Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/cEBx7aoqU0ILwpLn4WovM_f845U.roa
File: cEBx7aoqU0ILwpLn4WovM_f845U.roa (raw, json)
Hash identifier: J2opbMpTZpUpvX4wcx9CCjjTjdIRz3Wc8zKaGaF1BXs=
Subject key identifier: 70:40:71:ED:AA:2A:53:42:0B:C2:92:E7:E1:6A:2F:33:F7:FC:E3:95
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 019427481781C30BFED2F4906D319A2CE74E
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/cEBx7aoqU0ILwpLn4WovM_f845U.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43022
IP address blocks: 212.1.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:17:81:c3:0b:fe:d2:f4:90:6d:31:9a:2c:e7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=704071edaa2a53420bc292e7e16a2f33f7fce395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:2a:58:34:70:76:13:f8:7b:e6:47:ec:a5:
4f:2f:19:5f:16:56:73:64:08:b7:14:03:0d:96:64:
1c:ad:54:c7:ce:08:7a:c0:d0:05:8c:ec:19:e6:bb:
5c:2e:99:ae:2f:5d:35:18:b2:d9:cf:26:46:ae:0c:
49:94:9e:f7:99:a9:8e:8e:98:58:66:d6:cf:93:41:
b3:e7:3f:22:b9:2d:7b:3f:a5:cd:c9:30:7d:91:89:
8f:b1:19:c0:8c:44:ce:54:73:63:74:fa:d6:10:0b:
9d:05:86:25:23:31:5b:9b:1f:d7:72:23:92:d3:2a:
8f:2a:69:93:bb:ce:de:99:c0:4b:f4:5d:b9:83:ce:
c2:8c:46:d6:23:97:ec:06:d5:34:15:94:d9:3e:3e:
5d:b4:3c:dc:08:b6:dc:c8:d0:0d:fa:6a:f0:46:3b:
28:08:9e:03:f7:0a:81:aa:d7:96:81:7c:60:02:0c:
16:6c:54:bf:2e:c7:ca:47:8f:08:1a:ab:e2:1d:e7:
c4:62:06:57:cd:ff:ca:01:99:c3:dd:59:e3:74:68:
0c:4e:68:c3:9e:26:b8:b9:99:80:9e:64:92:05:f8:
f4:31:96:60:5b:13:3f:2a:ff:b1:17:88:f5:e1:e6:
0e:60:eb:1c:58:65:c0:fa:32:90:29:7d:ae:9c:47:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:71:ED:AA:2A:53:42:0B:C2:92:E7:E1:6A:2F:33:F7:FC:E3:95
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/cEBx7aoqU0ILwpLn4WovM_f845U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.1.73.0/24
Signature Algorithm: sha256WithRSAEncryption
02:1d:4d:ad:5e:d5:23:56:a4:79:eb:2e:7a:25:d6:e0:c9:df:
d0:43:6e:d5:50:aa:9f:f1:8f:2f:49:42:a2:23:51:90:07:8f:
98:21:fa:0b:ec:9a:c0:ae:1a:13:73:47:57:cf:32:3c:f2:26:
10:64:91:b3:3a:d1:6e:7a:26:fb:b6:a4:67:0f:b7:e5:9d:fd:
27:a7:47:68:a1:94:1d:0e:52:7e:21:39:ac:1e:67:18:ee:af:
2a:a4:90:5d:c9:a8:fa:c0:4d:5e:d9:11:d9:a6:5e:18:f9:40:
7a:d8:77:d6:b5:79:d0:e3:8d:4d:7f:7c:6a:f6:98:44:ac:55:
13:82:61:44:ad:da:e8:73:17:51:c8:b4:53:c4:b8:06:ba:55:
48:6e:ac:b9:01:9c:ce:9b:00:f5:fa:c9:29:46:c9:d0:af:8f:
a8:c3:00:e7:6e:fa:ca:c8:e6:29:df:df:9e:8f:a7:91:52:0f:
e8:63:06:8d:1e:77:ca:d3:ed:07:a1:65:53:70:d2:41:a9:39:
5f:d2:2f:c8:9f:17:4c:21:b1:bc:05:a7:66:29:4b:ff:11:74:
ca:9c:79:1e:6d:69:a3:83:a7:53:a4:ed:3d:94:5d:64:39:fe:
74:1f:22:d3:b5:c8:31:ca:05:09:64:0e:1c:4c:d4:00:bf:67:
89:11:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net