Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa
File: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (raw, json)
Hash identifier: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=
Subject key identifier: 4F:BB:DD:E5:CF:32:37:B7:4A:A0:64:DC:B0:43:C6:68:1D:06:A0:92
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 019425FDE527D4207BEFA11644EDBBE7BC06
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212327
IP address blocks: 45.9.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e5:27:d4:20:7b:ef:a1:16:44:ed:bb:e7:bc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fbbdde5cf3237b74aa064dcb043c6681d06a092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:72:7c:d6:d2:c0:59:d9:f2:e2:f4:e4:b2:
46:16:4e:8a:4b:1d:a0:dc:b7:0b:e5:39:72:df:c7:
68:33:87:52:47:c1:02:97:cb:71:15:22:5d:c3:d0:
ad:1a:88:dc:91:db:d0:c6:72:e8:d4:58:5a:26:6f:
9f:8d:2e:79:5c:dd:77:e8:dc:e8:60:66:6a:1f:b3:
b9:22:43:8a:ec:03:cd:32:7d:f3:14:fd:ad:ee:1e:
e6:f4:9c:d6:a3:f5:ea:02:23:9c:52:27:70:ac:e0:
cf:5f:91:f0:0b:59:90:d9:07:37:35:88:57:64:92:
03:0a:59:5f:5c:f2:f6:62:88:c6:3c:e3:d3:16:23:
64:20:c9:34:71:9e:d6:e7:f3:2b:ca:4f:b8:d9:70:
a0:9c:bd:ee:d9:ee:55:c3:f1:bf:5c:1d:1a:d6:9e:
fb:04:43:6f:84:ae:c3:5a:d0:a4:a0:69:23:a6:b8:
04:5e:12:13:a8:29:8a:8d:62:80:91:91:dc:92:d8:
a6:f3:3d:47:61:3f:46:1b:ed:8f:8d:4d:79:d7:44:
e5:14:8b:56:df:6e:55:9e:c1:02:c8:3a:af:d0:96:
f7:bb:63:09:20:f7:f0:18:0e:4a:a5:44:43:cc:a0:
84:1d:47:aa:13:d2:2b:e3:da:e5:cc:e9:e9:af:d4:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BB:DD:E5:CF:32:37:B7:4A:A0:64:DC:B0:43:C6:68:1D:06:A0:92
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.136.0/22
Signature Algorithm: sha256WithRSAEncryption
72:92:e4:9e:ed:06:d0:22:7f:5a:3d:21:8e:1e:04:9d:db:92:
bf:dd:a9:71:25:78:56:38:90:b3:62:56:63:24:db:0b:d2:7c:
6a:9e:1c:70:30:72:ae:01:31:4a:4f:88:1c:10:45:c3:61:b2:
23:57:13:4c:4a:bf:7f:a7:77:62:45:3e:e6:f1:32:2c:7b:88:
ea:56:7e:74:44:a0:1f:fe:c8:b4:ac:81:15:ec:14:27:e8:37:
93:fe:c4:0b:c6:bc:fd:03:99:95:d6:62:95:aa:d3:96:97:33:
b5:1d:27:87:b1:ad:33:77:5b:a2:71:0f:5a:84:aa:18:8b:65:
ce:44:f5:5c:7b:c9:d5:5d:3a:27:be:95:90:dd:6f:08:84:ba:
99:59:9c:f5:7d:8b:80:33:d5:3f:b8:5d:3e:5d:e2:70:e7:30:
b6:31:72:f0:87:e9:02:9e:d2:99:7c:f9:28:33:1e:27:5c:2f:
f0:a9:54:45:5b:72:c9:fa:ae:b2:c3:89:2e:c8:ce:20:76:fe:
e6:fc:42:e3:9c:d4:1a:2e:38:09:4d:d6:c3:65:f8:3c:db:3c:
c6:67:22:a2:94:10:1e:72:d0:a0:7c:76:b4:87:91:a1:98:ec:
f0:83:2b:8c:37:0a:36:fc:56:7a:3d:37:ca:33:a0:54:ad:0c:
76:08:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net