Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/znIOIdcg0Pfmr3lk9A2J6j6xSio.roa
File: znIOIdcg0Pfmr3lk9A2J6j6xSio.roa (raw, json)
Hash identifier: WJuHJIJ2rWApOKXb9tEkGYEbBNocsCE6EJQCs8d6EgE=
Subject key identifier: CE:72:0E:21:D7:20:D0:F7:E6:AF:79:64:F4:0D:89:EA:3E:B1:4A:2A
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455E76DCEF457F8B70EDFAF9363887
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/znIOIdcg0Pfmr3lk9A2J6j6xSio.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202754
IP address blocks: 185.153.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5e:76:dc:ef:45:7f:8b:70:ed:fa:f9:36:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce720e21d720d0f7e6af7964f40d89ea3eb14a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:b4:e7:a3:f4:ed:96:7a:c7:79:90:9f:72:
a6:46:12:45:b0:58:96:90:9b:f9:71:5c:26:c4:00:
7f:c2:8f:51:03:dc:44:60:b2:db:d3:ea:44:6f:9f:
ef:68:05:a7:e5:b4:76:7b:9a:a9:99:fc:f5:4f:7f:
67:03:f1:b3:30:74:62:ad:00:29:93:84:99:d6:87:
60:72:2f:98:65:37:41:d1:7c:0e:e7:c7:01:ab:ec:
5e:9d:fa:63:43:2b:b9:30:9d:b6:e2:e9:fd:76:8f:
79:5c:a6:09:6f:92:df:8a:6b:c0:b7:f2:23:31:c9:
2a:a9:ad:cc:f2:b0:ec:dc:fd:6a:23:6f:14:80:31:
53:e9:70:cb:cb:a9:05:7b:54:b0:89:6e:19:e7:0e:
b1:94:49:58:96:b1:84:dc:c7:b0:d6:d0:81:e9:61:
9f:30:3c:8d:6b:47:af:ec:6c:f5:b8:35:c8:e1:1a:
8f:4f:cd:49:3f:7b:c0:6d:93:fd:cf:68:d4:ae:77:
7d:f0:7f:58:a4:80:46:38:e1:32:14:cf:33:31:74:
7d:dc:12:32:23:76:64:f1:d6:5a:4f:29:30:ff:0e:
79:6a:46:d2:9c:5b:ec:64:87:e1:3d:6c:59:2b:3e:
54:69:de:b3:8c:0f:51:c0:be:f0:4d:80:f8:e6:ce:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:0E:21:D7:20:D0:F7:E6:AF:79:64:F4:0D:89:EA:3E:B1:4A:2A
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/znIOIdcg0Pfmr3lk9A2J6j6xSio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:7d:34:cf:d4:c5:e2:eb:84:2c:dc:9c:ef:87:b2:76:d6:d3:
63:85:65:d2:b3:e8:9a:43:18:97:22:aa:26:c6:9f:71:c8:42:
fc:1f:56:3e:14:09:6c:aa:64:56:ae:bb:18:2c:a2:e9:26:77:
5b:d8:0d:c0:16:0c:02:3f:94:da:57:44:02:c1:3e:21:72:69:
b9:75:86:ab:ae:2d:23:9c:37:b5:46:5f:c2:a2:1c:c5:f0:1b:
e5:e2:88:f2:8c:d7:bf:64:0f:ed:d2:72:51:2f:c3:71:83:35:
31:ff:90:ac:55:59:ee:4c:03:bc:25:06:14:51:60:42:51:80:
a9:b7:b3:93:f3:87:99:6d:bc:6f:d6:f9:90:f3:9a:fa:83:4b:
f8:d2:d8:d3:c5:9b:93:a7:76:7a:68:dd:57:58:e6:46:c6:e2:
12:c7:15:bc:f2:06:c6:fb:0e:0a:46:d4:a3:9a:19:6c:60:6f:
48:ae:4f:b3:17:99:51:af:42:0d:e1:f7:f1:8d:67:aa:2a:51:
39:43:60:6a:a4:36:c2:04:00:33:d2:b3:b2:65:57:37:b4:80:
d3:e1:ed:f3:5f:ce:3e:87:20:be:9f:a5:dd:7e:e3:cd:14:b9:
72:f6:43:22:6d:84:58:26:53:1f:7f:f8:46:e8:e8:98:90:de:
cf:a1:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net