Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_Ps0tJNORQHEzkK5wMXvvfombIs.roa
File: _Ps0tJNORQHEzkK5wMXvvfombIs.roa (raw, json)
Hash identifier: E+ki17ppStbkP2Vuavh6+c0/MgV2G1ikFncUvkJFnG4=
Subject key identifier: FC:FB:34:B4:93:4E:45:01:C4:CE:42:B9:C0:C5:EF:BD:FA:26:6C:8B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3A5F506BE31520F79586A4B2C59F1
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_Ps0tJNORQHEzkK5wMXvvfombIs.roa
Signing time: Thu 02 Jan 2025 15:47:52 +0000
ROA not before: Thu 02 Jan 2025 15:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197731
IP address blocks: 45.137.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:a5:f5:06:be:31:52:0f:79:58:6a:4b:2c:59:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcfb34b4934e4501c4ce42b9c0c5efbdfa266c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:7d:87:d0:52:7a:78:06:5d:41:50:fd:65:
b6:4a:85:df:71:80:54:d0:48:b9:32:f3:b1:d2:f0:
d4:22:3f:ce:18:3d:a6:40:ba:4a:32:4d:07:1f:2b:
c8:17:4c:30:0c:ce:04:0c:84:f6:c9:4b:37:c1:7b:
8a:92:ea:a2:d8:5b:80:0f:c1:f0:5f:d7:9e:96:b8:
70:72:95:20:1d:c0:dd:05:7f:76:59:9b:3e:5f:8a:
5e:fc:a7:13:64:3c:55:ea:ef:0d:81:11:1d:2d:96:
e3:36:20:eb:e1:b5:dc:01:26:e0:0e:93:6b:39:a9:
f1:83:8c:0a:d9:18:36:4b:20:e1:d2:0a:61:9e:d4:
ea:9e:4c:6e:f9:60:af:3d:00:be:30:59:73:24:91:
23:dc:34:20:ff:ff:55:7c:e0:22:df:c4:93:3b:9f:
33:24:84:ee:e7:2e:bb:2b:f6:23:0e:39:6a:12:fb:
a3:0b:1e:87:37:9e:77:98:f2:72:fe:4e:95:15:9c:
6b:9b:65:03:ed:92:b0:da:46:5f:5c:2e:d7:7b:d9:
d6:84:86:df:05:9e:bd:08:73:54:64:43:0f:00:a5:
f9:6a:0f:5f:48:cf:8f:0b:b2:9b:65:2e:3e:31:8c:
4d:e0:86:8e:69:bb:78:86:e9:69:cd:05:3a:b4:5a:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:34:B4:93:4E:45:01:C4:CE:42:B9:C0:C5:EF:BD:FA:26:6C:8B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/_Ps0tJNORQHEzkK5wMXvvfombIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.196.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:92:ea:a0:a8:5f:4f:28:3e:02:ef:f6:73:76:4d:d4:c3:a5:
cd:ff:61:87:c9:d9:5b:dd:56:d2:56:21:63:86:37:43:cc:6a:
14:19:26:36:93:65:4c:95:9a:21:3a:ff:48:b3:bb:1f:09:35:
ff:4f:1a:38:25:70:45:49:91:d7:56:94:f3:2a:8e:e2:8c:54:
bd:da:4f:50:81:99:67:7e:d8:e4:06:be:58:35:cf:1e:30:7f:
9e:a4:a2:71:f1:43:ee:d7:15:83:3c:27:48:b5:3b:0e:15:c7:
ff:ee:0a:e5:e6:0e:b4:a6:96:4d:6d:63:c5:a4:f4:ab:65:c0:
1f:3f:ae:59:b0:4f:c1:04:0f:b4:db:38:b9:c8:1f:06:11:27:
8e:53:40:25:f6:01:63:c6:18:3d:f9:ec:2d:1c:7c:fd:da:91:
54:29:15:03:54:e6:be:69:cd:f6:4c:80:e3:b8:d0:0d:91:9f:
3a:85:4a:3f:7a:bd:08:eb:7a:c8:a8:7c:13:d8:fa:5e:ec:6d:
66:bc:ad:20:1d:b8:9d:1c:1b:2d:d9:25:db:a7:16:77:84:4f:
70:33:52:0d:ee:f6:11:ac:91:c2:bd:32:67:75:5c:99:62:df:
a6:4a:44:50:83:bd:30:6f:17:5c:3e:66:4e:83:84:56:91:39:
4e:c0:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:19 2025 by rpki-client on console.sobornost.net