Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bE47TjBGbwXfU-r3q5mX8QT37TA.roa
File: bE47TjBGbwXfU-r3q5mX8QT37TA.roa (raw, json)
Hash identifier: W/p8gTqazmlXb6lHv7JR1fNZM1/3zoGeNwN/AW0drkI=
Subject key identifier: 6C:4E:3B:4E:30:46:6F:05:DF:53:EA:F7:AB:99:97:F1:04:F7:ED:30
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01962AF8065AB206D4F0A2653851FA77D0E3
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bE47TjBGbwXfU-r3q5mX8QT37TA.roa
Signing time: Sat 12 Apr 2025 17:06:59 +0000
ROA not before: Sat 12 Apr 2025 17:06:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 212.116.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f8:06:5a:b2:06:d4:f0:a2:65:38:51:fa:77:d0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Apr 12 17:06:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c4e3b4e30466f05df53eaf7ab9997f104f7ed30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:77:5d:9c:ca:21:06:dd:5b:3a:f8:52:ec:
3c:25:bb:74:68:95:1f:3b:d4:bb:b0:53:34:2d:26:
ad:d2:dd:00:c0:3d:90:1e:6e:79:c2:cf:81:3e:8a:
bd:1e:6b:c2:72:1f:be:77:d6:8a:3d:f6:0b:b0:4b:
26:63:c3:69:1e:70:58:6f:7e:6c:30:29:ef:09:8e:
91:2c:ec:70:ba:a8:16:89:db:b7:eb:87:48:79:60:
4f:45:b4:b2:eb:65:b7:b1:15:4e:25:ce:3b:cd:4b:
a9:f0:f6:fc:28:65:73:5d:a8:d6:db:c4:c1:cb:42:
21:33:0e:06:48:d5:f8:b9:6a:05:bb:fe:3d:4b:b5:
e7:3c:e2:65:70:73:f5:1b:83:48:59:9c:66:29:fb:
35:3a:53:d6:09:58:91:86:41:58:63:93:62:21:26:
47:bc:aa:a4:5d:79:a0:0a:b9:d0:d4:62:87:28:98:
3f:a1:3d:e4:20:fc:f5:aa:4e:e7:f8:19:ce:20:c3:
cf:db:cf:18:20:f6:7b:ef:21:cd:d3:2c:1d:84:48:
67:34:53:71:da:48:26:a9:eb:6f:4f:59:8b:52:4a:
75:4f:8f:f7:5f:29:b6:b2:94:d4:f3:90:6b:46:a1:
30:06:32:50:84:fd:82:62:e6:2c:5f:82:c8:d5:ba:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4E:3B:4E:30:46:6F:05:DF:53:EA:F7:AB:99:97:F1:04:F7:ED:30
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bE47TjBGbwXfU-r3q5mX8QT37TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/24
Signature Algorithm: sha256WithRSAEncryption
38:09:88:39:c4:7d:7c:18:0b:88:1f:18:0c:73:2b:8f:fa:41:
15:06:47:ea:dc:e5:df:28:2a:b5:a8:00:68:bb:a4:d2:5c:7b:
a6:8a:39:f5:b7:6a:ff:8d:03:f7:e4:67:14:ee:1c:c8:f9:73:
11:bc:fd:42:d2:14:12:82:02:73:8d:ab:ef:d2:de:fc:c2:f7:
54:1d:df:bb:c9:fc:7b:99:52:28:da:73:fe:51:01:94:80:7b:
77:58:cf:a3:97:68:da:13:f1:ff:88:38:54:e3:42:61:7d:1c:
4b:94:36:dd:6e:fb:62:ad:56:3d:99:c9:a3:a4:ea:40:22:b1:
27:24:62:ee:c5:4c:bf:38:fb:48:2a:6f:1f:47:0e:7b:aa:1c:
c0:d2:23:6f:07:2e:bc:58:e4:b6:0a:6c:57:75:ba:16:90:91:
8d:b3:c2:e4:12:14:1e:23:89:3b:45:59:2a:12:8e:51:1e:ae:
9c:dd:dd:71:6f:3e:db:ae:f7:1a:c0:8f:e2:34:38:41:24:1f:
b0:a7:c1:7e:06:44:27:23:de:1d:28:19:32:d5:52:c3:5a:69:
0f:20:af:6a:6a:60:5d:90:47:b8:d2:aa:70:d5:f4:0c:6a:82:
4a:64:89:ea:18:b6:cd:44:95:de:17:06:47:18:7f:19:9e:44:
95:3c:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net