Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa
File: OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa (raw, json)
Hash identifier: olMlYCsvO4RycaUkfHVORoJbVkzPaXULWZ1VzqkkPLI=
Subject key identifier: 3B:3B:C4:67:FE:E8:EA:28:84:7A:64:D8:61:48:77:B8:F4:B6:91:2D
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0194266A29CE6BF78B43591BDD513BE9B7F6
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa
Signing time: Thu 02 Jan 2025 09:47:59 +0000
ROA not before: Thu 02 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44996
IP address blocks: 45.10.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:29:ce:6b:f7:8b:43:59:1b:dd:51:3b:e9:b7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 2 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b3bc467fee8ea28847a64d8614877b8f4b6912d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:0e:0a:72:0a:87:d0:a7:7c:9c:12:02:52:
16:97:40:aa:ac:36:1a:02:dc:77:f7:61:83:4c:a7:
de:11:96:1b:2c:6e:23:01:a0:17:a3:31:31:64:e5:
cd:12:b9:88:3b:53:30:50:57:47:7e:2c:5f:51:0c:
f3:b7:e3:ff:b2:ef:22:dd:61:63:6a:ac:09:89:b5:
d1:19:a6:b0:86:db:98:f7:66:24:ec:87:a1:b9:21:
55:70:32:7a:b2:02:ed:fb:f8:23:39:49:db:98:47:
f7:e2:7b:a1:58:35:7b:b2:b4:7e:69:a5:56:0f:dc:
54:67:2b:58:96:6f:3c:c0:5a:d8:fe:ad:f1:0d:9d:
76:90:b3:12:14:ba:8f:3a:a9:ff:3e:73:81:b2:0c:
25:2c:7f:ed:3e:5a:e1:2c:f8:52:37:51:14:8d:39:
b0:d1:dc:03:8d:f1:a2:31:8b:79:47:19:89:17:c5:
f5:00:5d:26:45:6f:f2:80:a5:d0:5c:45:80:19:11:
69:ef:08:20:a9:fa:33:b2:2f:45:b9:2e:9b:0b:ca:
fa:96:18:2f:dd:31:04:1e:87:4f:41:4b:1e:db:a4:
52:66:98:f1:bc:0c:c6:6d:65:df:77:13:6d:0f:5a:
64:01:63:b2:31:b0:90:e1:83:45:9c:d1:3e:c8:a8:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:C4:67:FE:E8:EA:28:84:7A:64:D8:61:48:77:B8:F4:B6:91:2D
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.90.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5b:b6:5e:a1:fa:65:ee:71:9c:a0:7d:52:5c:cc:2f:cb:d7:
3c:a4:19:7f:12:99:62:78:34:d3:16:99:82:43:03:ec:06:6a:
61:26:79:f1:51:dd:a6:12:39:f9:01:da:1b:cf:54:d2:db:8b:
23:15:7d:a0:a7:92:39:e7:10:da:85:e3:67:1a:f3:ce:eb:e8:
42:be:5c:36:00:12:f5:98:f1:e1:c4:51:5b:17:7b:b4:8c:c0:
4e:0c:2a:0a:d6:ab:7a:a7:64:d2:7e:5c:26:7e:d0:20:79:f0:
48:d1:3b:e8:1e:2f:1e:dd:92:94:4d:04:05:b7:df:76:ae:4a:
9a:b7:4a:0c:c1:dc:f0:c5:f6:2b:e5:c2:c5:fa:e2:44:b8:da:
96:90:75:bc:14:c4:ae:4e:31:f6:92:79:08:ef:10:f8:ff:92:
c5:a2:83:9c:d2:f8:95:39:7e:78:e2:68:54:40:72:ce:f8:c3:
55:86:38:69:cf:b5:79:7d:27:62:39:18:90:a2:1f:1a:b4:79:
c4:9d:9a:da:5b:34:8f:93:a3:de:f1:2e:e4:a3:a2:86:4f:4a:
08:78:5c:98:e7:fb:c8:c2:29:ec:c2:7a:cd:cb:f3:3d:b7:84:
48:70:76:a7:f5:ba:e4:f5:b0:5f:85:f6:c6:38:87:c1:f5:c5:
17:89:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net