Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa
File: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (raw, json)
Hash identifier: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=
Subject key identifier: 75:43:6C:27:38:2A:B4:99:0C:CB:59:74:2F:6D:58:D1:9B:32:DA:DB
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 0194670385559522293946C7DE7C535B6143
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa
Signing time: Tue 14 Jan 2025 22:51:11 +0000
ROA not before: Tue 14 Jan 2025 22:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44621
IP address blocks: 213.168.157.0/24 maxlen: 24
213.168.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:67:03:85:55:95:22:29:39:46:c7:de:7c:53:5b:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Jan 14 22:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75436c27382ab4990ccb59742f6d58d19b32dadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:20:37:d2:c1:7b:19:ce:4a:5e:c7:5e:85:7f:
56:11:a4:a2:18:82:db:18:25:ef:6e:ac:5f:54:b1:
84:ae:27:20:50:a9:df:db:42:ed:70:24:96:33:e2:
01:14:65:9c:0a:bb:c7:c8:2d:bf:f6:d4:7c:0c:3b:
aa:86:02:df:32:c5:06:5a:dd:d8:8a:97:de:54:22:
7f:87:35:5e:3f:cf:7c:da:a9:bf:06:62:b7:37:30:
d0:6d:be:51:1c:b5:75:f1:1f:02:d0:ff:0d:7f:fc:
14:69:a2:8d:f1:10:03:c8:4c:76:a8:22:e0:1e:4a:
7b:78:2f:78:b5:df:7c:da:cd:ec:ab:64:90:5d:63:
da:5c:90:79:73:fb:ed:77:8e:66:d9:76:20:11:c3:
d6:c7:f4:4b:9b:e1:a2:f4:18:94:ae:93:5a:f9:b0:
1f:a6:b4:93:26:5f:9c:f7:40:b3:00:6b:f0:af:aa:
bd:67:7c:62:2d:9f:11:ad:2e:c3:00:6d:fe:d7:08:
a4:df:8e:dc:0f:ac:a1:84:d9:70:1f:23:d8:d9:e7:
6b:02:e9:26:88:35:40:36:fa:4d:12:48:44:78:cf:
ff:75:a5:7b:03:1c:f8:09:5f:1b:7d:32:d2:6b:e5:
9c:34:26:b4:76:5f:a0:cd:74:a4:17:3b:5d:ca:56:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:6C:27:38:2A:B4:99:0C:CB:59:74:2F:6D:58:D1:9B:32:DA:DB
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.168.157.0-213.168.158.255
Signature Algorithm: sha256WithRSAEncryption
17:7c:16:3d:b7:64:7c:38:12:15:30:ff:06:9a:0a:fc:b4:3b:
f3:c4:17:e4:61:53:e2:20:0f:8a:fa:cf:96:4a:f7:a0:bc:28:
ef:6e:6f:0d:f8:76:03:23:dc:de:ba:8d:56:b8:f8:b7:9c:8d:
26:73:43:70:a6:af:62:26:7b:00:98:a5:51:05:78:f7:75:4a:
6d:04:6c:65:42:40:dd:71:39:73:06:0a:08:5e:7d:ac:54:8f:
60:e6:0a:b0:3a:c4:79:2a:ca:b7:98:10:d4:6b:88:4b:de:f3:
15:7e:19:c9:4e:15:36:6c:04:a0:f6:af:54:9b:71:d9:0d:82:
c4:c4:ce:8a:fb:ea:ea:04:6e:f4:2c:11:56:1b:34:6a:a9:d3:
5e:25:ae:de:01:83:0a:c1:0b:b1:56:6a:61:7b:d8:2f:b8:11:
60:24:10:58:81:5b:b7:6c:81:60:05:d3:ce:d9:a6:40:ea:a7:
b0:9c:86:ee:2d:16:a5:28:39:1c:13:a0:85:be:72:0f:c9:52:
d3:42:3c:1f:b6:0e:48:96:a0:c9:70:aa:5e:52:bf:6e:ab:42:
2d:1e:01:93:81:45:08:6b:b8:4f:8c:4e:36:3a:02:4f:06:ef:
c6:23:3d:ab:9f:40:12:84:88:bb:cf:c9:4a:c6:3e:81:bd:40:
6a:c1:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net