Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa
File: 1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa (raw, json)
Hash identifier: 91Wi2oW4Wdmr3Kf24VCGVEfXWacp6jcVuiTMlTsIcZQ=
Subject key identifier: F9:F0:CB:AA:72:9F:31:9C:DF:A2:CC:3C:1A:B6:BE:92:E1:D1:BA:44
Certificate issuer: /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial: 01942827004D5972F9DD1BF980220ACB1058
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa
Signing time: Thu 02 Jan 2025 17:53:52 +0000
ROA not before: Thu 02 Jan 2025 17:53:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 145.11.48.0/24 maxlen: 24
145.11.60.0/24 maxlen: 24
145.11.61.0/24 maxlen: 24
145.11.62.0/24 maxlen: 24
145.11.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:00:4d:59:72:f9:dd:1b:f9:80:22:0a:cb:10:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Validity
Not Before: Jan 2 17:53:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f0cbaa729f319cdfa2cc3c1ab6be92e1d1ba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:16:22:9a:87:ea:4a:e9:78:13:17:c9:1b:
6c:e7:23:c4:4e:24:2f:da:4c:1a:c3:40:65:c6:4c:
73:51:a1:ee:9f:d4:67:46:09:5c:c6:a9:da:b5:79:
ce:1e:3d:ca:ee:4b:07:90:60:4c:94:25:98:e5:a1:
1a:c8:ba:7c:f8:a3:df:9d:29:f4:69:02:9c:d0:cb:
d5:ba:e4:23:e8:5d:0b:42:d6:91:57:5d:2e:ca:77:
20:88:8c:18:74:3e:fe:36:69:00:72:7d:1d:d1:0e:
c0:04:d7:f5:7e:d1:40:d8:c1:df:61:b3:e2:b1:a3:
8e:9f:26:53:52:27:8b:c3:c8:5d:3c:2f:78:36:cf:
11:30:2e:96:b4:c1:32:21:db:12:33:f2:cf:70:72:
75:60:01:03:89:d8:c7:bc:72:9f:50:22:db:ef:43:
d6:65:69:57:22:72:35:3b:90:bc:75:ff:03:c2:24:
61:f3:3b:c5:71:d1:d4:b9:2c:e7:d9:23:5b:82:75:
c1:99:9d:09:3c:00:43:4c:58:bc:05:5f:4a:37:c0:
f5:1c:42:e3:56:3f:68:57:bf:1d:2f:3e:41:53:aa:
a4:9d:6d:17:34:b3:40:31:5d:ad:31:ab:48:88:99:
42:18:fc:e6:4f:c1:e4:5d:cb:70:4a:58:5a:55:dd:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:CB:AA:72:9F:31:9C:DF:A2:CC:3C:1A:B6:BE:92:E1:D1:BA:44
X509v3 Authority Key Identifier:
keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.48.0/24
145.11.60.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d3:11:5e:b0:58:cc:41:b1:05:bf:e1:44:23:0b:d7:b1:a0:
2d:8b:86:41:d8:b2:70:66:a8:d1:63:69:08:e2:aa:d1:52:41:
4b:90:4a:f0:24:1c:36:da:8d:b7:02:64:0c:7f:66:3d:0a:e1:
d0:ed:1c:48:95:60:aa:09:1e:f3:1d:f4:13:1e:d4:37:d1:27:
9b:d4:b6:ae:f2:c2:95:00:55:e9:09:26:11:b7:c3:5c:88:6a:
bb:2f:b5:fc:27:b8:de:64:14:2c:e7:30:e8:2f:6e:9c:55:ba:
86:cb:9b:ef:c6:6b:65:f7:bd:55:60:b1:0e:27:9c:55:e8:f0:
1a:dd:53:87:f7:1d:0a:b2:fd:39:34:3f:71:5b:9b:2a:51:83:
dc:45:aa:79:f3:32:58:78:10:f7:c2:9a:20:44:da:fb:0a:4b:
df:9d:b4:d3:14:9a:7d:8d:f3:27:d8:58:78:6d:88:08:0c:da:
8d:92:a9:a8:9f:48:78:1f:38:54:0d:ee:8d:f3:76:45:b4:ef:
8c:56:24:36:6b:28:ac:a0:92:3d:7f:01:c9:03:dc:79:79:78:
2b:9e:d4:e6:29:8f:a9:78:da:3f:03:8b:02:57:8d:e3:64:f6:
23:58:bd:eb:a2:6b:5c:0b:80:ff:1f:36:7d:d0:44:e0:96:46:
b2:bb:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net