Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/eOFwfpAp9t5Wr1bASPFmeWufZoc.roa
File: eOFwfpAp9t5Wr1bASPFmeWufZoc.roa (raw, json)
Hash identifier: BLw6LWDYgC59tC8PdTRtV9+Fp2Xo+9u/YLlHy2Sn+zE=
Subject key identifier: 78:E1:70:7E:90:29:F6:DE:56:AF:56:C0:48:F1:66:79:6B:9F:66:87
Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial: 0195D9918E7B9DD4B24BD9EAC9A1E9C26CB4
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/eOFwfpAp9t5Wr1bASPFmeWufZoc.roa
Signing time: Thu 27 Mar 2025 21:45:49 +0000
ROA not before: Thu 27 Mar 2025 21:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216262
IP address blocks: 185.45.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:91:8e:7b:9d:d4:b2:4b:d9:ea:c9:a1:e9:c2:6c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
Validity
Not Before: Mar 27 21:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78e1707e9029f6de56af56c048f166796b9f6687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:1d:af:2b:54:fe:dc:f0:47:06:95:0b:0c:
db:27:1e:7b:7e:6d:cb:b2:22:ec:af:59:dd:aa:ff:
3b:31:26:bb:d2:3a:92:9a:4c:9e:01:4d:e7:c9:0a:
af:7e:8a:7d:7d:3c:17:4b:f4:d0:41:1b:b4:b7:96:
1e:67:f9:cd:da:92:5b:b1:8f:00:3d:76:c0:23:b7:
a4:16:d1:4a:b8:18:30:11:c8:bc:5f:26:f2:3c:d3:
3d:9b:30:5d:d5:01:c8:16:c2:52:21:e0:ba:20:96:
39:c8:e0:66:1b:0a:9d:66:68:ce:96:29:44:a2:f5:
b7:84:0e:d0:37:83:89:5f:57:5b:c5:6c:31:48:f0:
f2:04:0a:83:6d:6c:95:43:28:68:b9:53:7d:11:25:
12:d1:c2:78:71:7a:1a:d4:44:f7:8a:31:76:57:51:
c3:a8:1c:76:45:a1:12:fc:fc:af:00:94:eb:ef:ca:
b8:39:a9:39:79:c5:d4:e8:ff:0e:a7:bb:8b:6c:66:
ca:49:1e:5f:38:3b:4d:0e:89:fa:8e:cc:e9:9e:48:
d0:e6:79:a7:53:7d:e4:54:6e:ca:bc:68:d7:2d:ca:
c7:15:43:a3:77:bc:76:2a:9d:90:22:af:00:e8:7e:
aa:16:0e:0b:a3:1f:e2:c9:c5:71:fe:5d:81:25:03:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E1:70:7E:90:29:F6:DE:56:AF:56:C0:48:F1:66:79:6B:9F:66:87
X509v3 Authority Key Identifier:
keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/eOFwfpAp9t5Wr1bASPFmeWufZoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.252.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e4:13:5b:59:9e:3e:05:fa:0b:c7:90:73:98:5c:57:31:1f:
04:6f:fc:3a:e9:ac:9d:ab:14:9a:13:80:b1:7d:f4:29:c0:bb:
aa:df:88:dc:01:e2:c9:e2:c5:81:0c:58:09:96:c2:94:3f:ab:
47:2d:74:fb:73:8d:93:ca:0a:66:f1:13:42:d9:5e:55:e7:6a:
18:ec:89:7c:84:13:e3:73:9d:41:0d:4c:dd:3e:59:49:cb:42:
e4:31:d2:bc:dc:20:55:d3:97:e1:59:d3:23:9b:8a:14:1f:08:
74:ca:0c:0d:cd:e2:f8:f7:f8:26:ae:11:ec:57:a8:15:a4:13:
30:71:20:29:bc:77:d9:35:2f:10:1e:ed:f3:26:46:86:ee:4c:
68:a2:5c:45:1e:ba:58:e7:68:08:2b:86:d1:c0:b4:5b:96:cc:
94:7e:a6:b8:07:a5:93:86:ad:c7:6e:87:fe:2f:73:78:c6:ab:
3b:46:e1:7e:27:5f:0d:1c:70:c4:ac:ae:64:a7:82:d6:5d:e4:
f9:6e:8f:e4:f3:78:8a:a7:40:4e:6c:a4:ba:dd:56:e3:dd:ba:
0b:36:43:35:98:78:76:94:6d:15:63:82:0c:dc:e0:b2:f1:4f:
3c:de:fd:53:af:7e:dc:ca:5a:4f:59:2b:37:10:b9:f2:c5:25:
92:09:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net