Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/P37BkvZ1l2OERYAzbrZkTdiaI5M.roa
File: P37BkvZ1l2OERYAzbrZkTdiaI5M.roa (raw, json)
Hash identifier: r0XmRfw3/HfMKojS2A590rOx5ogcXcLpRlFRDhYBH24=
Subject key identifier: 3F:7E:C1:92:F6:75:97:63:84:45:80:33:6E:B6:64:4D:D8:9A:23:93
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01941FFA66FF7ED23C53B5E9707B4CF8A07C
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/P37BkvZ1l2OERYAzbrZkTdiaI5M.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45043
IP address blocks: 195.64.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:66:ff:7e:d2:3c:53:b5:e9:70:7b:4c:f8:a0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f7ec192f6759763844580336eb6644dd89a2393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:4a:7d:85:e8:fd:39:50:49:59:c2:cc:03:
c2:07:c4:94:d2:58:c3:c3:16:b4:a6:68:04:40:90:
50:12:bf:2d:f3:52:04:50:21:4f:cb:86:12:85:31:
e2:96:5c:a8:ef:7a:e2:e4:4d:5e:44:9b:72:5d:66:
76:c9:51:b1:9a:00:45:a4:73:ba:80:a8:7f:38:4a:
69:9c:dc:42:37:a2:4d:96:5c:e1:83:b8:91:b0:4f:
2e:17:08:26:a9:04:61:34:8c:ce:db:4c:f6:7a:be:
93:b8:a8:2e:4d:85:05:2c:12:c8:51:92:09:5c:ab:
29:b7:aa:ac:0f:e1:0d:b7:86:4a:a4:92:19:df:31:
5f:7c:58:21:5c:e0:e6:01:ec:38:25:84:18:85:f5:
ed:0a:04:3f:ce:96:4f:46:fe:f4:1d:dc:d2:14:a1:
f0:a3:05:c7:b9:82:74:ab:b5:03:a8:91:02:cb:10:
07:51:dd:5a:77:14:ea:75:df:bf:67:dd:ef:0f:eb:
12:c7:7e:f6:15:95:05:2a:e4:4a:11:cb:65:7f:40:
80:9b:7f:19:53:68:d8:f3:df:ce:d2:10:de:9f:6c:
15:90:df:b0:f7:6a:50:9c:69:6f:2f:bc:e4:ed:08:
c8:3c:1d:05:f3:99:e0:40:fc:ad:d8:58:86:a3:e1:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7E:C1:92:F6:75:97:63:84:45:80:33:6E:B6:64:4D:D8:9A:23:93
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/P37BkvZ1l2OERYAzbrZkTdiaI5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.244.0/22
Signature Algorithm: sha256WithRSAEncryption
67:19:4b:28:e1:2a:ab:61:4b:f6:18:6c:4c:ba:52:f0:e1:20:
d0:1b:b1:66:93:5b:db:5f:ae:79:8b:bf:5e:c5:44:9f:ec:d4:
4a:62:ca:17:23:9e:f5:c0:fb:3b:b3:4c:ee:39:1b:9f:3f:e4:
2c:08:4c:ba:85:da:02:cb:bf:6b:5e:51:e7:85:7d:c2:5f:17:
26:e6:33:2d:ae:8f:6b:37:9c:ac:36:0c:35:1b:9e:34:ae:ac:
c0:cb:4b:26:a6:da:8c:56:25:68:35:0d:55:11:9c:19:d6:ef:
d8:0c:37:ed:1d:bc:30:af:5c:bb:a8:06:0b:5a:9c:49:dd:60:
1b:c4:bb:b0:b3:2c:ca:92:6a:1d:f6:5a:29:93:59:b1:78:df:
06:ca:44:9f:bd:5e:f7:20:a3:9e:02:ef:93:2b:7b:ec:5f:c6:
85:b3:3b:e2:a0:2e:fc:f2:71:04:c0:17:7f:9e:a9:88:df:32:
3e:f6:28:c0:a7:b2:fc:7a:78:d9:42:af:60:eb:ac:06:75:65:
3c:af:e2:0a:13:03:b4:b0:21:21:27:4f:a3:ba:95:cc:31:55:
d1:14:9f:84:f2:1a:07:9e:18:13:2a:1b:0e:41:00:21:fd:cc:
57:e2:a0:59:bb:91:e0:cb:d5:6d:49:89:c2:c1:56:d6:45:6f:
b8:b0:01:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net