Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/fATmKoPkxnFaeIEAAJJ02F6yM_M.roa
File: fATmKoPkxnFaeIEAAJJ02F6yM_M.roa (raw, json)
Hash identifier: 9vZ8Uz6k4By0kjf2AHSVtoIff7eSff80iL0R5CgM+Wc=
Subject key identifier: 7C:04:E6:2A:83:E4:C6:71:5A:78:81:00:00:92:74:D8:5E:B2:33:F3
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01961EFAC05E24B02D0ED4A4659AF27412C6
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/fATmKoPkxnFaeIEAAJJ02F6yM_M.roa
Signing time: Thu 10 Apr 2025 09:14:31 +0000
ROA not before: Thu 10 Apr 2025 09:14:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 45.139.76.0/24 maxlen: 24
45.139.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:fa:c0:5e:24:b0:2d:0e:d4:a4:65:9a:f2:74:12:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Apr 10 09:14:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c04e62a83e4c6715a788100009274d85eb233f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:79:ad:68:41:97:9d:bd:0f:68:7e:14:27:
46:2d:7e:f1:a1:4a:10:5b:60:b4:2c:ce:e7:c0:88:
39:56:b1:38:dd:ab:42:f7:9b:f7:f0:27:a1:56:c7:
a2:0c:76:15:a5:6a:1a:4c:82:b2:3e:a8:eb:3f:24:
1c:1a:56:4b:9f:9d:06:bc:d1:78:15:d6:f4:41:66:
01:46:54:b6:e0:5a:e0:1d:cf:2d:5e:49:d2:ca:44:
33:a9:af:27:dc:c4:9c:eb:6b:1c:bd:88:76:f1:b3:
b9:b2:ac:f5:eb:91:d9:44:5d:1e:fa:b0:3e:56:a1:
fd:3a:ee:d7:5b:23:81:38:60:a2:58:f9:d3:30:bd:
6b:ef:a2:56:d2:95:01:40:90:bf:3a:a5:c4:41:7a:
07:a6:1a:57:6a:f3:cd:cb:15:52:f4:71:e7:0a:5a:
a2:2c:3f:0b:48:be:d4:9c:f1:f6:3b:e7:61:65:17:
27:a4:5e:94:88:3d:c8:4b:87:d5:1b:62:02:90:af:
bf:11:2f:cf:a4:fd:74:a7:b8:72:a8:8d:af:b5:80:
dc:a1:28:a5:a8:43:a0:26:3f:b9:5b:6b:12:24:1c:
af:a9:cd:3f:7d:ed:61:9d:ed:74:72:3d:53:36:bd:
c3:ab:96:e7:13:5a:0a:ea:ce:ee:69:91:50:ce:48:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:04:E6:2A:83:E4:C6:71:5A:78:81:00:00:92:74:D8:5E:B2:33:F3
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/fATmKoPkxnFaeIEAAJJ02F6yM_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.76.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ea:a3:19:89:dd:bd:d1:81:25:9d:a9:5d:84:74:d8:58:67:
b0:28:3b:79:ab:46:10:98:d4:02:91:13:a6:f2:a2:cc:37:21:
d8:47:6f:e8:59:97:78:22:bb:a1:ba:6e:e2:88:01:46:3f:71:
90:4b:e3:7d:2d:7f:5a:89:01:23:df:88:74:c2:5a:f4:9f:64:
bc:86:0c:8d:37:ff:4c:64:76:09:c7:96:36:90:98:f4:0f:b2:
fc:88:00:89:6a:8d:b0:14:86:9b:f8:b7:a3:0f:6b:cc:25:1d:
bd:50:cb:5d:a8:cd:f0:69:15:b1:59:d4:f3:c0:8e:0b:78:79:
4c:11:4d:8b:27:7b:66:4e:79:dc:2a:78:03:27:1c:3c:40:63:
82:fe:4e:35:c8:a7:cd:f1:83:94:c8:97:cc:3c:f2:f7:d2:84:
59:61:02:01:da:77:fc:d0:b5:d0:50:78:c0:22:d2:28:dc:98:
85:be:be:70:94:d9:41:d4:98:32:d7:8a:55:ea:eb:a8:2d:1d:
41:3a:b1:91:60:6a:73:16:a9:cb:35:a5:e7:48:08:8e:a3:08:
f2:6b:37:47:bc:48:33:d3:d8:fa:d9:32:e3:6d:41:01:a4:8d:
ee:be:c2:1a:3d:a4:c5:39:93:97:4a:29:a0:ae:6e:f0:5f:8e:
73:5c:ea:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net