Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/E1tiJF9pbO0eSBPSwr1et8cPjUs.roa
File: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (raw, json)
Hash identifier: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=
Subject key identifier: 13:5B:62:24:5F:69:6C:ED:1E:48:13:D2:C2:BD:5E:B7:C7:0F:8D:4B
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019423D6D0DB85AEEB887CCFBE3552484F88
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/E1tiJF9pbO0eSBPSwr1et8cPjUs.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47230
IP address blocks: 195.216.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d0:db:85:ae:eb:88:7c:cf:be:35:52:48:4f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=135b62245f696ced1e4813d2c2bd5eb7c70f8d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:77:52:5d:51:ca:d3:11:66:d3:db:9e:90:8c:
c9:7a:e6:27:60:2d:c7:41:3e:81:6b:7c:40:27:bb:
ae:bd:dc:6a:a8:de:6e:40:bd:e1:2b:73:8a:67:ca:
2d:9d:54:da:ef:b7:87:4c:b2:e9:5c:0e:08:d1:78:
f1:cc:fe:68:5c:53:c1:6d:07:6b:84:52:22:aa:2d:
1f:b8:17:09:51:57:1d:86:0c:9c:c1:68:41:5c:8e:
71:db:78:06:d0:38:bf:cf:25:80:d1:9f:0b:bf:21:
44:3d:94:67:0b:9f:5a:f1:38:63:9f:01:47:8d:61:
4a:29:4d:08:a3:7e:45:5d:55:34:21:e1:9d:12:24:
60:da:34:1c:9e:a8:f3:35:0e:ff:aa:04:c7:c0:c5:
51:6b:2d:c7:30:aa:d1:7c:6a:25:d6:9f:ea:b6:3e:
49:b7:e7:17:52:74:f0:8f:63:e4:b7:59:30:d7:e4:
13:29:d4:4a:5a:90:d8:ed:d7:84:1b:7f:e5:81:83:
cf:b0:71:dd:af:2c:e5:44:e5:8b:32:ff:57:1b:5f:
53:10:a4:7f:a4:9e:36:cb:c9:93:f5:b8:1a:52:c4:
bd:9e:16:d0:2c:f9:ac:17:21:54:69:c7:0e:e9:65:
aa:20:74:ce:05:63:88:33:1b:6f:4b:ef:20:71:9a:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5B:62:24:5F:69:6C:ED:1E:48:13:D2:C2:BD:5E:B7:C7:0F:8D:4B
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/E1tiJF9pbO0eSBPSwr1et8cPjUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.239.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6e:e8:77:29:f8:ad:bc:24:19:c3:f9:da:f4:45:bc:87:fa:
c3:b6:7e:37:cf:5a:be:eb:99:75:23:53:2e:32:f4:6f:04:29:
fc:0f:b3:c7:52:60:79:82:fe:5f:21:32:b6:2a:86:51:1f:65:
8b:a2:e5:de:60:6a:ce:6f:12:77:8d:cb:dc:55:b7:fe:94:17:
1b:f8:92:35:ca:b6:96:9d:9a:da:ae:b8:70:bf:84:ab:d7:46:
96:13:46:51:88:48:af:43:ad:97:93:0a:51:e5:b3:f5:87:59:
0f:64:46:99:e8:ba:de:f4:92:a3:c5:d4:eb:7e:b3:f9:4e:d7:
fe:76:94:58:50:46:cc:34:e4:0b:3a:3b:52:18:ef:ec:c7:d2:
5c:26:de:29:e3:4d:47:ee:4c:06:2c:5c:8c:87:84:39:f8:a5:
88:b4:e3:4c:50:77:30:71:db:cd:55:e6:6d:db:2a:65:2c:84:
fb:75:65:c3:d1:1a:2b:e9:2c:2c:6d:bc:be:13:b9:54:49:a9:
bc:c8:43:be:32:33:45:ce:51:6f:5e:90:64:c9:f6:00:76:63:
3e:86:38:8e:de:90:0b:53:b7:13:39:03:5e:96:b5:d9:e8:36:
52:e6:b6:fc:ba:e6:81:ab:dd:8e:ba:93:cd:56:43:e7:76:53:
46:5b:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net