Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa
File: X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa (raw, json)
Hash identifier: F6qzhSvRetaj+e88oLEkGWGa7Q7qazK+VtbQtj1mS7I=
Subject key identifier: 5F:EB:51:7E:B9:BD:09:B0:67:51:62:E7:FB:E9:98:63:9C:89:2C:54
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0196177BCFFEB73B1FDA4E365DA6FB2AA744
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa
Signing time: Tue 08 Apr 2025 22:18:32 +0000
ROA not before: Tue 08 Apr 2025 22:18:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10103
IP address blocks: 45.141.130.0/24 maxlen: 24
212.87.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:7b:cf:fe:b7:3b:1f:da:4e:36:5d:a6:fb:2a:a7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Apr 8 22:18:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5feb517eb9bd09b0675162e7fbe998639c892c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:47:38:99:43:eb:51:35:10:0f:b5:3f:05:
20:b5:c7:d4:82:ec:8d:e4:38:58:44:24:20:ff:40:
ef:a6:77:db:6b:9f:eb:2a:a9:2e:47:fb:9e:6f:88:
99:29:45:36:6c:1b:51:a6:69:08:2e:95:73:8d:d1:
2f:21:01:c4:1f:36:db:cb:91:08:fd:c5:7e:b8:66:
c6:0d:fd:f2:db:f4:56:a2:e4:c1:45:c3:aa:93:94:
3e:e5:c1:39:58:d3:76:89:59:b2:fc:72:c0:4c:29:
67:50:7d:fb:8a:03:6d:5a:83:ab:7f:50:6b:db:de:
59:a1:4f:31:78:dd:b6:ab:a1:e8:95:49:8d:14:4f:
bf:75:82:e1:e9:11:f1:64:c7:28:6d:5a:e7:21:f6:
74:c4:c4:0f:c8:0e:88:cc:78:7c:39:88:77:21:52:
4c:8e:8c:df:88:3b:29:44:68:9e:36:37:c8:93:64:
90:e0:f9:8c:34:36:9f:14:40:6b:75:7b:a8:d3:5d:
9d:2d:f4:26:1c:ac:66:59:7d:59:cc:9b:bd:1f:63:
14:b4:5b:26:68:0a:fb:43:91:84:cd:a7:dd:68:62:
54:e1:5e:74:64:12:ad:45:44:d9:53:41:c6:68:24:
7e:e4:15:ff:21:20:e6:bd:04:46:c5:db:a7:c2:90:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EB:51:7E:B9:BD:09:B0:67:51:62:E7:FB:E9:98:63:9C:89:2C:54
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/X-tRfrm9CbBnUWLn--mYY5yJLFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.130.0/24
212.87.217.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a8:dd:81:9b:54:66:1e:70:a4:e4:27:bf:9a:c6:49:b8:11:
71:dd:c7:19:e3:bd:cc:ee:3e:ac:f6:14:43:ed:45:c6:74:aa:
08:fd:0e:76:02:78:2f:61:36:42:74:41:f0:ce:c1:09:ea:0b:
5e:a9:f2:f2:6a:c2:4a:66:b6:ca:a2:fc:ae:26:6d:fd:34:c4:
3f:16:40:27:cf:a0:db:c2:89:00:53:2e:62:4b:33:ed:1b:5d:
77:46:e5:de:e1:d6:00:b8:68:2c:32:4c:08:ee:6b:95:b1:79:
5f:60:1a:b3:cf:a9:41:09:a1:f2:2e:6b:02:83:3f:d9:a1:53:
30:20:3e:a6:46:48:40:9d:5b:0b:0c:c7:5d:a4:51:ec:7b:21:
02:d3:ad:d2:e0:72:87:e9:91:11:d7:88:a0:89:f6:f1:56:39:
d0:f9:19:ac:17:49:43:db:53:b4:e7:2b:c1:44:6d:c8:7a:b2:
d2:6a:e9:28:f6:40:aa:9c:90:4c:e0:78:65:02:0f:a5:54:c0:
e0:3e:1d:8d:ad:69:69:f1:69:91:3a:2a:7d:8e:05:8f:be:29:
01:59:f1:41:e7:16:75:3c:bf:49:c2:ca:90:e5:c6:9b:d3:df:
82:8c:e9:a3:78:e3:f6:e3:a8:d1:4d:7b:f8:b2:46:8c:11:89:
53:e0:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:40 2025 by rpki-client on console.sobornost.net