Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/NEEzqFo3JsV_n4MFb0Yxmf808p8.roa
File: NEEzqFo3JsV_n4MFb0Yxmf808p8.roa (raw, json)
Hash identifier: 0mWJ5uApbngYHfePL8mt8/ZYQaGNsS3QaqUfE/nt3Es=
Subject key identifier: 34:41:33:A8:5A:37:26:C5:7F:9F:83:05:6F:46:31:99:FF:34:F2:9F
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0195550B51DA7A5A2AB9E33F00ABEB5D784D
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/NEEzqFo3JsV_n4MFb0Yxmf808p8.roa
Signing time: Sun 02 Mar 2025 04:09:19 +0000
ROA not before: Sun 02 Mar 2025 04:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212860
IP address blocks: 176.221.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:0b:51:da:7a:5a:2a:b9:e3:3f:00:ab:eb:5d:78:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 2 04:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=344133a85a3726c57f9f83056f463199ff34f29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:f6:96:4c:13:a9:74:41:06:45:43:bb:dd:
a0:bb:6c:6b:48:e6:af:11:f5:30:88:73:22:cd:13:
35:25:f8:f2:be:85:46:c7:86:25:8f:9e:d4:b9:0d:
96:88:df:12:dd:3f:e8:00:99:b1:53:0b:c5:e5:84:
fa:30:db:4a:44:eb:a0:96:55:a2:be:d5:9c:bf:70:
3b:1d:a1:24:e5:87:c0:d7:f7:12:7c:28:06:7c:1b:
e8:77:22:28:26:7f:f7:db:18:e1:53:a1:a3:24:ea:
bf:63:c2:ea:56:10:fb:bb:80:c7:62:25:b6:32:1e:
92:48:1a:26:08:bf:55:28:79:38:48:cc:ed:0e:c2:
95:7f:05:22:9b:1e:9e:e8:52:a1:03:fb:0b:ee:93:
cd:c8:45:34:53:f3:aa:24:0d:f0:7c:0c:61:1c:68:
53:c4:73:98:b9:ec:d4:a9:7b:38:f0:c2:48:25:bd:
07:11:42:96:f4:e0:47:bb:37:ce:95:37:ff:83:88:
51:ac:59:91:f4:55:60:ef:47:37:85:c9:aa:58:cf:
2f:c0:f1:e1:7b:5e:51:6d:00:69:e4:43:f0:2f:34:
3c:24:0a:38:b5:ab:85:1a:fc:6d:07:d9:17:44:a8:
0b:12:f2:ab:78:9e:f7:f4:ee:97:c8:30:12:60:6b:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:33:A8:5A:37:26:C5:7F:9F:83:05:6F:46:31:99:FF:34:F2:9F
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/NEEzqFo3JsV_n4MFb0Yxmf808p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.28.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:e4:05:7f:5b:2d:8b:ec:87:a5:54:6a:09:f6:53:8b:7b:56:
1e:b6:51:b1:14:a5:40:0e:6f:d2:ef:86:d1:51:62:2b:a9:c7:
1d:1d:68:c8:d2:5a:2f:70:b6:9d:9e:90:ec:58:73:61:3e:b5:
fd:4f:ae:a7:c1:61:e0:08:9c:91:c9:d6:cf:51:d2:1d:db:72:
b2:c5:c7:79:28:2d:36:4c:30:6c:4f:c3:bc:64:2a:8a:15:cb:
0c:3b:2b:6b:59:4f:62:05:7b:55:f5:06:b7:76:d3:28:21:57:
39:12:5a:7b:c3:ac:c7:ae:63:30:98:c8:3f:0b:45:4a:54:2e:
03:f5:8f:20:9c:11:cd:04:a4:eb:6e:0c:3d:f1:ec:eb:89:53:
c4:aa:a0:92:f5:b6:fa:b1:5c:40:f9:c1:ea:83:cb:b0:ef:bf:
5d:91:97:be:a1:f4:b8:f7:4f:27:2b:11:37:d4:06:fa:54:3e:
75:34:de:96:22:55:b6:30:06:f3:a3:f6:27:47:c9:d3:f7:b4:
2b:cd:72:cf:52:29:25:bc:cd:7a:02:5c:41:8a:e1:7c:33:91:
74:5c:67:87:7f:94:2e:b2:69:af:98:f9:ef:1a:a6:ff:d9:7b:
c6:de:a4:a7:67:7d:b6:92:3d:9f:a6:72:51:10:45:c2:9a:3d:
37:da:e0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net