Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/rqFwpW6hygA3WlEvpR2r2eLIqwU.roa
File: rqFwpW6hygA3WlEvpR2r2eLIqwU.roa (raw, json)
Hash identifier: hJKMm6stZaqD+/5F5Zq5RhHhs3I7m3K3YzZ93XXb5tw=
Subject key identifier: AE:A1:70:A5:6E:A1:CA:00:37:5A:51:2F:A5:1D:AB:D9:E2:C8:AB:05
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 019424B3FC34298217923F5C67D2E3467BF0
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/rqFwpW6hygA3WlEvpR2r2eLIqwU.roa
Signing time: Thu 02 Jan 2025 01:49:22 +0000
ROA not before: Thu 02 Jan 2025 01:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35424
IP address blocks: 45.67.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fc:34:29:82:17:92:3f:5c:67:d2:e3:46:7b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aea170a56ea1ca00375a512fa51dabd9e2c8ab05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:91:f9:35:83:12:18:b3:44:a2:fa:87:62:
97:4c:f6:73:20:1b:49:45:aa:f9:f6:48:8b:d9:5c:
c7:58:a5:b7:32:96:20:f4:c2:08:68:9f:a6:35:ba:
57:95:a3:58:de:94:2f:6d:d5:aa:bd:ab:ac:fa:04:
ea:45:25:15:70:5e:b3:8c:15:6c:01:e1:52:e8:d0:
78:85:c6:bf:bb:03:8c:71:1c:10:0e:59:a7:3d:ab:
c4:dd:33:12:2e:68:64:b4:2b:47:d9:b4:55:d7:5d:
a8:2d:b2:44:b8:e3:c9:67:89:ec:ed:e6:b7:37:9a:
e0:01:8f:a4:9a:4d:ce:a3:7d:af:01:d6:4d:ab:ce:
0a:51:00:57:46:8e:c7:87:3f:48:08:5c:f0:b3:a5:
09:86:9b:cf:d6:92:6c:24:44:1e:d2:7f:87:0c:92:
60:c7:c8:35:61:27:a0:85:c5:a4:68:0c:3d:fe:22:
a3:67:d7:2d:43:6a:c7:63:fb:78:c5:8e:d6:8a:8f:
e0:db:0f:b9:a7:f4:c8:4e:e1:a0:cd:a9:b5:41:6c:
19:ca:ba:eb:e9:99:68:09:92:59:be:94:4a:74:69:
ea:37:54:cd:dc:c8:93:e5:ef:06:1d:de:28:7b:2f:
24:4a:c1:50:75:5b:ad:c4:4d:55:b6:8f:af:44:22:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A1:70:A5:6E:A1:CA:00:37:5A:51:2F:A5:1D:AB:D9:E2:C8:AB:05
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/rqFwpW6hygA3WlEvpR2r2eLIqwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.164.0/22
Signature Algorithm: sha256WithRSAEncryption
90:c6:9a:89:5a:98:49:57:0a:f0:6f:7e:c1:48:72:c6:9d:43:
22:37:d8:af:0b:89:76:87:0a:e2:b1:5b:9e:b5:70:eb:45:c9:
eb:df:e5:79:bb:f9:a5:1f:de:13:9b:3f:6a:4d:2c:21:07:63:
f2:b3:8f:6e:57:cb:bb:10:03:0e:f9:0c:95:ed:5d:2b:a1:7b:
ce:7d:03:70:7f:0f:2d:7f:7e:e6:11:da:4a:d9:f3:7c:54:97:
00:ef:fb:65:16:c7:ce:4e:e9:a3:7c:7a:26:50:aa:88:a6:c3:
75:dc:2f:bf:38:6d:33:90:3e:b9:cb:8c:c0:5f:9c:1b:84:1e:
14:b3:07:8e:09:d7:c7:39:8b:7c:c8:9e:9b:83:ae:ac:0b:44:
56:ce:f8:ca:21:e2:ac:cc:db:2e:55:08:21:e4:9a:56:a1:de:
73:ea:e4:6f:b5:10:1d:22:06:85:5d:c2:02:1f:b1:02:2d:26:
bf:43:e0:06:b6:54:15:4d:31:73:a8:6c:76:08:fd:97:03:bd:
88:f8:a0:53:04:e0:05:94:c1:8a:47:aa:2e:0a:75:b4:44:97:
23:45:0f:3b:3a:65:4c:0a:c5:7d:82:cf:10:3d:61:95:7e:e3:
d7:d4:5d:d9:ee:36:42:54:94:bb:7c:be:9f:41:cf:49:3b:f1:
3c:ee:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net