Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/0a-KrfdskF1P1eak9gMq_rpHwLQ.roa
File: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (raw, json)
Hash identifier: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=
Subject key identifier: D1:AF:8A:AD:F7:6C:90:5D:4F:D5:E6:A4:F6:03:2A:FE:BA:47:C0:B4
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019619A69DFD64B4FE194F04E1CFBF0748EE
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/0a-KrfdskF1P1eak9gMq_rpHwLQ.roa
Signing time: Wed 09 Apr 2025 08:24:31 +0000
ROA not before: Wed 09 Apr 2025 08:24:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 45.84.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:a6:9d:fd:64:b4:fe:19:4f:04:e1:cf:bf:07:48:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 9 08:24:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1af8aadf76c905d4fd5e6a4f6032afeba47c0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:40:44:62:f2:ba:89:fc:f1:54:d7:a2:33:
66:43:fe:bf:f6:ea:c1:9a:14:a6:28:b8:79:59:f2:
d2:03:e2:99:e0:9f:08:34:eb:2c:40:aa:08:64:a1:
bf:00:74:24:37:52:b8:27:a9:54:6e:3f:07:7a:8a:
b2:cc:84:44:40:00:4e:d6:b6:09:94:25:14:44:fd:
a8:88:ee:f2:50:d6:27:65:23:f7:a4:51:68:f4:51:
41:5c:88:28:81:26:8f:56:6c:be:a8:4e:a6:b1:0c:
54:35:4e:d7:52:98:9c:09:f4:c5:ad:32:03:14:d8:
82:93:8a:14:74:41:3e:86:45:c3:fa:8d:09:f0:c5:
5e:7e:71:1a:f3:de:cc:e8:e7:75:6c:1b:47:d8:4c:
43:5b:e1:27:cf:21:94:46:e9:93:8d:18:7c:3f:20:
f0:85:8d:ec:c7:82:ce:22:21:a8:3b:c9:1c:26:c8:
bd:fe:91:ab:48:5e:8c:ce:d9:67:1a:2e:15:cf:57:
fe:62:b0:2d:bf:68:0f:7c:e3:10:9d:7a:45:75:2f:
ed:1c:2f:19:06:67:a6:c8:03:d6:4c:6f:80:4e:48:
99:c3:29:52:86:46:e2:d9:df:cd:e1:6d:bc:10:dd:
98:2d:f8:3a:b4:b4:cd:26:9f:d5:ad:60:a9:ae:6f:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AF:8A:AD:F7:6C:90:5D:4F:D5:E6:A4:F6:03:2A:FE:BA:47:C0:B4
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/0a-KrfdskF1P1eak9gMq_rpHwLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.1.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1b:f9:44:84:4c:2e:e7:34:a7:7e:68:f7:fd:60:db:9a:11:
53:fa:8b:3c:de:e0:51:dc:62:3d:93:2b:95:e1:84:93:7d:50:
78:c7:e2:0f:1d:e2:3f:fb:28:0d:ac:1a:cb:b1:50:23:1b:31:
85:26:39:e0:ce:a7:80:80:d1:19:2f:ba:f2:03:f8:e3:a0:7b:
33:f6:17:f8:25:28:5f:ff:c9:f8:6e:a2:77:c1:95:b4:70:3e:
1d:e3:76:09:a0:b3:6a:41:f4:ae:98:8f:e5:1b:09:c0:7b:60:
e0:c2:7d:24:5b:e1:d4:fa:1a:1a:8d:d0:3c:8b:a4:30:56:7a:
89:c8:58:16:a3:bf:98:bf:8d:69:c3:01:c9:85:c9:bd:64:b6:
ad:84:75:9c:80:8a:3d:e6:ba:e1:3d:80:d2:d3:b9:52:0c:4d:
8c:ac:f0:30:b7:ab:b2:4b:0e:2e:4f:06:8d:17:63:4e:07:6d:
68:d3:00:a8:7e:93:01:68:d7:e4:9b:a4:2e:34:c8:ab:08:69:
09:6c:e7:11:9f:2d:15:08:7e:68:89:26:4c:3f:6c:f5:51:2a:
f2:a5:f8:1f:94:05:f8:fa:54:da:b7:1a:d6:ea:aa:e4:cf:80:
57:fe:3b:65:0a:f3:de:cb:7e:ac:8d:03:50:80:fe:c5:cc:89:
82:c3:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net