:70:92:
d4:eb:2a:7a:76:08:90:19:73:88:e9:ba:86:1a:fc:6c:85:37:
0d:19:16:10:25:a7:6b:a9:75:d7:e6:99:37:f5:a0:25:e9:03:
c4:b7:7d:e7:4e:68:ed:d8:22:90:f2:27:ac:18:a0:ab:2d:2d:
f4:d0:7e:6c:07:29:29:d1:d4:57:03:8b:3b:b7:d4:03:83:f3:
3c:9b:7e:82:aa:6a:21:54:d7:ff:6d:0e:20:72:fe:54:eb:0b:
73:65:cf:3c:16:b2:a5:de:d6:fe:0c:f9:d0:42:fa:ee:38:a5:
87:e4:f9:7f:a1:72:5e:5e:2e:f5:b2:1d:a5:99:58:74:65:ac:
bc:ed:42:d7:af:e0:54:e1:64:d1:0f:17:5b:00:83:0b:33:67:
88:a6:15:9f:07:77:64:e2:22:06:83:79:ab:76:a4:17:6d:8a:
3d:d9:a0:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXUEI8tmF+RXp5dgbiRBfTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZTI2ODFkZGEwMDcwMmE3NTk3YTcxMjU3ZTE0ZjdhNzI1
ZTg5MGUwHhcNMjUwMzI2MjAwNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWUxNGYwYmY2NjNlYTlkZGNiODFmMmE1ZDA3OGNhYWY2NWY2NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb5dfr5KKuZxKvvFrcmgEoKOUoMx
6eJ5Y6nkV3ss9lE9pvE8rBZ8O887QQbcOQdFgq7fEHEFN0TAElWB08JnUt7afGJs
Sui2s4jRgMOviDLaYRfmfFEaJg74u0LYr5J9chk47OS6aKkHjMZy9rfvPwdkEvRU
KULbEH5ZyF3PUjiqTBvpQsoctbVphALgWI9YaH5aW8bA5eLQQTlZWfgMi4vxhYHd
vumZlUcrybdfBrV0p3A03kqPa0Bsd3/Ng3Bb6iltwcBnZdKB47NUlr4TT1E09M2Q
H6ff8L48g6KyOP7p+i+ooW2ktrh6MFxj3ct9Qhpj0R29OsZUf3OWFBkngwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHHhTwv2Y+qd3LgfKl0HjKr2X2WuMB8GA1UdIwQY
MBaAFD3iaB3aAHAqdZenElfhT3pyXokOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYt
ZTBhYzcyNjNkYjEyLzEvY2VGUENfWmo2cDNjdUI4cVhRZU1xdlpmWmE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zNmQ2ZTQtOGQ3Ny00OGQ1LWFmYjYtZTBhYzcyNjNkYjEy
LzEvUGVKb0hkb0FjQ3AxbDZjU1YtRlBlbkplaVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkSv8MA0G
CSqGSIb3DQEBCwUAA4IBAQB7LGfH60qujktzcrC7N0Mh6FPmuGITWopzJ4C7W5eM
aYVtLtK+6jVSv3M+PPmgExjhZLHAS91lMT0NUT3sDWYUQzgc+C8XWuGbw/6TubC3
irOQTygzU013cJLU6yp6dgiQGXOI6bqGGvxshTcNGRYQJadrqXXX5pk39aAl6QPE
t33nTmjt2CKQ8iesGKCrLS300H5sBykp0dRXA4s7t9QDg/M8m36CqmohVNf/bQ4g
cv5U6wtzZc88FrKl3tb+DPnQQvruOKWH5Pl/oXJeXi71sh2lmVh0Zay87ULXr+BU
4WTRDxdbAIMLM2eIphWfB3dk4iIGg3mrdqQXbYo92aBG
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net