Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa
File: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (raw, json)
Hash identifier: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=
Subject key identifier: 8F:37:8D:2E:94:AB:E9:9B:26:30:9E:33:7E:44:32:7D:5A:80:DA:B1
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 019423D7DF55AFCE3E884E77D98DD0C3A5C2
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa
Signing time: Wed 01 Jan 2025 21:48:57 +0000
ROA not before: Wed 01 Jan 2025 21:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61013
IP address blocks: 45.143.40.0/22 maxlen: 24
194.53.160.0/22 maxlen: 24
194.53.164.0/23 maxlen: 24
2001:67c:2828::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:df:55:af:ce:3e:88:4e:77:d9:8d:d0:c3:a5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Jan 1 21:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f378d2e94abe99b26309e337e44327d5a80dab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:56:d3:63:a1:8e:e9:3d:69:d7:e9:ba:e2:
83:db:95:96:19:96:b4:a6:41:bb:20:a7:46:0c:73:
0c:5b:80:e0:97:43:c9:d3:67:80:7e:28:81:c0:9e:
28:a3:24:34:48:11:30:5c:14:99:46:03:45:2c:32:
36:4f:af:7b:8c:ce:f7:44:1d:5e:29:68:cb:5a:b0:
89:7b:85:0f:3c:23:66:eb:ea:c7:18:fa:15:b6:02:
eb:05:21:9a:e3:39:78:96:3b:21:c5:42:15:39:23:
ca:f0:3b:56:b8:6e:62:1f:a5:cd:8e:17:09:7c:8d:
ff:43:63:4b:4b:47:03:c7:f8:75:37:58:f8:d6:52:
e6:85:d1:87:72:0f:6a:88:b2:a4:98:50:1c:8f:3c:
f9:c6:4a:4b:bf:fb:ae:29:e9:a7:65:b9:b2:83:43:
c1:c8:b0:21:ed:36:e6:2c:2b:ab:e0:05:b5:be:1b:
48:84:71:79:20:fb:20:9d:00:fb:53:a0:c1:38:ff:
0c:64:6e:cb:d9:95:85:40:6e:8c:1a:89:12:47:4c:
1b:3d:33:c6:74:e9:9a:e3:74:4d:72:20:ad:77:d0:
66:bf:b6:81:2d:94:f6:8f:69:aa:33:14:7e:29:55:
1c:4f:cd:dd:ef:28:c1:c3:4f:ce:a9:5b:63:c5:3f:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:8D:2E:94:AB:E9:9B:26:30:9E:33:7E:44:32:7D:5A:80:DA:B1
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.40.0/22
194.53.160.0-194.53.165.255
IPv6:
2001:67c:2828::/48
Signature Algorithm: sha256WithRSAEncryption
25:ed:61:55:90:d8:58:4d:6a:a4:eb:aa:0a:6a:9c:49:40:41:
6e:b3:1d:74:ed:91:69:ec:2d:5a:0e:f9:d1:89:71:5b:36:c3:
02:34:6c:60:72:c4:63:a2:e4:b8:c7:ff:5f:bf:4c:57:b5:42:
11:a1:b1:81:b9:a1:13:96:80:2c:25:91:5d:f0:fd:c8:36:7a:
21:fe:45:5f:77:41:6d:33:4a:92:29:ea:e2:d2:22:19:70:75:
d7:af:fe:19:6f:9e:e6:07:12:3f:6d:12:a1:fc:7a:53:6b:78:
a6:90:4d:e3:30:ad:fa:af:e0:54:37:c0:53:c6:61:06:00:25:
47:49:38:bb:3b:cb:c2:35:10:75:04:e9:66:bf:ce:c0:e2:69:
dc:ef:3d:46:46:24:eb:69:79:8b:f3:00:67:83:67:9d:79:d6:
6a:e5:e9:dc:66:cc:15:ee:13:1c:d8:26:c2:6f:2e:34:05:5f:
3e:40:78:a5:fd:30:11:f4:f6:e5:32:e7:6d:70:59:a4:22:97:
d0:2d:39:c8:84:92:51:be:ef:87:4b:ef:8a:51:ea:14:df:21:
82:9f:42:75:d7:ee:f6:07:26:41:e8:d8:1a:13:b0:3b:3b:42:
2c:7f:cd:55:ad:f4:96:91:93:9b:83:18:0a:59:dd:0d:ad:d3:
7b:cc:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net