Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa
File: fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa (raw, json)
Hash identifier: ywjvOQhNwUvuKUliKOgNli6M3ye5boySGrRRcKij+48=
Subject key identifier: 7F:30:95:87:A0:7F:0C:A4:30:07:72:BF:94:C3:08:68:77:F2:AC:5F
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 01954C9C12CCC9ABFE7DFA11A8A627F14091
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa
Signing time: Fri 28 Feb 2025 12:50:51 +0000
ROA not before: Fri 28 Feb 2025 12:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6424
IP address blocks: 82.215.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:9c:12:cc:c9:ab:fe:7d:fa:11:a8:a6:27:f1:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Feb 28 12:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f309587a07f0ca4300772bf94c3086877f2ac5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:49:1e:79:a8:17:2a:b3:58:ef:43:14:f3:
c6:b6:b9:bd:93:dc:07:a0:ce:ca:a0:1a:55:5c:51:
1e:4a:8e:31:ab:7a:3b:1c:aa:db:e1:63:70:5c:12:
30:cc:53:d6:a6:02:5e:17:2f:86:3a:75:9a:4b:d2:
fe:b9:85:b4:1a:27:99:e8:72:08:52:51:68:5f:3f:
72:9d:49:6f:0a:c6:0b:8a:98:ca:db:a6:5c:bb:51:
66:49:f9:ef:c5:0a:08:4a:66:b3:49:39:65:fd:51:
51:d6:fd:5c:42:7d:ae:4c:18:92:7f:7a:e3:52:45:
88:13:4a:b8:8c:84:67:6a:7d:ba:e0:0e:88:3d:dd:
cc:67:e8:f9:f9:e4:51:93:eb:e7:a2:ae:ea:4d:da:
9d:29:9d:16:32:e5:a0:b3:53:01:91:6c:8d:0d:09:
61:25:59:0b:ca:1a:f4:33:f6:ed:9a:1a:91:04:22:
54:fa:fc:0c:1e:84:71:65:d0:20:73:18:8f:5a:96:
fc:60:ed:d9:0a:ca:f9:56:cb:46:ab:3d:b4:b1:e8:
26:84:36:89:0c:2e:82:2f:f8:8c:67:57:6e:6e:e9:
c4:ae:a2:ef:60:2f:17:21:a7:db:17:b9:de:cd:7f:
53:2e:3b:f7:c3:7f:94:8e:4a:f0:7b:57:78:b0:a2:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:30:95:87:A0:7F:0C:A4:30:07:72:BF:94:C3:08:68:77:F2:AC:5F
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:38:65:e1:25:1a:22:95:c6:db:5b:b2:36:eb:d7:00:f0:e9:
61:30:de:04:7d:24:77:05:e9:7b:14:16:71:14:b9:ab:c3:e5:
17:f5:4b:ea:74:b2:0c:22:94:5d:dd:70:5a:92:fb:b6:52:af:
9e:4e:92:06:62:56:9d:db:42:9a:b5:53:6a:d3:ba:4a:27:65:
d4:0a:29:b5:74:ac:7d:35:c9:52:1c:f9:32:e6:53:94:3a:ba:
2d:c4:e4:9b:fe:ce:16:58:99:57:03:ca:29:65:66:ab:dd:ea:
bf:fb:53:cb:a6:32:6c:fd:98:eb:80:ea:8c:f0:18:d7:1b:83:
3d:9e:04:e1:cd:c7:4c:36:ac:47:3e:30:b1:db:f5:41:5e:52:
e4:69:86:08:c9:3e:b2:84:a4:ca:20:ff:54:b8:d5:ba:a3:54:
ea:38:24:c8:fe:fd:ea:4f:93:82:65:55:a8:fa:4c:f3:45:80:
83:0b:c7:6d:00:ee:e9:6f:48:d5:6a:f4:88:c5:2d:32:78:a3:
83:37:19:f4:11:39:02:5f:b6:47:4e:f7:3a:37:59:d4:fa:9d:
03:b0:4d:bd:6e:b3:49:59:c6:a3:9f:43:25:fd:8f:81:cc:12:
d7:74:18:c2:83:c8:46:6e:20:54:67:e4:aa:bf:9e:13:24:5b:
33:2f:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net