Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa
File: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (raw, json)
Hash identifier: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=
Subject key identifier: 21:28:8C:77:C4:8E:05:49:9E:67:79:7D:A5:F4:EB:36:B4:4C:55:9E
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019464B06D82608817F82D49BBE03369A6BC
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa
Signing time: Tue 14 Jan 2025 12:01:11 +0000
ROA not before: Tue 14 Jan 2025 12:01:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12302
IP address blocks: 45.139.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:b0:6d:82:60:88:17:f8:2d:49:bb:e0:33:69:a6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 14 12:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21288c77c48e05499e67797da5f4eb36b44c559e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:29:14:89:93:25:99:f5:74:9e:b8:b0:be:
e1:cd:12:17:35:22:93:e3:5e:13:6f:4a:2a:ea:0c:
2a:42:2f:9a:ce:52:65:d2:ed:ad:d7:73:1d:da:94:
03:81:e8:f1:0a:a7:2b:d2:3a:07:a5:4c:7f:3c:0f:
aa:15:85:2b:f4:3e:d9:6b:fd:7a:63:af:1b:0c:2d:
01:bc:46:d6:3c:89:ed:df:95:d9:d6:7e:93:fb:21:
7f:25:44:d8:e3:c5:68:69:3a:f4:ff:62:fa:28:80:
5b:7e:67:97:12:a9:de:eb:0e:62:e5:c0:46:c7:ce:
20:95:ae:65:ad:88:a9:db:26:33:ab:48:e3:c6:7b:
91:73:a0:45:07:63:db:e9:9f:55:63:35:4a:0c:61:
73:73:15:1f:94:77:de:52:0b:d1:d7:29:a7:5a:0c:
c0:96:7d:3b:bf:68:b7:a5:6e:0f:cb:be:b6:11:52:
ad:82:c4:77:01:43:b4:8b:e1:75:4e:a4:db:ea:bd:
28:1c:b9:1a:45:55:56:b5:22:cb:c7:95:a3:9d:e0:
31:30:bf:55:83:b3:14:bc:08:42:10:a5:c1:89:41:
34:75:6c:01:a2:9b:a0:95:4b:eb:89:41:ab:bf:f6:
92:b0:8e:d5:b0:fe:e9:18:42:f5:91:a9:43:c9:3f:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:8C:77:C4:8E:05:49:9E:67:79:7D:A5:F4:EB:36:B4:4C:55:9E
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:92:79:b1:00:e0:17:d3:01:17:b7:29:66:f2:77:b9:87:f8:
9e:7c:de:8e:bf:c5:0b:fc:31:f0:45:af:82:3e:4b:59:fe:84:
73:11:98:0f:1a:d7:a8:1e:6c:9b:a1:32:49:71:a4:02:50:17:
bc:a9:15:f6:04:a8:6b:f8:6a:cf:99:83:38:fb:5c:ea:86:13:
84:66:a5:50:76:a7:45:7d:1a:18:8e:ce:03:41:d8:7d:dd:c6:
42:5a:41:2e:b8:1d:85:a6:fb:ec:12:b3:97:b8:d0:10:44:e4:
64:ae:60:76:7b:e0:8b:40:f8:02:20:01:53:e5:f7:4a:27:7a:
d3:e0:9d:76:62:fe:e7:0b:c3:d7:ef:e4:0a:72:95:4a:64:7d:
51:6e:80:36:ec:74:e7:fa:1f:c2:15:b1:12:88:de:b5:bb:47:
18:74:4e:36:f0:05:3b:fc:82:a1:ad:40:64:7d:4b:74:6a:20:
01:c7:33:22:ae:97:90:94:78:35:27:c0:f9:61:30:1f:33:52:
11:2c:a0:15:5c:15:c8:79:bd:a9:4b:ee:d4:9c:20:35:65:60:
46:30:2e:b6:d0:1e:fa:84:1a:36:b8:7b:c9:8b:b9:82:6c:71:
14:ae:c1:c6:f9:fa:00:e4:b4:f1:9c:bd:ef:8d:de:9f:58:7f:
e3:32:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net