Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/c-cz3EsrRUI_ANPL8vVnstUjDJo.roa
File: c-cz3EsrRUI_ANPL8vVnstUjDJo.roa (raw, json)
Hash identifier: i95jwrWeCHtPqkB24IYUU8/zCycrv4Fig9b4FzXTO5Q=
Subject key identifier: 73:E7:33:DC:4B:2B:45:42:3F:00:D3:CB:F2:F5:67:B2:D5:23:0C:9A
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1FCB5E2E079E73E25F9742AD5FAA
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/c-cz3EsrRUI_ANPL8vVnstUjDJo.roa
Signing time: Thu 02 Jan 2025 07:48:53 +0000
ROA not before: Thu 02 Jan 2025 07:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47959
IP address blocks: 104.239.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:1f:cb:5e:2e:07:9e:73:e2:5f:97:42:ad:5f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73e733dc4b2b45423f00d3cbf2f567b2d5230c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:9a:4e:68:0f:89:2b:6a:ef:a6:96:48:43:
ed:5d:38:d0:55:a2:4f:1c:f3:50:5c:3c:43:54:2c:
03:80:ca:da:20:c5:16:f8:26:3c:40:42:fe:67:e0:
4a:bc:80:07:1d:58:b8:30:05:af:b0:5a:c8:db:e6:
8e:3f:8d:74:66:1a:26:a3:f6:ce:35:cc:74:db:28:
33:e4:ab:22:25:85:42:54:72:f3:ae:0e:b3:b6:a8:
24:70:f0:d9:9a:d0:83:1d:24:f0:9f:62:81:e0:3a:
c5:c5:1d:b8:f3:86:34:ee:4e:c0:f3:6e:f3:e1:1d:
fc:90:83:3d:6e:28:cc:6d:2e:cf:9c:65:97:25:4f:
b4:b9:b5:44:71:e7:5c:13:93:ba:c0:4b:7c:c9:5d:
93:49:1d:d3:0e:1e:c6:4d:0a:e1:6f:a4:75:a2:d6:
5c:38:92:fc:3a:e6:e9:ea:39:a1:eb:49:fc:82:3c:
c4:c2:c9:e5:9c:8a:14:1f:dc:25:7b:20:42:a9:ff:
8c:56:81:6a:22:7d:ac:96:23:75:a8:64:72:ca:29:
15:05:55:e9:2d:4d:56:b9:e8:73:55:59:b3:97:d8:
81:4e:6c:13:1f:ed:f8:36:41:b1:a1:8c:0f:e8:c9:
d1:ef:4e:fd:c7:20:c3:78:41:51:c0:e7:98:8f:c2:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:33:DC:4B:2B:45:42:3F:00:D3:CB:F2:F5:67:B2:D5:23:0C:9A
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/c-cz3EsrRUI_ANPL8vVnstUjDJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.103.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0a:53:bc:6d:25:69:51:67:d3:fc:3d:e0:76:d1:63:82:56:
80:ce:84:ba:d3:ea:b7:95:16:49:b8:54:15:c7:a4:1b:40:de:
63:d0:8a:66:a3:e8:5d:62:f4:27:77:76:9f:e5:94:e8:16:49:
f2:f9:8f:15:cd:1a:22:4a:c9:ea:3d:98:8f:d3:48:61:7a:28:
d7:74:c6:12:29:c2:65:a0:78:15:ba:5e:1d:2f:89:b3:37:85:
97:f8:5b:97:89:68:b7:6d:c2:c5:65:d6:60:75:f3:eb:77:f4:
fa:71:7a:81:2f:eb:7f:1f:a4:62:11:91:6b:ba:96:67:4e:dc:
d6:73:90:3f:cf:ed:ba:37:30:f2:54:e1:f8:b5:a3:2e:e4:21:
59:7d:8e:7a:2f:e0:bf:3a:d9:aa:eb:31:45:8c:f9:95:cc:af:
5d:e7:e1:3f:c7:a6:9e:b0:5c:b9:fb:b3:5b:60:62:d9:78:1d:
af:88:d4:bd:b3:86:9e:21:a9:1c:80:cc:2f:56:35:61:d0:f5:
e7:5d:b6:e6:b7:c8:3b:2b:b7:53:74:b4:c0:79:ab:34:e8:b1:
b5:fa:ee:fe:1f:ee:a8:88:db:6e:d1:13:fd:35:71:9f:22:e7:
0a:a4:11:2d:0d:45:e5:73:45:74:48:88:4f:56:b9:f7:fa:b7:
31:9d:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:14 2025 by rpki-client on console.sobornost.net