Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/h7WrxxlFxq_jYFk35jmIYb3f00s.roa
File: h7WrxxlFxq_jYFk35jmIYb3f00s.roa (raw, json)
Hash identifier: h2rZQ/4NrSDJTIeZUF9nM2gyqifu2Mb4/5cQKdqqscg=
Subject key identifier: 87:B5:AB:C7:19:45:C6:AF:E3:60:59:37:E6:39:88:61:BD:DF:D3:4B
Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial: 019428236DB691B58295CB6A0B91EE48B8BE
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/h7WrxxlFxq_jYFk35jmIYb3f00s.roa
Signing time: Thu 02 Jan 2025 17:49:58 +0000
ROA not before: Thu 02 Jan 2025 17:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16238
IP address blocks: 217.73.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:6d:b6:91:b5:82:95:cb:6a:0b:91:ee:48:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Validity
Not Before: Jan 2 17:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87b5abc71945c6afe3605937e6398861bddfd34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:2f:4d:51:56:0f:7a:d3:6a:63:31:c6:60:
43:b7:07:43:e2:2a:58:8c:88:f1:64:74:d4:cf:0c:
c0:dc:f1:64:a9:fa:85:15:74:0c:98:3e:f9:f3:77:
3f:ca:16:a9:db:fe:72:0d:78:c7:47:3b:ca:4d:74:
25:f1:16:05:38:7e:73:86:46:bd:0b:4e:69:c0:31:
c9:9e:e2:9e:93:1b:d6:ee:93:e5:65:ae:13:5e:1e:
bb:10:a8:8a:8d:2c:1f:bc:ea:3c:08:a1:1c:78:b4:
18:c9:09:6d:eb:48:be:72:e0:b0:4a:41:e5:3b:a9:
7c:3a:c1:77:d0:4f:68:1f:0e:ff:85:61:44:5c:d3:
c8:27:10:8b:33:7b:cf:80:ae:98:f1:f2:2c:98:9b:
a9:60:cc:15:8f:db:be:d1:da:e9:3c:b4:5c:a3:f6:
d7:55:fe:b0:2b:02:23:a8:dd:f4:cd:4c:bf:75:01:
79:06:3c:00:b1:c1:55:4b:08:ba:55:ad:4a:2b:67:
85:97:89:f2:45:31:32:2d:15:49:c0:d2:f9:ea:11:
1a:21:6e:27:70:e6:45:a7:4e:44:dc:1c:01:07:73:
f4:eb:01:72:43:ea:fb:9a:99:80:36:1f:bd:57:d6:
f3:e9:89:fd:31:83:59:cc:c9:e2:fb:f5:55:c7:72:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:AB:C7:19:45:C6:AF:E3:60:59:37:E6:39:88:61:BD:DF:D3:4B
X509v3 Authority Key Identifier:
keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/h7WrxxlFxq_jYFk35jmIYb3f00s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.79.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2a:12:82:7e:06:49:0f:34:1b:d6:87:03:4b:31:b0:84:01:
a1:82:6c:fa:62:98:a4:42:25:26:dc:75:fe:45:3b:0b:bd:a9:
60:ef:20:60:dd:8f:37:0a:88:e4:a1:2d:f3:d1:fb:a3:a3:64:
96:59:5e:01:52:79:4e:df:8a:d4:8a:26:07:04:65:b0:98:67:
4b:2d:fa:4b:ec:4c:8b:27:38:95:cd:81:a5:08:8b:99:fe:57:
97:bb:f4:af:9b:9a:bb:38:f8:f2:85:3f:4a:6a:ae:7e:80:2f:
45:3e:2f:f9:90:1d:31:27:8a:37:ca:b1:8d:c8:b6:bb:1d:17:
44:a1:da:0c:55:cb:78:0b:b9:47:e8:65:0f:7e:1e:69:55:c1:
d9:dd:5e:1a:c4:b4:8b:f7:be:9b:a4:d9:1b:36:a7:9c:02:11:
c9:6b:f7:87:0c:c9:15:48:1e:41:16:ae:9b:c4:7c:29:28:6c:
f1:d2:ad:b4:fc:5c:0c:0b:d9:37:5c:68:03:8c:35:9b:7b:18:
f8:04:f3:32:fa:58:c0:ba:ce:73:c8:a7:97:84:af:6c:ae:75:
35:b4:cb:c2:76:3a:42:f7:2f:39:7e:8b:00:5f:a5:99:39:a1:
7d:91:13:9e:a9:af:5d:97:a4:d6:61:f3:e2:9c:8c:35:c1:78:
f7:80:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net