Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/J-Cz8PAUMS7FVB4nVd3e799FGmY.roa
File: J-Cz8PAUMS7FVB4nVd3e799FGmY.roa (raw, json)
Hash identifier: 29r8xe/wxNYDiVthcrZ126MLrxPStvelKmjIIRyzrBA=
Subject key identifier: 27:E0:B3:F0:F0:14:31:2E:C5:54:1E:27:55:DD:DE:EF:DF:45:1A:66
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019484A7564B0D307D05BD55C354CD45794B
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/J-Cz8PAUMS7FVB4nVd3e799FGmY.roa
Signing time: Mon 20 Jan 2025 16:59:06 +0000
ROA not before: Mon 20 Jan 2025 16:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 212.16.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:a7:56:4b:0d:30:7d:05:bd:55:c3:54:cd:45:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 20 16:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27e0b3f0f014312ec5541e2755dddeefdf451a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:ed:06:92:6c:8f:c4:8c:a9:b4:3f:14:36:
18:f9:86:af:85:38:97:44:74:82:6f:91:bb:e1:d3:
9f:63:dd:16:9f:d8:55:32:94:cc:8f:e9:b7:3e:9b:
97:93:ea:6e:b8:67:33:8a:1e:fc:9f:09:3a:78:4c:
b0:90:33:da:d3:52:c6:9a:00:91:e6:a5:34:41:3c:
c2:9b:8e:58:f4:a9:2f:49:e2:f4:1f:20:70:90:1e:
fb:05:6f:23:f0:41:f3:f7:06:16:bc:01:7d:a0:4d:
bf:e8:72:30:7a:d4:f5:34:af:d0:39:b4:f0:b5:01:
fa:7a:0b:48:44:05:45:53:e8:1f:b4:58:de:7d:07:
22:c4:63:ae:d1:1e:f3:b6:3c:e4:b6:5c:eb:6b:76:
65:4a:59:44:7a:82:b8:c7:99:e5:db:1a:b7:6d:4a:
fe:96:b1:0e:d8:b2:dc:65:aa:28:31:50:a1:34:94:
85:7f:f1:38:4a:ca:ca:89:5b:fb:a9:28:43:31:ef:
3f:60:18:a6:8b:89:f7:b6:bf:4f:df:e9:99:27:28:
8e:c9:ba:f3:fe:e8:75:1f:11:27:ba:9a:fe:e3:45:
6e:0a:5a:73:73:6a:18:b9:77:4d:c9:96:bc:84:cc:
9a:fa:45:9c:1f:e1:0a:56:03:c4:7f:d9:f8:f1:ba:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:B3:F0:F0:14:31:2E:C5:54:1E:27:55:DD:DE:EF:DF:45:1A:66
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/J-Cz8PAUMS7FVB4nVd3e799FGmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.81.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a0:80:2f:90:56:55:7f:7e:e6:e9:5e:cb:9b:af:5f:46:40:
f3:9a:bc:7c:03:bb:1a:78:37:b5:36:0e:e4:5a:d8:bd:d6:53:
1b:43:43:93:5f:8c:7b:52:f1:70:6c:d8:aa:45:42:48:68:f0:
3f:5a:80:a4:8f:95:dc:32:8e:c7:5f:e6:4a:a9:1f:b0:92:8d:
3d:e4:dc:a9:c3:ed:43:ae:68:7f:46:6a:42:93:1b:85:ae:49:
f4:b6:ff:fa:d6:b2:3c:35:50:2c:0b:4b:7c:19:04:03:f7:1f:
51:07:77:1f:c6:4b:40:5a:e7:e5:7e:4f:94:15:75:88:47:ae:
bf:fa:a2:64:e1:b2:3e:a2:1e:99:98:2f:b2:04:ea:1d:54:5a:
c4:ee:3a:47:11:f6:bc:bf:6b:e6:2b:96:36:2d:b5:06:5a:69:
b7:e8:de:59:bd:48:7b:4a:9e:24:3f:22:61:b4:a7:a2:24:be:
35:f4:14:5b:4d:3c:e5:c3:ef:32:8b:d0:be:24:7e:7a:0b:99:
d0:11:27:4b:44:00:29:b9:e5:da:1c:fb:b2:b7:56:ee:a1:5e:
69:77:06:04:9f:a8:99:cc:af:5e:25:da:f8:9a:be:08:76:7d:
80:0d:0a:a2:e7:26:65:70:47:9f:f0:d7:ba:b0:70:5a:10:e7:
9a:e1:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:10:26 2025 by rpki-client on console.sobornost.net