Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/D9naFu6VO2lwpjmohULxFpHf9o0.roa
File: D9naFu6VO2lwpjmohULxFpHf9o0.roa (raw, json)
Hash identifier: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=
Subject key identifier: 0F:D9:DA:16:EE:95:3B:69:70:A6:39:A8:85:42:F1:16:91:DF:F6:8D
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019425207AA16437FFAF8BC3FF5A71247540
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/D9naFu6VO2lwpjmohULxFpHf9o0.roa
Signing time: Thu 02 Jan 2025 03:47:52 +0000
ROA not before: Thu 02 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50832
IP address blocks: 213.135.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:7a:a1:64:37:ff:af:8b:c3:ff:5a:71:24:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fd9da16ee953b6970a639a88542f11691dff68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:9c:20:20:14:9a:28:57:5a:fd:60:e8:1a:
5d:ed:dd:05:fa:9f:4e:5d:ee:96:3d:20:6d:a4:25:
86:94:e9:ba:7a:d0:e4:42:62:52:5c:1e:a9:17:f5:
07:fa:7f:22:e0:a2:9a:c0:a1:5a:7b:17:97:9b:16:
aa:80:46:c6:e7:db:9d:ac:13:46:ed:a6:f0:3f:65:
8e:74:b1:3a:4d:8a:c0:4d:6a:40:ed:09:6e:51:3d:
e8:0b:2d:64:0c:39:1c:6c:b6:a1:06:47:a8:0a:8b:
e7:2b:d6:b2:4f:0c:74:3f:88:9e:ae:d7:de:bd:6f:
5f:ee:92:d8:b0:4f:b6:c5:cf:e2:e8:9b:fa:33:ff:
a4:3c:94:b9:85:5b:9a:6d:b2:65:22:0c:08:93:3a:
ae:d8:68:3e:1b:01:6f:9d:a0:eb:02:fb:15:75:0c:
80:d8:63:eb:83:ba:38:2e:f9:1b:fa:9f:2b:a4:59:
ff:d8:13:07:2a:f4:18:02:d8:ed:03:cb:0c:ea:7b:
58:bf:31:ba:4b:ab:b4:80:66:7d:63:c6:e2:a6:4a:
14:09:4a:2e:23:8d:40:8a:0b:1a:f6:a3:81:4a:0b:
5a:5f:22:e3:af:71:3e:d0:64:f5:a9:f5:7c:bb:90:
0a:18:29:d2:fd:46:42:04:b9:7d:45:77:49:01:8f:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D9:DA:16:EE:95:3B:69:70:A6:39:A8:85:42:F1:16:91:DF:F6:8D
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/D9naFu6VO2lwpjmohULxFpHf9o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2a:a0:b2:15:57:b1:0f:0e:be:88:a1:09:e8:8d:72:8e:df:
81:d2:09:85:20:e7:81:fd:f7:43:1a:06:d4:53:e1:f6:85:46:
15:dc:9a:fb:5c:2c:dd:64:c3:0a:56:64:ee:4e:53:ae:a2:a9:
57:57:d7:6b:1f:ce:c2:6f:18:e1:30:11:13:02:55:13:98:de:
2c:41:14:aa:d7:df:f9:f5:ed:3e:a7:c7:07:15:9e:70:7d:2b:
c6:c7:b5:81:a9:64:28:c7:17:b0:da:8e:ce:ee:1b:7b:42:2e:
fc:5d:f6:5f:e0:3b:52:6b:86:d6:38:87:e1:2d:67:92:a3:0a:
bc:17:bf:77:8d:65:3c:96:44:a3:6b:00:50:13:3d:42:5f:f3:
6c:0f:1c:f5:61:bc:f6:4d:92:dc:cb:07:21:08:34:f6:b1:2f:
6c:47:44:a4:9f:1e:37:1c:24:7b:39:c5:9e:cb:a8:79:20:0a:
4e:98:88:11:a0:cf:b9:a0:4b:c8:35:14:fa:1b:49:54:74:5c:
5d:92:1b:b4:68:b3:e4:ab:c5:7e:31:cc:14:03:0f:1c:ca:0b:
c4:d1:54:dd:bb:45:61:f2:7b:0d:af:26:7d:37:05:2e:bb:cf:
1d:be:5c:57:c1:06:68:10:26:da:6a:71:83:e0:a3:10:83:e0:
ee:df:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net