Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/T4JSoFrEVlA3_2SnHmgBXY12CKk.roa
File: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (raw, json)
Hash identifier: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=
Subject key identifier: 4F:82:52:A0:5A:C4:56:50:37:FF:64:A7:1E:68:01:5D:8D:76:08:A9
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 01942068146F9D3FCEE4CE5D2C6820C50F53
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/T4JSoFrEVlA3_2SnHmgBXY12CKk.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13079
IP address blocks: 213.168.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:14:6f:9d:3f:ce:e4:ce:5d:2c:68:20:c5:0f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f8252a05ac4565037ff64a71e68015d8d7608a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:ea:7f:30:19:e2:6d:18:05:84:5a:73:d8:
14:29:41:a8:87:14:da:07:e0:fc:84:57:c2:cd:d9:
c4:73:3b:ce:e3:c4:1a:de:6e:ea:4a:25:84:4f:77:
08:02:c3:c8:31:5f:ba:a9:08:91:78:b5:c0:a1:43:
5c:4e:59:e8:b8:53:11:9e:f9:27:80:34:d1:2a:21:
15:e7:64:3b:33:ea:a4:94:e2:0c:fd:1c:eb:be:3c:
fd:74:31:c0:28:54:76:23:2e:df:33:41:54:1d:ff:
d4:32:80:16:bf:1b:05:1c:bb:43:6f:bb:04:a3:d9:
22:b2:07:3f:f6:90:eb:0e:cf:b7:9b:50:d1:c4:e3:
7a:31:6b:d8:0e:75:25:04:87:1e:40:74:66:b2:03:
6d:7a:d2:89:0e:59:a6:fd:18:ea:87:11:c6:62:15:
31:cc:5d:58:ea:c2:ed:a8:e7:b2:d8:01:f6:cb:32:
14:9a:51:b6:f4:62:d3:97:82:e4:f8:99:2c:e8:82:
a2:d0:66:18:81:8f:6a:e0:03:c2:8b:ab:6f:bf:3a:
a8:75:ae:44:2e:66:c6:17:5d:6f:7d:67:cb:43:36:
7f:7a:07:f4:69:5e:53:be:29:64:aa:d1:4b:0e:a5:
c2:87:5b:4b:bb:50:6e:c2:60:ae:9a:a5:86:22:28:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:52:A0:5A:C4:56:50:37:FF:64:A7:1E:68:01:5D:8D:76:08:A9
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/T4JSoFrEVlA3_2SnHmgBXY12CKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.168.128.0/19
Signature Algorithm: sha256WithRSAEncryption
65:a9:b2:eb:1c:68:02:07:9d:b9:b8:fd:6d:2e:a4:ac:2f:cf:
26:59:a0:88:cd:23:bd:ab:c9:8e:90:47:a6:cb:38:e9:66:7d:
18:f2:3e:28:61:ee:b4:aa:7d:50:76:6f:80:94:b5:62:cc:dd:
49:7f:c6:2f:54:d9:9b:01:7c:91:0d:3b:3f:78:eb:3b:0d:1a:
d8:c1:bf:ac:de:94:10:cc:e1:37:34:ec:49:60:ec:9d:cf:97:
dd:ca:ed:03:6a:11:7b:65:39:6b:94:f0:09:25:6f:82:6d:12:
27:c4:80:3a:cb:d9:6c:3c:de:b8:a7:00:9b:08:1c:d5:f8:be:
3d:30:9e:40:53:2d:35:38:ee:a5:d6:71:67:5a:94:14:9e:07:
b4:6e:5c:d0:03:7a:18:7c:f3:83:4b:8e:cc:3a:e2:69:77:a7:
2b:35:03:9f:d6:c2:56:79:32:8a:df:c2:06:c1:e5:75:a5:26:
ff:0c:23:72:51:a2:31:38:f5:d5:50:a8:a6:74:23:2b:0c:e0:
b3:68:cb:60:48:fe:8f:89:55:27:e1:ca:f8:95:ac:01:a4:d6:
d8:a6:bd:a4:d6:d5:f1:00:17:c6:6f:87:b5:f8:06:7e:de:06:
d6:43:21:94:61:39:ff:d2:74:9c:f5:c5:8b:be:88:c8:67:10:
16:aa:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net