Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/cEnlNHZ35kSVNo2T27Ex45pap18.roa
File: cEnlNHZ35kSVNo2T27Ex45pap18.roa (raw, json)
Hash identifier: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=
Subject key identifier: 70:49:E5:34:76:77:E6:44:95:36:8D:93:DB:B1:31:E3:9A:5A:A7:5F
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 019423690E438CC36C91327D7C564D061B31
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/cEnlNHZ35kSVNo2T27Ex45pap18.roa
Signing time: Wed 01 Jan 2025 19:47:55 +0000
ROA not before: Wed 01 Jan 2025 19:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201225
IP address blocks: 109.232.160.0/24 maxlen: 24
109.232.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0e:43:8c:c3:6c:91:32:7d:7c:56:4d:06:1b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Jan 1 19:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7049e5347677e64495368d93dbb131e39a5aa75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:50:a8:fa:36:25:c7:da:70:b7:db:df:1e:
6a:9b:7d:22:44:84:d3:6d:84:50:b2:d3:19:a3:ff:
a9:8b:cb:ee:8a:a6:08:85:05:79:cb:63:56:c5:ad:
bc:c3:ae:55:d9:62:9b:57:df:24:63:b7:91:87:99:
bf:69:3f:4d:db:9f:e9:9e:b4:18:cf:7e:1b:d2:67:
e5:19:f6:ca:e5:f1:7a:10:b4:c0:76:89:a8:aa:7f:
68:b1:f5:f7:fb:18:10:a2:c9:68:2e:40:fa:00:0a:
c8:51:bb:8b:6b:6b:8d:40:78:82:67:6b:44:b6:b1:
0f:d0:0a:6b:37:70:f7:a7:ab:05:f1:3b:36:62:cb:
92:ac:4d:97:db:bf:7b:1c:54:28:21:5c:e5:a7:4e:
9c:ce:86:31:17:aa:bc:5e:37:81:74:2e:f9:b6:e3:
ff:19:83:36:54:90:6a:8b:24:a1:69:f1:0f:b6:74:
92:57:d5:84:0d:d6:ef:59:3d:37:53:72:d6:7f:50:
1d:d4:f0:ae:e9:4a:56:fc:e1:dd:b3:4d:c9:35:f2:
6c:5a:fb:a6:17:34:0c:b3:83:ea:98:ea:f0:47:4a:
2e:ee:2a:aa:b4:9a:79:7f:b0:b6:23:60:4f:71:07:
82:66:f5:d2:b5:46:d2:1b:32:de:9d:97:39:1e:b2:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:E5:34:76:77:E6:44:95:36:8D:93:DB:B1:31:E3:9A:5A:A7:5F
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/cEnlNHZ35kSVNo2T27Ex45pap18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:a6:b6:38:60:3e:bb:70:71:fb:8c:7e:0e:99:93:7e:85:0a:
2b:9e:37:8c:3b:d3:a9:3b:17:90:e1:40:43:59:4a:3d:20:a2:
47:9b:a5:b0:d5:bb:65:19:b2:98:d7:2d:9a:a8:7a:90:df:e7:
23:de:b4:10:fd:fc:0a:83:f2:69:c3:f4:68:06:f6:29:c1:60:
5b:d3:26:0d:6d:e3:3e:65:8d:26:cb:9f:70:7f:64:1b:09:dd:
8d:e3:2c:f9:c3:ce:09:be:82:86:ef:6a:24:67:a7:b7:58:da:
51:47:d6:1d:ac:26:0e:cb:2e:ef:4f:9b:81:10:72:e7:d2:8b:
f0:59:44:a4:cb:60:9a:3d:d8:b4:7f:78:37:cf:44:d5:f1:5e:
27:25:e0:6a:3f:32:51:8a:8c:07:7a:07:35:32:f1:24:28:76:
c1:96:e9:9b:59:5f:eb:19:b6:01:fd:2e:62:98:01:72:72:28:
4f:3e:07:c5:a7:ca:d9:31:13:d5:27:dc:5c:5d:7a:c3:b7:34:
8c:65:75:93:59:9c:3a:87:23:7b:eb:91:8b:e9:f6:99:bf:61:
ca:5a:35:bb:d7:3e:03:f3:d9:02:90:8f:d3:ee:18:3d:5d:84:
87:e1:2c:92:5b:da:b4:a8:d4:bf:f0:80:f6:d9:74:d8:c3:a6:
13:ad:aa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:26 2025 by rpki-client on console.sobornost.net