Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/13RrS0RVMNZjnoNzLeY0leATSKM.roa
File: 13RrS0RVMNZjnoNzLeY0leATSKM.roa (raw, json)
Hash identifier: 5Kd668wao4EqEPYlsHp9hU5bq0vk1PZWy+Au8TDKmnI=
Subject key identifier: D7:74:6B:4B:44:55:30:D6:63:9E:83:73:2D:E6:34:95:E0:13:48:A3
Certificate issuer: /CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Certificate serial: 019426D9C492EC31014C9B04E4EA7F384684
Authority key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/13RrS0RVMNZjnoNzLeY0leATSKM.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213241
IP address blocks: 87.236.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c4:92:ec:31:01:4c:9b:04:e4:ea:7f:38:46:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7746b4b445530d6639e83732de63495e01348a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:48:f0:3c:f1:c3:b8:e1:8e:3f:6f:87:67:
9a:d4:a5:dd:d7:03:81:83:dd:6a:49:95:41:e4:16:
60:a2:ca:bf:8d:37:df:f3:c2:27:97:fc:86:d2:c2:
79:05:39:13:d6:12:e2:af:23:81:5b:9d:93:95:25:
d9:de:b2:6b:2b:82:14:56:a0:2d:73:68:89:cf:58:
c5:05:a3:81:79:b4:42:86:e9:e0:7f:04:3f:9c:c2:
2d:fd:f8:b8:32:84:68:8d:d0:e1:5d:d7:be:00:52:
63:01:75:56:c4:9c:59:71:ad:67:a0:db:03:91:48:
1e:ab:83:33:46:19:8f:8a:04:a2:ef:56:e7:9b:77:
0e:60:a3:47:cd:73:4e:39:6d:80:cc:6b:eb:c0:33:
e2:97:4a:8b:a9:96:bd:98:41:14:5e:2b:66:a1:55:
0f:9f:11:86:73:01:32:0f:65:b2:85:ba:48:43:70:
48:bf:82:96:81:b1:1c:ed:76:ad:38:44:3e:20:8d:
51:0c:ee:60:18:1c:68:f1:11:62:fe:b1:4d:7e:93:
e5:43:24:61:b2:cd:b5:d4:1f:55:3b:bb:ea:0b:64:
86:41:fd:5e:27:95:44:a9:44:8e:6a:4b:5a:32:e9:
1d:2f:32:bd:2a:fd:83:8e:fa:75:c8:27:e1:6e:1b:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:6B:4B:44:55:30:D6:63:9E:83:73:2D:E6:34:95:E0:13:48:A3
X509v3 Authority Key Identifier:
keyid:5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/13RrS0RVMNZjnoNzLeY0leATSKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.33.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1c:39:6b:15:45:89:25:0a:27:c9:96:7f:0f:4d:a0:5d:4c:
56:0d:f8:35:ec:7d:54:f9:e0:61:77:00:c1:fc:24:c2:2f:e3:
54:2a:a8:53:4c:dc:df:ce:e0:cf:c1:a5:e5:6a:8f:63:02:b4:
bc:27:b8:8b:61:fd:de:af:4f:9f:01:00:70:86:42:1d:5a:42:
7b:bf:69:4f:6f:3c:4c:3a:71:91:df:0f:08:e2:7f:ba:c8:9c:
78:fe:a4:05:5c:d8:82:e2:c4:bf:ee:30:71:b9:67:69:67:f1:
10:cc:e5:e4:3f:5c:57:d2:12:4e:9c:0f:b4:8f:3d:85:41:3a:
2c:96:b6:b4:73:26:11:eb:0b:11:e4:41:b9:d9:dd:cd:83:4e:
e1:b8:96:b7:b0:46:b8:c4:6f:0a:a3:74:39:26:43:14:e8:27:
55:ae:bd:35:ae:d9:a9:04:16:5c:9a:e5:a1:31:01:af:a5:f6:
0a:ff:2e:e0:8e:94:eb:1b:fa:7c:c6:b7:42:af:4a:cd:b4:2d:
4e:8e:90:5e:19:c9:d7:59:3d:1c:7c:54:2e:8e:1b:7f:dd:6c:
27:61:4c:c1:78:8d:a7:41:69:aa:f2:ed:a7:59:69:9a:18:e9:
6e:b9:4d:58:e3:23:88:fd:e5:12:d2:7d:4c:8e:77:c5:26:d6:
07:e3:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net