Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/RhJqWm0s7H9JSpG-oB16vDuB6kk.roa
File: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (raw, json)
Hash identifier: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=
Subject key identifier: 46:12:6A:5A:6D:2C:EC:7F:49:4A:91:BE:A0:1D:7A:BC:3B:81:EA:49
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 019426D94C29C3921470A60DDCD78E99F14B
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/RhJqWm0s7H9JSpG-oB16vDuB6kk.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43089
IP address blocks: 213.251.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4c:29:c3:92:14:70:a6:0d:dc:d7:8e:99:f1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46126a5a6d2cec7f494a91bea01d7abc3b81ea49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:dd:3d:a1:cc:bc:f5:ee:1c:2f:d0:03:23:
6c:02:9d:3f:4b:f2:68:5f:bb:28:cd:a7:0f:48:cd:
64:0f:1e:3f:e8:8a:41:8e:9d:76:30:77:e8:c1:cb:
f2:94:dd:15:de:8d:34:7f:55:30:69:ae:da:34:54:
4f:82:da:24:a5:43:28:d5:00:81:21:2e:3f:20:77:
f7:a7:d7:53:bc:06:1a:a4:99:4b:16:13:90:7e:2b:
93:2c:20:b2:04:e5:34:ad:2a:b3:fd:1e:da:61:16:
46:50:a3:5a:0b:a5:f8:99:48:5d:ae:24:f0:84:20:
dd:38:8d:1e:7a:31:48:7a:2e:b0:0e:42:4b:45:0c:
ef:52:3f:35:84:bf:f6:df:3b:bc:d5:05:42:0f:70:
27:f8:25:eb:bb:42:32:6f:31:36:6e:a4:ed:7a:52:
cc:43:de:10:f6:72:04:bd:af:8e:2b:69:e5:e7:41:
9e:48:f2:df:3f:33:9a:5c:cc:7c:cb:25:4f:75:4e:
bb:56:e8:59:ae:a4:39:d1:25:a7:5a:91:3d:a2:7f:
1d:04:c2:8c:1c:f2:8a:04:86:ee:50:46:c1:ed:84:
f4:82:14:c9:71:51:2f:50:30:ef:3a:30:d2:e7:e1:
b2:81:44:7b:96:1d:fe:bc:6c:3e:00:8c:7d:1a:9a:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:12:6A:5A:6D:2C:EC:7F:49:4A:91:BE:A0:1D:7A:BC:3B:81:EA:49
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/RhJqWm0s7H9JSpG-oB16vDuB6kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.251.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2c:da:62:6e:82:35:97:44:63:13:6b:e2:80:e7:9e:b3:19:
14:00:d6:09:b2:9d:26:3d:9b:ec:72:de:27:b5:0e:6c:0b:03:
ea:f0:1b:b0:65:62:83:09:30:2c:64:51:56:01:6a:bb:08:28:
31:cc:fe:e3:d6:d9:a1:67:94:15:eb:ad:c0:47:ef:8c:aa:64:
1e:fa:c9:5a:5c:26:d7:f7:b3:46:da:45:47:a1:12:2d:d2:05:
87:68:52:6f:8c:0d:b0:15:1f:3a:69:72:dc:05:84:cb:8e:9e:
29:ac:c1:2f:51:90:db:d7:1a:f9:46:9e:79:4f:5e:8f:e3:81:
7e:13:aa:4f:40:72:23:07:57:bc:ae:40:ae:a2:55:f7:4a:2e:
22:57:c0:b1:be:1f:98:88:3e:40:de:00:d4:3c:55:25:7f:14:
c6:fb:f7:4c:42:7a:cf:0c:7b:d7:ca:55:dd:d3:f8:5f:39:e0:
86:69:6e:43:b2:6b:dc:be:4a:8d:66:64:16:4c:be:b2:21:f4:
18:e4:77:ab:16:49:0d:fa:70:5a:a5:67:47:77:a6:c8:99:84:
f1:c0:9e:35:7f:c9:8e:62:d3:f7:36:fe:8f:66:e4:02:88:fc:
e4:85:f4:c1:4f:3f:1c:f6:82:a2:5b:52:bd:82:dd:e1:74:50:
dc:c0:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net