Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/vBoUDZdnERmYJbXNYq35Siai1YU.roa
File: vBoUDZdnERmYJbXNYq35Siai1YU.roa (raw, json)
Hash identifier: 6VBUQ8BBwpLAKtD1BbA70mx0/1F/tKHjSv+uHPv+nKg=
Subject key identifier: BC:1A:14:0D:97:67:11:19:98:25:B5:CD:62:AD:F9:4A:26:A2:D5:85
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 01941FFA0A8B4F4C2826C83659B1D8D23C28
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/vBoUDZdnERmYJbXNYq35Siai1YU.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.93.21.0/24 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0a:8b:4f:4c:28:26:c8:36:59:b1:d8:d2:3c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc1a140d976711199825b5cd62adf94a26a2d585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:ba:fe:15:a3:01:96:90:43:90:e6:a5:45:
74:ec:3f:44:87:a7:9b:7a:b3:be:0e:28:73:53:23:
90:5a:78:ec:4c:57:ea:6b:f4:95:5a:c0:ef:23:bb:
95:08:ad:94:ea:8a:84:77:15:31:5a:1b:6d:06:ad:
ee:fe:99:5c:7b:13:81:f5:3a:e0:f9:d0:26:7e:4f:
26:8a:a6:ce:58:25:14:a8:cb:02:6e:63:a5:dc:b1:
d7:a0:49:cd:0d:6e:f9:3b:d9:b2:d8:53:4f:03:eb:
e0:96:1f:00:a9:db:85:19:66:39:75:4c:27:2c:38:
1f:cb:df:fa:96:c0:a2:36:7a:39:b5:95:64:a2:86:
64:38:ac:28:ce:79:c3:62:5e:08:26:56:69:04:93:
c9:83:0b:90:6b:fb:56:88:7d:29:9e:25:cf:2b:d2:
5a:9d:ae:03:ec:a9:39:a2:e4:f1:06:da:c2:1f:c1:
8b:c1:6e:e5:64:28:da:65:4a:95:af:b9:8c:81:68:
0c:29:61:0d:8a:a0:c7:d1:4c:03:49:84:78:2c:25:
fc:d6:b8:9a:a7:53:13:61:9a:89:6b:19:b4:dc:49:
53:84:fc:83:60:54:fc:54:0c:67:bd:ec:4b:d1:64:
09:4c:5b:6e:f3:8b:a8:7f:3b:22:ed:97:22:8c:6c:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1A:14:0D:97:67:11:19:98:25:B5:CD:62:AD:F9:4A:26:A2:D5:85
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/vBoUDZdnERmYJbXNYq35Siai1YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:03:10:e8:0d:48:2e:97:57:83:ef:a8:06:82:ec:98:b7:dd:
bd:8f:15:53:3c:91:22:6e:07:ce:19:4a:02:ff:f2:05:08:59:
22:59:b0:da:dc:07:ac:a6:dd:be:76:7e:62:b3:2c:d0:97:ee:
3b:c0:b3:ce:0f:32:98:2c:fe:f7:14:0e:e6:51:20:51:e7:96:
7a:98:6f:38:26:9c:a5:8c:9a:bb:99:42:fb:01:4c:5f:83:3b:
24:40:44:76:76:76:22:5e:1e:47:ec:df:a2:23:39:f4:41:0b:
e8:cf:a7:f6:a3:29:6f:d7:78:3b:54:a6:1d:b5:7d:c3:20:dc:
1a:91:6b:2c:61:aa:8e:55:a4:8d:29:f0:56:11:9f:e0:61:40:
5a:aa:70:38:b2:0f:33:97:fe:5a:ab:6d:b8:15:35:dd:28:96:
90:4a:43:15:7a:e3:1b:cb:ff:c0:6d:09:10:4d:09:63:b3:68:
1b:f0:ae:07:8b:9f:19:15:35:0d:b4:f8:1c:a3:ba:49:d5:b9:
d7:63:a8:a1:53:c6:f7:5f:82:ee:39:34:ad:97:7d:72:06:75:
d3:b6:01:5f:da:32:f9:c8:72:56:0d:2d:f1:64:30:91:1d:21:
59:ae:7f:0b:0c:45:5c:08:32:15:bf:84:6d:77:e3:f4:54:81:
7b:a0:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:25 2025 by rpki-client on console.sobornost.net