Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa
File: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (raw, json)
Hash identifier: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=
Subject key identifier: C6:CE:0B:86:AD:9D:B6:84:91:E4:DC:A5:19:D4:18:A7:36:00:24:56
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 01941FFA972214662B9DB5740E35AAB11CA0
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200624
IP address blocks: 212.48.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:97:22:14:66:2b:9d:b5:74:0e:35:aa:b1:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6ce0b86ad9db68491e4dca519d418a736002456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:19:a1:71:8d:da:4c:53:5a:6f:bd:b9:53:
8f:08:52:cf:09:90:5c:97:39:28:7a:ff:72:62:7b:
93:1d:5b:a1:cb:58:95:1c:ca:3c:02:be:8c:a9:58:
10:32:50:fd:2a:6d:25:4e:c1:99:97:24:9f:5d:a8:
f5:09:d4:74:46:6b:de:c7:17:e5:eb:8a:5f:a4:b0:
34:9f:b7:ce:b0:7a:d7:e5:69:29:4a:65:25:58:f7:
37:1f:d9:84:a0:aa:0f:88:cd:e3:6a:c3:e5:06:7b:
8a:7b:1b:73:c2:88:f2:76:b6:b3:61:2c:fd:80:d5:
f5:0c:ea:88:cd:eb:85:d5:86:0e:82:d2:25:b2:4e:
11:d7:57:4f:0d:1f:30:7d:ad:97:39:ff:7c:53:cc:
61:ca:5e:7f:42:97:fc:c1:e5:c7:d9:6a:19:3b:a3:
b8:41:ad:3d:f3:b2:6e:9d:0e:db:55:47:47:5c:c8:
14:9c:9f:ee:ba:7a:de:67:a4:84:4d:f2:ae:67:d3:
19:1e:cc:8e:e8:0d:92:c2:c3:19:25:3e:b3:85:61:
8c:5f:ab:88:a8:6b:55:ac:94:ff:40:5a:eb:1c:23:
6b:e5:24:4c:b9:c8:00:c0:5e:05:f4:d5:7f:8c:dd:
3c:20:91:56:27:05:6c:0e:f0:d6:30:89:02:9a:5f:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:0B:86:AD:9D:B6:84:91:E4:DC:A5:19:D4:18:A7:36:00:24:56
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.235.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fb:d3:50:4e:82:b9:09:65:cf:5b:41:21:13:b1:05:4c:48:
fe:21:57:5a:ea:29:1d:02:d2:e6:73:79:9b:ab:28:0c:a0:83:
4d:6d:7b:cb:7d:73:18:51:31:93:97:51:58:e7:1b:aa:ed:c8:
4c:b1:9e:a0:ad:5a:4e:e4:54:45:c4:b5:a1:83:d9:76:b6:8c:
dd:28:b4:01:ea:c8:61:35:bc:ae:7a:42:8b:4b:19:1a:c8:ce:
33:43:45:b8:19:38:28:17:b7:17:ca:8f:68:b1:f2:74:1e:aa:
3b:9a:ef:3a:bf:ca:91:be:dd:40:e3:07:ac:b0:a3:b4:d8:42:
d6:fd:e7:80:3c:a9:6f:25:a0:2b:03:a5:41:3a:c5:73:ed:36:
c6:94:c1:16:20:3c:ba:17:eb:f4:6b:9f:ff:9f:81:4c:c5:3e:
f2:cb:b8:f4:f4:28:d8:18:6b:41:55:0d:1e:36:be:f4:10:9b:
b7:20:b6:04:dd:62:d5:08:c8:df:68:0e:86:1c:fe:f7:85:37:
8b:bb:c5:1c:1b:dc:16:e7:6f:a1:c0:02:52:29:1c:9c:b9:b1:
a3:39:19:fc:a6:58:df:d4:a6:6a:40:01:06:f8:75:1a:b7:4f:
da:42:0e:c4:70:26:e7:3c:02:c5:f1:b6:86:a7:7b:78:af:50:
d9:ba:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net