Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/ZFdBgXtGzTSyBGSw60XB32cB-AA.roa
File: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (raw, json)
Hash identifier: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=
Subject key identifier: 64:57:41:81:7B:46:CD:34:B2:04:64:B0:EB:45:C1:DF:67:01:F8:00
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 019420D5D5E0000736480A6CC3E981182DF5
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/ZFdBgXtGzTSyBGSw60XB32cB-AA.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62101
IP address blocks: 176.126.220.0/23 maxlen: 32
176.126.221.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d5:e0:00:07:36:48:0a:6c:c3:e9:81:18:2d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=645741817b46cd34b20464b0eb45c1df6701f800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:bd:35:1d:52:c2:1b:be:fd:7b:f0:ab:cb:
c2:0b:f9:3c:2f:e8:2c:57:c0:ed:29:bb:49:58:bb:
1b:f2:bd:cb:fc:a3:2c:73:14:15:83:f1:7e:69:8e:
11:59:92:b5:09:66:8d:76:39:36:71:bf:d3:67:8b:
86:77:10:a8:63:f0:05:5e:61:60:4a:f0:22:5d:cc:
33:70:ca:d8:20:10:d6:99:19:0d:cd:e8:d8:42:f0:
72:76:ae:e7:f4:b0:5e:47:e4:4a:01:26:f9:83:ac:
ca:fc:54:28:cc:79:4a:ec:90:9e:4c:ad:a5:27:12:
69:97:ac:3b:4c:7b:1e:69:39:a2:ab:68:11:1d:5b:
61:e1:8c:03:c4:22:81:60:f7:77:00:97:f5:a1:bc:
f1:a5:fa:3a:9d:ac:51:de:7f:ad:8e:37:09:96:fb:
ff:21:90:e9:5f:74:d3:98:88:ed:f3:7a:5c:f8:87:
a6:67:7c:ac:9e:03:09:48:8e:7c:4c:3a:ef:f0:82:
48:8d:23:0b:28:7b:4d:49:96:5b:79:a6:85:5b:0e:
6f:f5:a9:c6:cd:5b:27:fe:7e:8d:57:c8:a7:56:8f:
ab:ef:14:a9:f7:65:f6:6e:9d:bd:81:d0:c9:c5:07:
c0:36:82:24:60:cd:57:0b:10:78:9a:18:da:aa:72:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:41:81:7B:46:CD:34:B2:04:64:B0:EB:45:C1:DF:67:01:F8:00
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/ZFdBgXtGzTSyBGSw60XB32cB-AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.220.0/23
Signature Algorithm: sha256WithRSAEncryption
11:a2:b3:68:f2:c0:9b:cf:ba:6c:e4:b5:af:86:09:d1:4f:b6:
33:f1:71:2a:ef:b1:d8:e7:36:a7:04:bc:ea:eb:28:66:a2:17:
e2:92:2c:25:88:0c:bb:b1:4c:23:33:af:3e:05:d1:99:0d:f7:
d9:1f:91:b3:6c:fe:d3:4f:5e:58:91:18:32:c1:c1:4e:a0:cf:
ee:d0:a7:bd:fd:41:30:0c:e9:c4:eb:9d:2a:4d:dc:30:38:24:
91:e6:7d:27:1d:c5:26:28:32:2a:c2:ea:d8:e0:9a:86:22:9a:
e0:e8:69:d3:47:db:e7:32:df:c8:95:dc:c1:48:95:f9:54:e0:
d3:f6:c5:e4:5f:04:55:b2:41:f6:77:94:6a:b7:27:21:46:84:
02:65:74:31:31:61:51:61:36:a7:6d:19:f8:c5:dc:05:ae:a6:
fc:00:ec:50:00:34:05:fd:7b:8d:88:4a:56:fb:65:fc:ab:26:
21:ba:ba:0f:f8:e2:f8:6b:1c:ce:7b:47:0d:51:f6:e6:59:81:
12:4c:ab:be:2f:3d:76:d1:d3:90:31:d5:ff:d6:18:22:23:cc:
23:dd:f5:f8:b4:58:fd:c7:aa:b2:b7:ef:e7:87:17:3b:da:80:
ab:7c:2c:f9:4b:e5:24:5d:f2:27:4a:8c:6a:fe:34:6d:8d:0d:
8e:4f:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net