Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-crYHcZ4Ym08iVgh82L2Zs3JaOc.roa
File: 1-crYHcZ4Ym08iVgh82L2Zs3JaOc.roa (raw, json)
Hash identifier: 2h3NcBRM6j9v4zrx+v5yGOkIdb87VBON0zFXSHrOUVk=
Subject key identifier: F9:CA:D8:1D:C6:78:62:6D:3C:89:58:21:F3:62:F6:66:CD:C9:68:E7
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01946EA8D7659EEC2D8B55BAFB4E88E368E2
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-crYHcZ4Ym08iVgh82L2Zs3JaOc.roa
Signing time: Thu 16 Jan 2025 10:29:06 +0000
ROA not before: Thu 16 Jan 2025 10:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 213.254.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:a8:d7:65:9e:ec:2d:8b:55:ba:fb:4e:88:e3:68:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 16 10:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9cad81dc678626d3c895821f362f666cdc968e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:09:aa:d3:d3:76:5d:3d:11:16:b5:ed:94:
f3:89:54:36:7b:ed:b1:c4:f5:de:2d:bf:1c:f2:58:
ae:34:35:57:b6:b1:d6:44:db:8a:4f:32:28:16:5b:
1e:44:5a:21:e1:d2:91:8b:02:06:3b:a4:fe:e0:33:
88:14:66:af:a2:dc:b0:0c:38:3e:a3:5b:a6:15:9c:
99:9b:38:57:68:38:32:83:28:2f:ca:dc:af:96:80:
a0:90:df:b5:38:c8:4b:77:f9:a4:e4:6d:7a:1e:91:
52:8b:50:73:09:43:91:50:d3:ad:c0:7d:a9:7e:2c:
9d:e1:f3:15:49:8d:90:2e:bc:86:e7:aa:ee:b0:08:
da:03:8d:de:62:65:39:74:6f:37:e5:15:b1:54:fa:
d9:de:59:5e:f1:34:b8:25:10:47:3e:31:1c:26:4f:
c7:ff:04:92:87:45:b3:fd:4a:f8:85:10:96:a4:b7:
fd:dc:e8:80:3c:2c:6d:07:e0:0a:20:9d:0f:29:73:
dd:88:3b:9b:a4:f5:a2:51:d4:5f:cf:2a:f4:a8:df:
bc:9c:ca:52:f5:2f:f2:d2:99:ed:15:29:96:f3:41:
7b:5d:e7:b6:01:61:d4:a9:23:95:9e:9d:0b:b6:24:
d9:aa:db:89:52:48:d0:dd:0a:4c:ae:3f:99:26:b9:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:D8:1D:C6:78:62:6D:3C:89:58:21:F3:62:F6:66:CD:C9:68:E7
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-crYHcZ4Ym08iVgh82L2Zs3JaOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.254.162.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:6a:e9:8d:37:59:00:0b:d5:83:21:76:89:2b:0d:b6:87:4d:
bb:f4:8b:c2:7a:fb:76:69:7f:f4:fd:35:13:f8:8c:81:31:0b:
f7:26:e6:29:00:61:07:37:d9:e5:93:0c:9d:cc:1f:58:a5:9a:
6e:b8:11:31:37:a0:fa:c8:1c:9d:d8:af:e5:65:6a:22:55:e8:
c3:f2:c1:f7:3c:a7:73:5b:ce:f5:b3:70:fb:a5:8d:39:85:cc:
a3:cc:58:c6:33:3d:74:df:d2:65:98:64:bf:b3:d7:21:1e:a7:
20:9f:93:f4:7b:9e:36:e2:e7:34:11:75:7c:5f:f5:5f:4e:4d:
0c:3e:a7:6d:6a:a9:eb:c9:4a:7c:71:0b:da:90:69:a8:7c:c7:
3c:70:19:d1:f5:b5:77:dc:d3:08:56:01:d9:0a:c2:fa:65:ea:
a7:c2:74:7d:3b:2b:a9:d4:4e:f9:1a:da:22:ec:ec:c6:73:75:
09:8e:ea:fb:fe:8e:61:51:19:e6:25:b5:37:58:8b:2e:8c:ea:
1b:09:f8:57:f7:fd:fc:43:65:08:a5:f7:37:9b:1b:2c:f9:c4:
50:81:3b:aa:70:bf:21:73:a4:55:97:3e:a3:aa:50:f6:6f:80:
7b:26:ee:ba:a0:c8:42:7d:a1:c6:78:d1:28:0a:c5:cb:26:78:
33:5d:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:54 2025 by rpki-client on console.sobornost.net