Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/flhmne3OCJjm1qjNcOG0Z5Lii9s.roa
File: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (raw, json)
Hash identifier: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=
Subject key identifier: 7E:58:66:9D:ED:CE:08:98:E6:D6:A8:CD:70:E1:B4:67:92:E2:8B:DB
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D64D036CB0EFA134CE3C2C19FECB2C
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/flhmne3OCJjm1qjNcOG0Z5Lii9s.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15362
IP address blocks: 78.130.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4d:03:6c:b0:ef:a1:34:ce:3c:2c:19:fe:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e58669dedce0898e6d6a8cd70e1b46792e28bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:ac:4d:52:76:f1:91:e9:22:93:b9:d9:a7:
4a:11:8b:cc:ab:77:07:02:92:d9:2f:ad:5e:61:43:
70:27:b9:d2:d9:0e:9e:2d:40:a7:99:54:38:57:4c:
9c:7e:64:ab:bb:83:27:2b:a8:f4:a2:f3:fe:f1:4a:
28:da:91:67:3a:81:76:6c:ed:6c:b0:ba:e4:b3:aa:
31:6c:02:84:db:64:c2:4e:16:c0:ce:bc:90:b5:67:
ff:ef:cc:b5:04:fa:b5:2d:60:c4:8d:49:10:f9:d6:
43:34:02:fd:b6:30:c4:9e:12:c4:19:86:78:3e:72:
b8:12:6f:1e:53:68:3a:2c:bf:86:e7:57:84:7b:b4:
bb:61:84:86:07:33:db:05:be:23:b5:75:24:98:5d:
9c:c6:ef:e1:b7:a5:9c:98:75:4c:41:3f:25:fd:42:
4a:8d:db:75:1e:94:9a:fd:03:a9:a8:e2:14:53:fd:
57:f5:de:9a:c2:99:5a:98:be:12:19:3e:7b:5b:b9:
b4:95:69:7a:36:45:42:a5:01:ba:9a:4e:6e:ec:2a:
7c:4b:56:39:51:91:14:7b:d7:28:7a:d3:58:b2:40:
47:1f:d8:47:b0:15:04:44:db:f7:74:c6:13:bb:31:
78:d3:a3:58:6e:37:aa:2f:3b:8a:dc:fd:b3:3f:00:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:66:9D:ED:CE:08:98:E6:D6:A8:CD:70:E1:B4:67:92:E2:8B:DB
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/flhmne3OCJjm1qjNcOG0Z5Lii9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.156.0/24
Signature Algorithm: sha256WithRSAEncryption
be:18:45:75:84:1c:9f:cb:0b:87:8d:f8:88:11:cd:66:d2:9f:
f8:a0:15:d1:8c:a6:df:3f:5a:74:5d:0f:91:23:31:8f:bd:43:
f4:97:b5:ae:63:da:35:fc:f4:bd:b1:7a:9f:ab:3c:31:13:a6:
09:45:d3:54:a0:cf:d3:70:dc:ad:bf:ad:a5:12:40:6a:62:d0:
e7:ea:05:28:19:3b:62:f0:a6:e6:02:6d:88:ad:4f:74:35:d4:
fb:ec:49:19:93:ba:7e:4a:2d:78:5f:dd:5c:15:7f:11:ad:f0:
5b:a8:46:e5:20:3e:3b:9f:d7:c9:35:33:35:c6:10:6e:67:48:
cf:10:31:c4:10:83:1f:53:5b:26:e0:b8:33:32:38:fb:94:02:
f9:31:c1:da:7a:48:10:8d:22:7d:78:9e:af:86:02:0d:3c:67:
50:19:83:43:eb:84:24:9a:6f:f8:32:3b:bf:1b:29:62:1b:cf:
dd:3c:1b:97:c7:19:91:d0:7e:04:84:bc:a1:95:bd:98:5c:91:
bb:60:e4:e4:3e:80:b6:8f:cd:e5:b4:ea:d2:94:32:7c:ab:45:
12:1f:c3:bc:37:df:4d:50:71:ff:ac:ae:50:fa:12:e5:50:f7:
16:14:5e:47:bc:e7:a0:9b:f4:ec:52:5d:35:48:3c:e7:06:c9:
1b:54:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net