Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3l0m61mthNNcKw1GW0SaVbDyJ7M.roa
File: 3l0m61mthNNcKw1GW0SaVbDyJ7M.roa (raw, json)
Hash identifier: AIPukw+N/LX0D/EYPzqM3g06RNCVCT2qn+TtzOiHN88=
Subject key identifier: DE:5D:26:EB:59:AD:84:D3:5C:2B:0D:46:5B:44:9A:55:B0:F2:27:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195FBB2713A6898B349CBBC347A5BEE777D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3l0m61mthNNcKw1GW0SaVbDyJ7M.roa
Signing time: Thu 03 Apr 2025 12:48:50 +0000
ROA not before: Thu 03 Apr 2025 12:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49791
IP address blocks: 139.28.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:b2:71:3a:68:98:b3:49:cb:bc:34:7a:5b:ee:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 3 12:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de5d26eb59ad84d35c2b0d465b449a55b0f227b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:e1:ee:ad:3a:09:5d:92:8b:87:98:ce:1c:
05:dd:0d:02:7e:a6:87:96:ee:0f:1c:de:f1:54:47:
04:8e:7c:66:16:e6:c3:ae:6b:0e:58:ad:c7:c7:b4:
29:e5:1d:8b:82:a3:63:bc:f6:1b:41:9e:13:11:43:
a1:98:55:db:5d:6c:25:30:e5:d3:b7:83:00:42:bb:
73:3b:1e:f5:19:8f:dd:89:9d:c3:d4:8a:fe:56:d8:
de:06:a9:dc:4f:05:b0:94:75:86:0d:55:4a:54:7c:
ee:ec:b6:94:00:90:75:73:10:3a:e3:51:6f:8d:50:
0d:d2:cc:8a:91:2f:dc:c1:72:3b:e1:ba:11:88:82:
3e:1a:7b:e0:56:62:2f:4c:e2:7a:4b:d5:ff:3d:89:
df:92:ca:68:dc:48:f5:8d:25:03:51:69:a6:e4:0c:
54:f5:56:88:8f:6a:bc:5e:e7:5e:b7:4a:40:23:ae:
f9:1c:f8:7d:ea:6c:87:0d:68:eb:a4:77:a3:d6:6a:
3c:bb:16:bd:f9:18:81:c9:d0:67:17:8d:0a:98:19:
39:83:83:3c:bc:f7:d4:c5:d4:20:22:78:a8:9d:18:
9e:70:d0:fb:c2:d6:2e:f2:1e:59:12:7c:ba:4d:5d:
bb:81:44:11:ae:79:b0:65:b2:bc:39:1a:e5:c0:35:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:26:EB:59:AD:84:D3:5C:2B:0D:46:5B:44:9A:55:B0:F2:27:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3l0m61mthNNcKw1GW0SaVbDyJ7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.97.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:85:42:22:ff:58:1c:65:ea:cd:24:24:a9:b2:b8:dc:27:72:
1a:d7:82:4e:34:b9:64:a4:8f:f6:cb:59:62:c2:93:6c:3c:7d:
da:3b:f8:8a:c8:72:1a:2f:3f:22:97:16:64:cb:88:c3:10:a7:
3f:f1:29:8b:da:47:9a:c6:c5:b3:90:77:29:03:e4:70:d2:8e:
9b:c0:bb:d5:30:99:8a:48:0b:78:67:e7:5f:f0:5f:cd:c9:e7:
57:d4:c2:fd:7b:16:87:1b:07:0f:9d:40:54:56:55:67:f9:22:
25:46:f5:65:ef:8d:09:1a:d5:dc:6b:2d:68:c9:91:79:5e:9e:
3c:31:81:1d:b6:d0:60:b1:26:85:6a:7e:91:85:34:54:38:98:
8d:e6:a3:d7:5d:2e:76:87:a0:35:8a:4f:b5:2d:35:11:45:bf:
8a:44:41:62:72:a1:0b:ad:75:ad:1c:5e:ff:3e:10:b3:5d:00:
8b:d7:bf:25:6d:d9:bf:c2:24:03:33:35:b9:00:27:a9:ef:e0:
c2:89:f2:38:56:19:65:1a:8d:1b:d1:01:36:3b:94:e3:a8:28:
07:4d:70:15:55:d8:9b:26:eb:2a:a5:32:12:da:c6:19:96:05:
4e:b0:42:ef:dd:d9:66:80:82:84:2c:55:5d:31:3c:7d:ea:05:
81:a5:19:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net