Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa
File: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (raw, json)
Hash identifier: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=
Subject key identifier: 93:3C:23:7E:AD:6E:0A:98:22:4C:05:27:93:9A:A1:A8:A3:AA:A1:A5
Certificate issuer: /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial: 0194258FB67D613D574473065265DE6E63F4
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197886
IP address blocks: 45.12.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b6:7d:61:3d:57:44:73:06:52:65:de:6e:63:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=933c237ead6e0a98224c0527939aa1a8a3aaa1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:db:db:3a:4e:2a:e1:68:5e:83:07:9c:0f:
d4:9b:cb:1e:19:8e:db:30:f1:a7:53:be:83:39:96:
48:a9:5f:8c:77:bc:dc:f1:fd:7c:61:e8:c8:46:75:
00:1e:73:4c:2a:00:64:9f:2a:d7:d0:f5:8b:14:cc:
07:fd:09:fe:8a:bd:4c:36:e3:d2:57:02:2d:0c:8c:
23:fe:90:69:d8:9c:c2:e9:f0:b0:7f:9a:96:a2:45:
27:d1:44:58:ff:94:b8:97:c4:bf:2f:f7:78:b9:26:
af:77:b2:b6:48:ab:2d:d4:44:94:b0:b7:62:6c:bd:
52:f7:ca:d5:ce:91:c4:8d:17:63:ba:47:93:bd:0f:
b8:5a:94:e8:ae:ae:c6:ad:17:99:11:63:c7:6b:22:
e7:57:da:16:80:ac:d0:c4:34:e5:be:71:f8:7b:ac:
d9:f4:2e:4c:e8:67:5b:ed:09:08:1e:1f:b7:c5:a2:
7a:68:1d:2a:6f:66:d1:22:d9:3c:83:2e:62:c8:bc:
95:aa:5f:23:8c:fd:30:0c:37:fb:46:e2:84:96:fb:
bb:52:d5:43:aa:c9:44:e9:ea:15:73:ca:75:0c:ef:
c5:09:a2:e3:b5:87:8b:10:c6:8d:d5:fc:6d:47:b7:
3b:26:17:d4:f9:32:ca:72:40:aa:21:f9:ec:e3:5d:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:23:7E:AD:6E:0A:98:22:4C:05:27:93:9A:A1:A8:A3:AA:A1:A5
X509v3 Authority Key Identifier:
keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.40.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:23:cf:b4:cb:2d:4c:a6:6e:bd:67:66:0d:ae:f0:51:93:f9:
dc:9d:97:2a:fe:3d:20:53:5d:8a:c6:f3:e6:65:71:13:cb:68:
23:32:83:3b:06:9b:e8:06:fd:95:6f:0e:5e:bd:93:b7:97:49:
5d:c7:dd:e2:9c:f7:f5:54:5c:d7:a9:b8:a3:fc:18:b9:54:85:
e9:5d:6c:df:72:ee:36:98:83:23:a1:ed:1e:4f:0b:3c:0d:15:
40:ba:f4:5b:a1:fb:a2:7d:df:a4:09:76:98:47:43:58:14:07:
bf:e8:54:5e:cc:a1:39:9e:e7:4b:f0:8a:13:4d:c0:e2:43:d0:
32:47:6a:a2:f1:5e:0b:b2:c2:a6:20:09:c8:b7:cf:e3:52:7d:
05:0d:10:94:aa:4a:7b:95:4a:e1:0c:1c:6e:78:91:59:a4:32:
73:9b:30:05:60:4f:2c:f6:e4:58:ab:82:e5:6c:86:95:45:c1:
2e:d9:05:98:51:54:3f:74:5e:cd:9f:83:28:f9:1b:0d:63:11:
d6:03:4f:c9:3e:d7:8c:cc:07:33:bc:89:e3:88:7c:cd:90:83:
15:f4:23:88:f8:d8:f2:f5:d3:9e:46:fa:f8:40:73:f3:a1:a3:
9a:b1:d3:f8:bc:c5:cf:c0:67:27:1a:0f:e8:c4:2e:4c:ee:e5:
bb:b9:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net