Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/fmLn40rK7e-kwLrOR1_MivV_lTs.roa
File: fmLn40rK7e-kwLrOR1_MivV_lTs.roa (raw, json)
Hash identifier: f1jZexHT1rx7FJNMv/8AMpXH6m8ggfq4EEnoab0o9fs=
Subject key identifier: 7E:62:E7:E3:4A:CA:ED:EF:A4:C0:BA:CE:47:5F:CC:8A:F5:7F:95:3B
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3D1A0A81A52F93DEDACB9548E4063
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/fmLn40rK7e-kwLrOR1_MivV_lTs.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216400
IP address blocks: 45.133.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d1:a0:a8:1a:52:f9:3d:ed:ac:b9:54:8e:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e62e7e34acaedefa4c0bace475fcc8af57f953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:6a:7e:f2:cb:0e:a7:67:f5:8f:a9:82:f0:
c0:6c:4d:46:83:20:c0:56:dd:65:9c:98:ac:23:49:
c1:e9:1d:7a:b6:95:48:db:9d:8f:44:58:b1:d3:a2:
cc:1e:05:c8:ba:04:42:bc:e1:34:0e:75:e4:cc:26:
26:46:bd:f6:93:f4:8e:58:ec:37:80:30:68:84:5b:
22:23:cc:f7:69:a0:11:e7:f2:9a:97:eb:d2:9f:ea:
9f:18:ea:de:1c:b8:72:10:ed:36:eb:80:f4:8f:5a:
1c:45:fe:15:6d:0e:bc:91:fa:6e:bd:2b:b7:d1:62:
41:19:08:71:10:34:4c:6b:97:5a:5a:99:38:d9:6b:
3c:e7:74:c4:32:06:32:39:6e:cb:92:bc:d7:72:18:
8a:a1:8b:92:6b:88:5b:69:b5:54:6d:bf:6c:89:96:
b2:d2:de:9e:6b:32:fe:2b:ed:c0:94:52:5a:9a:67:
e5:ab:fc:ff:c1:c9:56:04:d9:3d:6d:3d:d0:98:fd:
a9:03:4c:18:6f:e9:0f:45:a7:13:28:21:b0:aa:80:
77:1a:c0:76:a3:68:6d:e2:db:49:32:a8:2f:d7:7d:
7b:dd:00:cd:ec:ac:2c:dd:fc:3e:79:69:c7:82:f2:
7b:98:8a:ac:e3:2f:ba:a6:aa:7b:a5:01:97:44:94:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:E7:E3:4A:CA:ED:EF:A4:C0:BA:CE:47:5F:CC:8A:F5:7F:95:3B
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/fmLn40rK7e-kwLrOR1_MivV_lTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.106.0/24
Signature Algorithm: sha256WithRSAEncryption
16:44:03:42:30:0b:a5:84:e5:81:eb:a1:6b:94:0a:12:9f:86:
99:9f:84:7d:25:c3:ed:53:26:ff:f3:dd:4b:00:7d:ba:18:10:
dd:8d:7b:6d:01:b5:7d:bc:8a:75:2e:27:df:20:b2:77:52:ba:
79:e7:cb:0c:49:7c:8a:6f:e5:c6:db:8a:2d:b7:23:ff:19:32:
22:9a:5f:5f:b9:da:30:ed:44:c8:ba:68:6c:b0:eb:ef:02:02:
72:b5:65:8c:19:fb:74:ba:b9:52:1f:be:a0:9f:5a:d6:2c:57:
a3:a0:ac:1a:c1:c9:70:21:f7:33:ae:cf:f1:fd:05:9e:03:b3:
c9:e4:88:a6:49:a5:d4:bf:33:f3:13:84:54:c9:be:cb:a4:44:
4c:a4:8a:2b:85:03:04:da:ec:b2:f7:2d:c5:86:d5:ed:a2:09:
49:41:af:e6:ce:40:ec:cb:91:ac:0d:6c:54:0e:3a:2b:b9:19:
ce:4a:ee:64:f0:fe:8e:9e:ed:99:52:fb:0d:d5:46:85:f3:ab:
23:fd:18:f8:d4:4e:b7:b5:8c:ef:d5:88:d9:dd:fc:e8:d8:96:
f7:41:fe:11:69:c2:d7:5b:fa:12:65:77:ef:f9:39:2d:62:32:
04:fc:68:12:a1:5f:ad:a2:e3:2c:18:f5:ad:3a:1d:4f:37:d1:
c1:8f:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net