Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hIEmF9qkQJ8X3fHGzJ8y4Bj0quA.roa
File: hIEmF9qkQJ8X3fHGzJ8y4Bj0quA.roa (raw, json)
Hash identifier: hFqLs5A+L73nckEZa++akFqKQyOvcRCUiQwHtZQDV5M=
Subject key identifier: 84:81:26:17:DA:A4:40:9F:17:DD:F1:C6:CC:9F:32:E0:18:F4:AA:E0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195272D6CF04A2EBCFA080E5C97A10361F6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hIEmF9qkQJ8X3fHGzJ8y4Bj0quA.roa
Signing time: Fri 21 Feb 2025 06:24:03 +0000
ROA not before: Fri 21 Feb 2025 06:24:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198037
IP address blocks: 45.148.117.0/24 maxlen: 24
139.28.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:2d:6c:f0:4a:2e:bc:fa:08:0e:5c:97:a1:03:61:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 21 06:24:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84812617daa4409f17ddf1c6cc9f32e018f4aae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:f8:0e:0d:21:05:bd:4b:ac:7a:7b:fe:e9:
0c:34:95:b6:7b:d9:a2:45:13:2f:23:42:f2:ba:a3:
8c:d9:c9:54:af:13:af:39:b0:d0:42:03:50:d8:fe:
14:03:6b:d6:4a:cc:b2:c3:0f:14:35:7f:d6:b9:0b:
0b:a2:27:f2:c7:3f:a1:26:32:6d:5b:f8:bf:ca:28:
0d:01:2a:d9:37:06:94:85:3f:0c:95:bd:bf:ac:c0:
dd:88:9e:8b:ba:c7:71:bb:a7:5e:53:d1:64:1f:e1:
00:96:44:c6:b7:a4:15:c7:81:ff:a2:39:54:ab:53:
45:76:18:2a:77:2c:ad:c0:ff:81:9e:43:d9:17:6a:
97:4e:70:f7:ff:b4:21:50:db:60:6f:ad:57:6e:18:
ec:b8:88:f2:91:80:00:b1:c4:92:0e:81:3e:ff:eb:
ca:ef:f4:e8:41:72:1d:bd:f2:b7:a5:0e:c2:20:b9:
d2:2f:f8:5f:3c:30:16:90:50:d2:60:08:c7:81:fd:
a0:0c:dd:71:90:2d:d4:e3:6a:3c:cb:2b:9e:3a:52:
38:09:78:05:80:ea:b0:ca:ca:55:5b:56:2a:b0:f6:
09:28:c6:e2:de:89:28:25:03:4c:20:b0:82:eb:ab:
a5:44:eb:18:50:82:01:57:e4:d9:bb:bc:74:2d:66:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:81:26:17:DA:A4:40:9F:17:DD:F1:C6:CC:9F:32:E0:18:F4:AA:E0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hIEmF9qkQJ8X3fHGzJ8y4Bj0quA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.117.0/24
139.28.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:46:dc:88:9e:f1:9f:99:7b:4b:b6:e4:2b:75:73:77:25:15:
60:01:9c:59:43:3d:f7:c4:35:47:28:f3:e7:b9:57:65:38:e8:
d0:b3:ce:db:77:b7:37:2b:91:d4:9b:53:e3:55:5c:a6:c6:85:
a4:9a:47:b6:27:2f:7f:1c:a8:85:e1:cf:f4:df:d8:03:f2:1a:
6e:e2:09:91:ff:81:c3:c8:11:53:46:10:93:3c:22:f0:bc:ac:
20:a6:4e:bc:29:58:59:7e:b4:95:46:e6:92:40:a9:62:4f:cd:
47:d1:ee:eb:72:f9:10:56:70:92:c5:d2:9c:fc:73:bd:1f:d9:
a8:46:ad:5c:bc:3f:de:f6:52:8a:a4:f8:dc:09:8b:fc:1e:28:
51:1d:bd:f5:bc:fb:10:99:4f:b8:8c:c4:9f:48:19:4f:25:db:
25:42:aa:5f:36:06:90:41:c3:bc:7b:ad:28:0b:43:19:f9:59:
67:68:4e:24:4a:a2:72:50:5a:a2:b8:9b:73:0f:9b:3d:27:ec:
e4:7b:60:6b:de:30:01:29:a7:ff:b4:37:60:82:be:94:a6:fa:
af:37:7e:94:02:c0:aa:ce:cd:50:8a:8a:c3:14:8c:00:aa:08:
d1:2c:c9:39:dd:d6:ef:12:55:0b:f7:c7:da:16:7b:40:7f:f3:
ec:8b:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:15 2025 by rpki-client on console.sobornost.net