Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/pEoCff1DtYoEMHzC9EANzQRBsC8.roa
File: pEoCff1DtYoEMHzC9EANzQRBsC8.roa (raw, json)
Hash identifier: +m2VMtZgdFPS2/0zJPg1ZLBtRhUd6KXSgxAw6jiEMMI=
Subject key identifier: A4:4A:02:7D:FD:43:B5:8A:04:30:7C:C2:F4:40:0D:CD:04:41:B0:2F
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 019427468D10B512CF734CCA4706A2D750E9
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/pEoCff1DtYoEMHzC9EANzQRBsC8.roa
Signing time: Thu 02 Jan 2025 13:48:42 +0000
ROA not before: Thu 02 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203321
IP address blocks: 94.142.254.0/24 maxlen: 24
2a12:5c40::/48 maxlen: 48
2a12:5c40:1::/48 maxlen: 48
2a12:5c40:2::/48 maxlen: 48
2a12:5c40:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:8d:10:b5:12:cf:73:4c:ca:47:06:a2:d7:50:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Jan 2 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a44a027dfd43b58a04307cc2f4400dcd0441b02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:45:9c:ea:ce:9c:28:40:80:f9:46:ac:f7:
54:cc:ac:98:fc:b2:69:4b:d0:7b:3e:ef:69:54:ae:
1b:61:a2:0f:23:1f:21:98:a8:80:5f:fd:56:d2:49:
69:60:26:dd:18:97:a7:fe:a1:43:b0:75:64:81:dd:
8d:10:af:53:55:01:a3:b7:a8:76:99:41:fe:73:da:
46:fb:69:c3:d3:80:ae:03:ad:32:dd:68:f9:33:ae:
38:95:7e:22:5e:65:89:19:21:3a:eb:87:e3:db:47:
57:1e:ce:5e:69:89:83:96:d0:28:76:67:20:90:7e:
83:8c:2c:47:46:0e:50:e8:a4:16:09:37:8b:70:97:
26:86:91:fd:17:96:8c:c4:87:b1:44:07:c5:67:85:
19:d4:e6:71:17:0d:a1:13:37:ab:5b:a7:5d:19:2d:
a7:20:fe:f2:9a:f1:dd:41:37:17:a4:c4:38:92:87:
c9:c6:f8:a0:b0:59:d8:4d:27:7a:2d:f6:61:62:dc:
34:cf:d7:15:41:35:d3:aa:90:89:14:70:ec:8a:ee:
f1:a3:2a:66:52:bf:14:a4:42:a9:1e:ac:99:4e:c7:
75:94:2d:a5:3b:65:ed:c4:24:e2:63:cb:42:d5:73:
0b:e4:5e:b1:d9:ed:25:8f:22:fa:15:82:41:41:4b:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4A:02:7D:FD:43:B5:8A:04:30:7C:C2:F4:40:0D:CD:04:41:B0:2F
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/pEoCff1DtYoEMHzC9EANzQRBsC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.254.0/24
IPv6:
2a12:5c40::/46
Signature Algorithm: sha256WithRSAEncryption
a1:fd:1b:82:41:00:45:50:90:f8:0c:20:51:6e:de:f8:62:e8:
77:80:99:39:51:eb:22:fb:14:e9:21:43:0b:92:ff:e9:76:9f:
67:19:57:71:16:8a:e4:e5:d1:ee:9b:1f:3c:2c:dd:c7:b4:6f:
9b:b5:4b:fd:a1:f0:32:26:59:a4:0a:08:56:8b:45:eb:0e:96:
8c:f7:13:6a:db:d5:b8:f1:30:b1:34:39:13:fe:ef:c0:b5:ac:
71:cb:e3:a2:e0:6f:66:d3:ca:96:79:9f:43:50:6c:be:9e:02:
b7:9e:d4:c6:d7:ff:7c:bb:ff:82:e7:a0:bd:b5:29:9d:b2:71:
7a:56:23:27:d0:2e:b5:04:2c:a5:d3:f6:16:e1:99:23:c7:29:
eb:8e:2a:27:bb:48:c9:2d:86:7b:aa:3d:de:fd:0d:75:a1:c5:
55:a9:e2:05:25:22:70:e2:b2:67:2b:e9:83:ba:07:50:f9:2f:
48:f8:75:c5:17:ea:ff:fb:f8:73:96:a0:33:ec:90:cc:42:8a:
6e:6c:96:3a:45:f2:af:2a:3c:57:5b:f9:72:12:3f:bd:96:99:
92:c2:aa:27:46:47:e5:dd:24:8f:24:bb:f5:8a:8e:b6:41:bf:
52:5c:35:83:13:f4:52:61:9c:65:f5:38:aa:c3:eb:cc:71:b2:
79:d2:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net