Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/F8pRiEheQa10SQdkNWvS99cZXUQ.roa
File: F8pRiEheQa10SQdkNWvS99cZXUQ.roa (raw, json)
Hash identifier: ECJYqiZw6ZmZtQ04HHTXu/7XAKbIZCgVHRvo7AY0E6A=
Subject key identifier: 17:CA:51:88:48:5E:41:AD:74:49:07:64:35:6B:D2:F7:D7:19:5D:44
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 0194D76B62392197CBB3064BF2CECF7CE8CD
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/F8pRiEheQa10SQdkNWvS99cZXUQ.roa
Signing time: Wed 05 Feb 2025 18:42:06 +0000
ROA not before: Wed 05 Feb 2025 18:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202520
IP address blocks: 213.179.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:6b:62:39:21:97:cb:b3:06:4b:f2:ce:cf:7c:e8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Feb 5 18:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17ca5188485e41ad74490764356bd2f7d7195d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:cf:7e:82:b2:78:a7:53:03:2e:91:70:65:
10:e6:65:24:1f:03:22:11:45:19:7e:1c:3e:72:e7:
b0:a8:cb:21:8f:3b:03:b5:cd:87:af:4e:4a:fe:d0:
9c:3d:df:7c:b5:99:09:c3:26:c1:12:42:b6:16:1c:
be:7d:ba:33:fa:fa:74:79:54:34:d1:70:da:cf:29:
2e:b2:27:8f:1d:5e:6c:1b:c6:e6:24:26:75:8d:be:
6d:c4:f7:02:8e:9c:f4:51:70:6f:56:99:e9:8f:be:
c3:b7:41:ec:14:6e:83:9b:28:b3:02:4c:71:bb:56:
37:79:d1:1e:95:7e:9a:26:2d:e0:33:94:cf:4c:71:
24:53:a5:b0:1f:ef:6d:99:30:1c:42:83:12:7a:7f:
76:23:62:21:44:2d:3e:e1:f0:d2:7c:a8:f8:f8:44:
60:73:11:3c:56:03:ca:3f:f0:50:4b:07:32:41:6e:
cb:d9:d4:7b:85:82:04:49:04:c3:38:b0:3d:e0:49:
a4:a5:0b:72:75:8d:b7:c5:05:44:1c:ee:b3:32:7f:
b1:e9:bc:82:34:d4:d6:88:b8:1c:ae:88:e8:19:a2:
51:4d:0b:21:f6:4c:a1:5a:40:dd:6e:46:be:74:4f:
70:53:24:5f:fc:6b:a6:e9:80:30:31:ac:19:f4:35:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CA:51:88:48:5E:41:AD:74:49:07:64:35:6B:D2:F7:D7:19:5D:44
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/F8pRiEheQa10SQdkNWvS99cZXUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.179.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:27:f5:b8:49:e9:41:0b:2d:c6:74:d7:0a:44:e5:d0:a9:e9:
21:17:dd:cf:d4:39:1e:c0:e9:4d:d6:62:35:46:6e:a7:44:1c:
37:5a:17:5c:18:29:54:33:2e:fd:63:cb:6f:c8:26:ad:6b:f2:
e3:e0:a4:e7:d2:df:f8:d8:0e:eb:ec:41:6c:e2:f8:41:2a:43:
56:c5:5a:d1:01:65:99:d1:cd:b9:94:67:4e:c2:ab:a7:b3:04:
f7:00:f4:92:13:4e:f2:70:51:02:29:e3:92:91:37:cd:43:4e:
8a:a8:5a:35:4a:0a:5b:0f:94:26:5e:81:33:b5:ad:69:5e:32:
1f:2d:ca:3c:b6:d4:34:79:7c:6f:bf:5f:02:38:0b:4b:4d:1f:
48:9d:69:22:2a:53:c2:39:d9:ed:b9:16:6c:a0:97:c7:ba:cd:
36:f3:c0:30:dd:d4:2e:cb:fd:82:5f:2e:5f:4a:af:4c:d4:6f:
f7:b3:48:1c:b5:af:92:55:01:ac:f8:dc:a8:5a:54:4c:2b:de:
05:a1:d4:02:03:a7:49:31:2d:6c:40:be:6c:d3:64:4e:89:31:
4b:13:96:97:fd:bd:91:49:fb:0f:f9:05:f2:e0:05:f9:39:28:
a9:c6:6a:c8:3c:e4:99:f9:61:e6:f7:61:50:a8:3f:41:81:1b:
66:6f:b1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net