Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/Hj5kUpz7xdoLzekUyLjxpjXny5A.roa
File: Hj5kUpz7xdoLzekUyLjxpjXny5A.roa (raw, json)
Hash identifier: YsFkP4ivDT8n97lWUkymibL7niehHmCc1xfqSbnlCHw=
Subject key identifier: 1E:3E:64:52:9C:FB:C5:DA:0B:CD:E9:14:C8:B8:F1:A6:35:E7:CB:90
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 019427B36795A343487C88E20EA1832FDCDE
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/Hj5kUpz7xdoLzekUyLjxpjXny5A.roa
Signing time: Thu 02 Jan 2025 15:47:36 +0000
ROA not before: Thu 02 Jan 2025 15:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47160
IP address blocks: 45.147.208.0/22 maxlen: 24
176.124.40.0/22 maxlen: 24
2a0f:3400::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:67:95:a3:43:48:7c:88:e2:0e:a1:83:2f:dc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Jan 2 15:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e3e64529cfbc5da0bcde914c8b8f1a635e7cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:cb:d2:4d:79:57:06:92:dd:3b:13:96:28:
30:f8:1a:82:c5:fb:d7:21:7e:72:9c:9e:ff:44:fd:
2a:fe:57:18:49:d6:4f:65:6f:a3:ab:d6:8a:ec:22:
32:93:95:9c:b3:7f:59:63:ea:4f:0b:6a:06:e8:1e:
4a:d5:f9:47:8f:9c:75:45:7c:52:2f:0c:7a:4b:7e:
04:b5:41:a8:c2:3b:6e:e8:31:e0:31:0e:a7:a4:22:
2a:0f:ef:fb:97:33:3a:c1:ba:3e:62:db:1d:2b:9f:
72:71:2a:25:e6:ef:d5:af:bb:19:b7:7c:48:91:90:
90:ab:8a:5f:bf:d1:cf:67:d9:bf:48:b0:c6:5f:67:
0a:e3:76:1f:10:03:1d:12:90:09:6e:96:c9:4b:bc:
6d:e1:e8:04:fb:11:15:3d:c4:c3:42:21:ea:97:ac:
6b:52:d9:8f:38:03:b2:af:10:62:57:44:66:b6:04:
b3:e1:31:26:76:ad:e2:04:00:dc:d1:de:f3:85:ec:
8f:50:cb:43:48:f7:59:45:32:7a:66:af:29:84:80:
9d:e5:4b:c2:38:ea:2c:86:b9:9d:98:2a:15:bf:84:
90:bb:b2:b2:f8:71:31:27:f2:d6:ba:38:5d:14:4c:
8c:d0:f6:38:f7:62:f1:89:0b:6d:4f:ea:74:b4:7e:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3E:64:52:9C:FB:C5:DA:0B:CD:E9:14:C8:B8:F1:A6:35:E7:CB:90
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/Hj5kUpz7xdoLzekUyLjxpjXny5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.208.0/22
176.124.40.0/22
IPv6:
2a0f:3400::/29
Signature Algorithm: sha256WithRSAEncryption
4d:ae:a9:6c:6a:25:f8:b3:f6:9e:98:fb:93:41:89:c1:ec:bc:
f5:97:f6:04:4e:ae:85:ae:0a:4e:3e:77:8b:4a:ac:d5:9f:fc:
23:a1:9d:2b:99:4c:db:d9:bd:c4:1f:a0:5c:ea:be:d9:90:c3:
2a:60:f3:c6:f1:63:52:e8:7b:2c:e8:dc:4c:e3:10:a5:93:70:
71:0e:0a:82:d0:bc:06:93:f4:af:31:e8:b9:1c:ad:46:8f:b8:
71:94:b7:e7:02:30:84:c2:1c:38:56:86:c6:4b:92:17:6b:4b:
71:86:69:0d:cf:81:c1:95:31:32:d9:13:1b:25:3c:9a:f8:ae:
d2:b3:c6:43:1e:0d:42:b2:66:29:6e:64:e0:9b:96:0b:94:9f:
1f:20:ae:be:69:ae:2a:a5:5a:ed:96:6b:b3:a1:5e:cc:55:a7:
2b:0f:1c:6f:76:d8:35:54:b8:6e:f4:cb:ea:b2:3c:e2:fa:49:
98:7c:51:d6:1c:c9:fe:68:53:0a:0c:dd:71:2d:12:66:9f:58:
63:e1:21:cb:53:6f:17:ba:be:c3:74:13:17:43:20:34:27:51:
56:0e:ea:c6:17:b1:72:9f:b8:8a:80:57:7d:48:a6:83:59:c3:
1d:f9:af:60:72:1d:41:36:05:4e:15:23:25:1d:6c:ed:ff:09:
cd:cb:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:25:37 2025 by rpki-client on console.sobornost.net