Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/lA0fENm0ZUElG9tJOUC7ihMrfpk.roa
File: lA0fENm0ZUElG9tJOUC7ihMrfpk.roa (raw, json)
Hash identifier: Qvs24xDgZCdrnweHV1dfdJGFZwkvZyZuyiHk08DnP5Y=
Subject key identifier: 94:0D:1F:10:D9:B4:65:41:25:1B:DB:49:39:40:BB:8A:13:2B:7E:99
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019422202EE940F132BE60FA674F9B04481C
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/lA0fENm0ZUElG9tJOUC7ihMrfpk.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199912
IP address blocks: 45.95.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2e:e9:40:f1:32:be:60:fa:67:4f:9b:04:48:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=940d1f10d9b46541251bdb493940bb8a132b7e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:88:12:02:e2:8a:50:7f:6f:60:f1:ba:e9:
52:60:1d:8c:e3:62:18:18:71:d8:e2:ce:8d:c1:2b:
f0:b5:78:45:18:7c:50:58:f6:d5:57:c2:05:98:87:
21:f5:7c:21:eb:ec:54:f8:08:42:29:a5:59:d7:cf:
87:ca:a0:84:b0:97:a3:81:e3:47:82:98:95:b7:4f:
bc:2e:f3:b5:90:00:59:22:84:89:0d:fc:2a:f9:25:
f5:e7:1e:08:59:b3:9b:54:87:26:85:25:8e:7a:e7:
8b:a5:15:16:72:a1:25:46:1c:c9:3f:f8:2f:c7:23:
05:48:c5:dd:0f:3c:a0:16:a3:02:9c:a7:67:a7:eb:
61:0f:6e:2f:01:e4:8c:de:c2:68:72:9d:df:a1:a8:
11:b8:0b:a5:98:d8:a5:cc:92:4c:83:79:a5:da:4b:
cd:28:e9:56:cc:ef:1a:21:32:fa:e6:e2:a1:65:7e:
bd:ca:a1:31:9a:3b:d7:86:8d:21:68:6c:62:7d:98:
57:55:d3:1b:9d:e7:86:34:67:c2:45:17:84:03:84:
a1:d9:c7:03:38:f2:56:1e:2d:b0:fe:6e:7a:ad:bf:
d6:5a:a2:71:b4:bf:d0:6c:3b:ca:a7:a5:d8:85:a7:
8d:36:8d:02:9b:bd:98:3c:59:90:b8:5b:b1:61:37:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0D:1F:10:D9:B4:65:41:25:1B:DB:49:39:40:BB:8A:13:2B:7E:99
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/lA0fENm0ZUElG9tJOUC7ihMrfpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8f:b9:f1:5d:00:1c:56:e8:bc:7b:4e:c2:ed:41:3a:e8:9f:
cc:0e:2d:22:d1:f2:88:5c:38:90:1d:49:97:0d:23:a7:b5:ee:
e5:06:3f:a1:17:8c:fa:de:8b:c2:47:5a:72:43:d6:ae:05:f7:
a1:59:34:bb:3c:f5:9b:c9:1b:42:58:20:3a:14:9f:4e:99:73:
a2:b4:45:f9:ab:87:74:e7:0b:45:cb:b0:c6:14:f9:b5:89:13:
1b:2a:fb:42:97:a2:21:3f:55:07:b5:32:c7:e8:6e:24:47:25:
b5:02:f7:60:bf:c9:f0:00:55:b1:68:f6:1f:28:af:bf:3a:45:
ab:d3:a4:48:a2:75:b8:f7:60:75:56:98:2d:0d:7a:dd:ea:6a:
00:67:0f:0c:e2:1d:3c:bd:66:da:ae:49:83:29:d6:e7:a7:04:
69:e9:86:37:9f:bc:df:3e:f6:ec:d2:db:35:2c:ee:5b:51:8e:
be:2d:81:77:82:ee:28:f1:be:1e:3a:a7:d7:26:66:b8:77:86:
9d:22:3d:4e:6a:2e:cf:16:0c:89:71:bf:51:87:93:42:f0:ed:
8a:81:2f:9a:d9:ff:00:84:3b:87:4c:86:02:46:30:2c:69:87:
4f:0b:30:6a:fc:00:b9:6d:94:58:44:4b:a0:ab:3c:a3:7c:5a:
5d:31:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:53:02 2025 by rpki-client on console.sobornost.net