Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/Ej_nms6zQmPoJeaI79U3Nd1orY8.roa
File: Ej_nms6zQmPoJeaI79U3Nd1orY8.roa (raw, json)
Hash identifier: +LgVGC9y1iGCqg/hmpi1yux7QukhrPPP6tmv7bAqvWw=
Subject key identifier: 12:3F:E7:9A:CE:B3:42:63:E8:25:E6:88:EF:D5:37:35:DD:68:AD:8F
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 019625517D44F1ECBD91A1BEDB351D0042E2
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/Ej_nms6zQmPoJeaI79U3Nd1orY8.roa
Signing time: Fri 11 Apr 2025 14:46:59 +0000
ROA not before: Fri 11 Apr 2025 14:46:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214011
IP address blocks: 213.134.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:51:7d:44:f1:ec:bd:91:a1:be:db:35:1d:00:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Apr 11 14:46:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=123fe79aceb34263e825e688efd53735dd68ad8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:40:47:94:0d:3d:e6:95:99:c1:a5:8a:87:
86:7b:8a:1f:9f:c5:de:2c:4c:da:55:08:fc:46:df:
4c:9e:fe:68:33:c9:1e:91:7d:1f:ba:e4:02:e2:15:
cc:5f:6a:52:75:f4:4a:de:72:b5:da:59:a8:66:3a:
39:12:64:a3:bf:ba:a0:e0:34:d0:fb:fb:71:8e:98:
61:69:15:09:b3:63:b2:bc:1b:fa:5c:05:f7:58:6b:
5e:7c:8d:ae:b7:3c:b0:a7:02:b4:58:f6:6c:38:f5:
50:7f:68:d8:eb:d2:9b:d4:33:71:6d:b6:16:a3:25:
f0:e7:b9:ea:61:09:71:c2:78:c0:70:69:6e:5e:cf:
cc:47:8c:d4:12:d0:8c:42:01:6a:cd:43:68:38:02:
e9:4f:50:b2:88:5f:f5:01:3f:1e:96:58:86:60:c8:
de:d8:7b:dc:51:56:ac:75:fd:da:05:24:82:37:46:
56:1f:f3:27:e1:42:bb:80:42:84:d4:2c:bc:30:03:
bd:c4:ef:85:79:40:ab:db:50:62:64:95:e5:37:cd:
6d:41:e3:80:1b:a0:b9:63:fb:29:94:6a:d3:a5:7f:
0f:56:b6:be:4e:0c:8d:17:eb:04:20:72:b4:92:7f:
4b:d2:b7:ed:c7:27:b7:bb:b4:a3:9c:f9:ba:62:1e:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:E7:9A:CE:B3:42:63:E8:25:E6:88:EF:D5:37:35:DD:68:AD:8F
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/Ej_nms6zQmPoJeaI79U3Nd1orY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.4.0/24
Signature Algorithm: sha256WithRSAEncryption
51:14:6e:d4:ce:25:72:11:48:c5:d4:6a:7d:de:17:b6:ee:46:
a0:c7:ae:22:ba:71:53:26:a9:7b:c1:d7:6a:7b:de:f3:16:71:
ab:b5:3f:d4:d6:11:43:da:8d:3d:eb:7f:33:ee:c8:c1:a6:e0:
41:8e:d5:57:2b:03:c2:f6:7e:ae:47:79:27:0d:fe:3f:d4:09:
e1:fb:12:38:31:88:71:5e:c6:77:af:2a:eb:1b:6b:97:9c:fd:
28:ea:86:a7:b5:64:bc:55:ad:f8:1f:4d:d5:72:85:2e:d4:c1:
da:7b:6a:56:8b:6e:a5:f6:b8:46:27:ed:95:40:d3:d8:5e:44:
0a:82:1c:8a:71:6f:c5:e3:4c:28:8d:1f:80:b1:9d:1d:a2:00:
3e:5a:40:a0:f3:29:5c:47:02:5e:df:ad:d8:73:6f:ad:c7:5e:
0a:18:fa:dd:02:52:2c:d9:a5:d5:b8:bf:6b:c0:0a:8a:ee:a5:
06:63:81:a8:d6:ab:05:33:d9:6d:63:80:3a:8a:bc:85:3f:2f:
ee:49:06:a7:d6:84:af:1d:ba:7e:9c:0c:69:94:9c:43:e7:77:
52:99:a8:45:4c:99:4e:b0:e8:f5:59:d1:94:77:58:6e:60:1f:
a7:73:46:0b:39:5e:f7:16:bc:a4:93:64:e2:16:f8:98:84:d3:
8e:00:04:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net