Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa
File: RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa (raw, json)
Hash identifier: aFDGOW4Qu6MNo6mtPQc9Lw/jPxt+lcHM9Vl2lskSnz8=
Subject key identifier: 45:9E:31:99:80:09:56:95:51:2D:FB:90:54:B1:50:19:78:1B:AD:01
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 01941FFA057C9C707E8878A75055B977D412
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34756
IP address blocks: 194.105.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:05:7c:9c:70:7e:88:78:a7:50:55:b9:77:d4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=459e319980095695512dfb9054b15019781bad01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:93:97:f3:df:11:71:b2:a1:08:d3:36:62:
10:78:37:75:21:1f:85:9d:ac:6d:6e:99:bb:d9:15:
c5:ab:d4:e6:fe:a3:00:62:7d:d8:7c:8d:a4:b9:e8:
98:f9:ea:00:bf:d8:e3:d1:e5:08:14:05:42:0f:6c:
ff:aa:ee:cf:c1:dc:d8:3a:0d:6e:ed:17:46:93:d4:
ca:be:05:a7:c5:03:41:b8:28:b5:10:13:8a:e5:61:
61:d7:96:cb:4a:89:01:be:38:07:5d:12:91:5a:2e:
7c:e0:1a:b0:fc:9f:7c:1d:f2:8b:3f:ed:75:eb:e4:
25:44:5f:3c:35:88:5d:45:87:80:4a:5e:cf:f3:1f:
9d:75:53:b5:6c:e2:8d:e6:a4:51:26:d1:66:41:50:
2c:0f:82:0b:b8:e4:10:f7:f1:a5:0e:23:41:2b:8e:
df:58:b1:cd:b9:45:ab:72:de:a2:84:a8:10:8f:d9:
28:13:45:2d:4f:31:ab:7f:4a:14:ab:16:58:11:83:
70:d9:f2:ee:50:e0:0b:ab:e7:69:4c:2a:57:8b:10:
6a:1d:8c:71:20:6a:0f:30:d8:ba:08:ca:1b:e8:8b:
2c:cb:6c:15:e0:29:c1:0a:d4:d7:34:7b:bf:10:89:
1d:81:2a:61:e6:1d:1c:9e:79:d6:a9:7e:6d:d0:1e:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:31:99:80:09:56:95:51:2D:FB:90:54:B1:50:19:78:1B:AD:01
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.150.0/23
Signature Algorithm: sha256WithRSAEncryption
48:d3:37:a3:da:07:7e:75:1f:28:46:f3:0b:9c:56:03:28:f8:
54:f3:5d:56:63:92:79:49:7d:1d:24:c9:8c:d7:fc:cd:35:e9:
93:bc:fc:88:a0:39:34:b6:34:97:e3:5a:d4:31:3d:00:fc:83:
58:b2:99:51:29:a0:e0:51:e3:88:c7:9f:fc:cd:3a:d2:ac:b2:
1d:7f:2f:15:1d:26:17:77:6d:7b:55:a9:5d:e5:2c:aa:cc:2e:
6d:b4:ab:c1:7e:e0:39:80:d4:85:49:b0:eb:2c:aa:50:66:8c:
a5:22:a4:88:d2:13:50:75:a1:6e:85:fd:28:3a:89:2b:0f:e7:
38:b4:40:f2:f5:7f:10:20:b8:37:7b:f1:ed:83:eb:17:bd:1e:
fe:b0:2a:ab:bb:2f:29:5b:4c:ea:b5:8f:86:1d:0c:b7:a6:a5:
66:96:ec:fe:ca:55:f5:cb:bb:77:71:b1:d5:7a:c3:9c:a7:9f:
18:83:96:df:b7:36:6c:fa:b2:34:22:63:8f:79:92:5a:df:36:
df:b1:be:3f:3e:15:2f:ba:9d:17:1f:ea:5e:d8:a0:c2:30:83:
2e:1d:d0:db:0e:62:0b:a8:3c:3d:32:d0:9b:85:02:fa:d7:c8:
65:7b:14:62:1a:9d:03:71:c0:27:90:ed:9a:e1:69:1d:08:c3:
cd:75:a7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net