Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0U4axSnSzHPh_ST2gbB9_8x9cr0.roa
File: 0U4axSnSzHPh_ST2gbB9_8x9cr0.roa (raw, json)
Hash identifier: eDJSne6lrBb7pR9bHWe73Tl6IGMGFNP8X59IEvdvIb8=
Subject key identifier: D1:4E:1A:C5:29:D2:CC:73:E1:FD:24:F6:81:B0:7D:FF:CC:7D:72:BD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01948D96543428E76AE7CDFADE4E784928BF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0U4axSnSzHPh_ST2gbB9_8x9cr0.roa
Signing time: Wed 22 Jan 2025 10:37:06 +0000
ROA not before: Wed 22 Jan 2025 10:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213738
IP address blocks: 82.153.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:96:54:34:28:e7:6a:e7:cd:fa:de:4e:78:49:28:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 22 10:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d14e1ac529d2cc73e1fd24f681b07dffcc7d72bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:6c:15:6d:dc:eb:13:f5:a1:a7:89:c5:85:
2b:6d:3f:27:e5:cb:97:c8:c1:ec:a6:d6:47:21:2d:
3e:1a:86:6c:96:f5:c7:09:85:ea:9e:05:69:d4:1b:
07:8a:82:82:97:ea:2d:f3:1f:95:32:06:d6:a6:ac:
1b:4a:c4:17:5d:e9:19:9c:71:43:f4:e7:f6:7c:27:
55:d7:4a:ee:b0:73:80:e3:0c:eb:12:89:7d:0e:b6:
a2:db:4a:83:a7:ca:9f:3e:44:5c:56:7a:bd:f9:36:
82:f8:13:8d:df:77:34:e7:67:01:5d:bd:a3:ea:d6:
e4:8b:b9:51:1c:c8:c6:5f:26:4a:d8:a2:23:d9:e2:
3e:8b:5c:b3:88:cd:55:2c:e1:39:1a:d3:82:b6:a1:
1f:ee:c9:b7:9d:86:b2:57:8c:a9:c2:66:b7:5c:04:
66:d0:1f:46:16:93:95:ae:9e:bd:16:2f:e4:4e:f5:
0c:e6:ca:52:d9:95:fc:83:bf:10:26:32:9b:85:6c:
4d:75:8a:db:74:cf:a7:9d:96:d2:5f:dc:71:00:36:
70:23:29:40:9d:b5:b8:49:f2:6a:44:09:fd:3b:50:
fd:53:bf:0d:00:a0:80:2c:ee:9f:a2:4e:91:b2:e9:
78:5e:1b:04:b3:b7:87:9b:e1:9b:c3:ab:43:99:15:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:1A:C5:29:D2:CC:73:E1:FD:24:F6:81:B0:7D:FF:CC:7D:72:BD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0U4axSnSzHPh_ST2gbB9_8x9cr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.35.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b1:e5:16:38:4c:d1:bb:99:58:aa:1f:ff:f9:4e:83:84:56:
2c:e4:09:f2:8f:d3:97:31:a0:b2:1f:2d:5e:2b:4d:f3:8b:55:
84:be:88:60:29:c3:5f:66:4c:ef:14:68:ec:d7:cd:5a:5e:90:
74:c3:cd:27:fb:79:63:03:fa:88:da:41:48:b3:00:41:25:99:
be:62:ce:f3:70:1a:dd:4c:15:36:05:28:64:b4:51:ec:f2:9a:
86:ad:ce:eb:c4:61:3f:ab:dd:9f:b5:df:e2:7d:fd:c6:92:7b:
f9:18:41:cc:b1:e6:f1:01:12:25:84:c4:23:08:bc:0d:af:b9:
2e:db:ef:c1:dc:bd:c8:e4:a6:07:47:b0:14:92:55:4c:64:99:
6d:0d:31:d8:5f:ec:d6:15:9f:c7:d2:2a:85:f1:5f:7a:8f:9b:
75:70:bd:43:6a:10:63:cf:65:a2:8f:e4:f7:6b:35:31:89:72:
8c:40:cb:c0:3a:14:87:5f:63:a8:82:89:8b:e6:60:ce:40:ad:
7a:91:b5:fa:7c:36:ad:09:07:5c:b3:07:53:63:3b:09:c2:84:
a1:d3:69:1d:14:76:f8:b4:0d:cf:91:d2:64:95:5d:fc:f6:db:
88:1b:ca:77:61:1e:03:d8:e7:ef:55:7f:08:6a:8e:ca:25:4f:
78:24:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net