Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/L8FNNsDYB1Mm4dcsPEPduE7Sp7s.roa
File: L8FNNsDYB1Mm4dcsPEPduE7Sp7s.roa (raw, json)
Hash identifier: ZqeWwA6iMQz8wB7BBawsH9mt3/kwxAcY8eULL2GkA/E=
Subject key identifier: 2F:C1:4D:36:C0:D8:07:53:26:E1:D7:2C:3C:43:DD:B8:4E:D2:A7:BB
Certificate issuer: /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial: 01942521FC8B4D2B5B35B2EDF3C7CDF0EE72
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/L8FNNsDYB1Mm4dcsPEPduE7Sp7s.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214679
IP address blocks: 45.88.57.0/24 maxlen: 24
2a0d:3480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fc:8b:4d:2b:5b:35:b2:ed:f3:c7:cd:f0:ee:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fc14d36c0d8075326e1d72c3c43ddb84ed2a7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:00:38:a7:ed:66:1e:a2:dd:27:c7:32:69:
ac:11:4a:b7:7d:2e:07:c1:89:50:e2:8f:85:cd:96:
94:fb:ec:4e:6a:09:ee:34:53:45:90:00:9f:1d:3d:
99:f6:72:90:7d:87:ff:a9:db:04:f6:32:24:6b:d9:
6b:4e:8e:30:cf:c8:ce:56:47:bd:41:8b:98:45:24:
bc:d1:29:bb:2d:25:7b:4e:86:03:1c:f8:9b:82:0f:
bf:fa:a3:ce:a9:8c:24:b7:85:59:4a:ba:d7:18:80:
91:1f:dc:e1:b1:38:95:2b:20:b0:8c:ae:ee:3a:7d:
d9:94:5d:a7:97:fd:2a:34:af:cf:42:bb:92:80:16:
dc:8d:13:62:af:b0:21:80:1b:4f:85:f3:4f:47:a9:
d1:cb:df:8b:91:d3:a6:1b:5d:db:21:26:e3:98:33:
af:a9:9f:ff:c5:98:bd:c4:7b:8f:fd:27:6d:75:d9:
84:66:a5:a1:33:d5:7d:3f:d2:db:94:2d:81:c1:12:
7d:e9:a5:5e:f3:31:60:d6:af:81:79:73:a0:e3:f5:
aa:1f:c8:51:4d:36:95:ee:08:ca:ae:3e:f8:fa:34:
85:63:2b:dc:43:9e:e8:69:de:3d:90:ed:e3:23:ca:
9f:4f:c1:3a:3c:13:bf:e0:de:ce:e6:f3:5e:61:16:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C1:4D:36:C0:D8:07:53:26:E1:D7:2C:3C:43:DD:B8:4E:D2:A7:BB
X509v3 Authority Key Identifier:
keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/L8FNNsDYB1Mm4dcsPEPduE7Sp7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.57.0/24
IPv6:
2a0d:3480::/29
Signature Algorithm: sha256WithRSAEncryption
7f:ef:24:30:e9:c8:09:4b:60:0a:79:40:76:28:9f:f8:75:a8:
34:90:69:29:61:ca:96:4c:00:6f:c8:f8:09:f1:b2:1f:cd:eb:
64:e9:fb:0c:e4:d1:1b:ac:df:c5:0f:59:a5:a9:72:fb:b0:97:
79:68:49:f5:80:6f:69:50:e9:36:ce:1e:ee:65:1b:60:3e:de:
90:f8:5d:8a:5b:c7:d9:1f:d2:ee:43:5d:4f:63:06:46:98:1b:
26:a4:6b:1e:1c:1b:7e:ff:4f:6b:d1:bc:5a:08:06:d1:b9:ee:
ca:e0:83:07:ca:2f:5e:f8:7a:ad:be:5e:14:2a:42:85:11:4a:
8e:87:74:ce:59:34:3b:01:3d:9c:10:62:f2:ca:94:0f:8e:61:
41:28:d0:6a:9a:2c:a2:cb:9e:cd:14:8b:24:5b:f6:3f:4f:01:
60:5e:4a:11:dd:9f:f0:d9:e7:91:28:e9:a9:08:3d:d4:4b:2f:
66:38:ae:92:28:9a:1e:7b:b8:56:bb:4e:57:57:36:dc:7c:ed:
2b:b5:d2:04:b5:11:42:44:b6:d3:1f:d5:15:3c:68:b6:85:9f:
0f:94:10:15:b1:88:06:64:d7:fe:93:a0:e0:2f:62:cd:15:01:
6d:bc:c6:4d:48:71:9d:82:05:a3:cf:f7:a3:40:ba:06:47:a5:
ef:62:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:45 2025 by rpki-client on console.sobornost.net