Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/zc7RUzWCmPoDG4hzn8etZn-5AJ0.roa
File: zc7RUzWCmPoDG4hzn8etZn-5AJ0.roa (raw, json)
Hash identifier: TtquGsTjmWlFwTUrq87tTfliolGMwFl6apAzBJEamXQ=
Subject key identifier: CD:CE:D1:53:35:82:98:FA:03:1B:88:73:9F:C7:AD:66:7F:B9:00:9D
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0195F0B7C3627338F0C0B155A8276AF04662
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/zc7RUzWCmPoDG4hzn8etZn-5AJ0.roa
Signing time: Tue 01 Apr 2025 09:38:49 +0000
ROA not before: Tue 01 Apr 2025 09:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215548
IP address blocks: 89.37.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:b7:c3:62:73:38:f0:c0:b1:55:a8:27:6a:f0:46:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 1 09:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdced153358298fa031b88739fc7ad667fb9009d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:1a:91:e8:9d:76:03:ae:85:2d:36:a0:0a:
65:12:99:9a:3e:2b:01:9a:9e:9a:32:08:12:4d:e5:
81:1d:0f:de:bb:88:17:83:2f:eb:73:23:f0:fa:c8:
78:33:20:64:0e:26:06:13:7f:ad:8e:6b:a3:09:3c:
86:43:0c:61:1f:26:2d:99:93:dd:e0:06:38:c9:a0:
93:8e:db:8b:22:71:48:0b:44:09:fb:0b:57:4f:8d:
2e:db:f8:e1:f0:15:14:0a:5b:da:d6:c3:58:01:9d:
d0:eb:0d:03:20:a1:6a:78:8a:31:75:a7:4e:45:c5:
06:a7:6e:b2:9a:17:5b:83:a1:07:a1:87:af:4e:77:
48:f6:1e:83:1f:04:69:60:f2:25:f4:a0:9b:e9:0d:
a0:e4:4a:2f:66:09:22:a9:5a:bb:9f:d7:e3:ea:de:
c6:7f:bb:bd:82:10:68:80:5c:ba:12:1f:6c:84:ea:
db:a6:78:e6:5f:45:6f:e9:f4:5a:46:d3:0d:85:9e:
67:af:25:50:cf:7c:ca:81:54:cd:f3:ca:a1:53:b8:
0a:50:cf:19:5b:2e:c2:70:40:fa:59:52:0a:8b:cd:
6d:0e:e7:a8:0f:4f:56:58:8a:56:6a:03:51:82:22:
d8:fa:f6:05:a8:90:0c:fe:6f:d0:57:dc:3c:f6:82:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CE:D1:53:35:82:98:FA:03:1B:88:73:9F:C7:AD:66:7F:B9:00:9D
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/zc7RUzWCmPoDG4hzn8etZn-5AJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c3:08:d7:4c:53:e2:dc:34:40:10:c2:77:9f:ab:dc:36:41:
6b:be:0b:08:47:00:4e:4f:75:d9:a2:b2:45:aa:ab:ea:c3:14:
98:ef:3c:cb:d4:c2:6f:47:6c:59:67:bb:8a:ae:44:b4:55:95:
3a:7c:d9:5f:0f:99:76:25:6f:61:ad:af:04:22:2c:a3:0b:50:
4d:0e:bf:ac:d0:90:79:3f:60:56:e0:89:df:81:83:79:38:5b:
24:cf:d2:a1:9e:43:5b:56:a8:6f:c6:30:76:14:ac:15:b1:21:
05:a2:23:ed:bd:3f:4b:7e:b0:34:d9:c4:de:46:05:ec:e2:cd:
28:ce:48:2b:17:e1:4c:26:9f:92:57:e5:85:05:3c:cd:92:d3:
27:98:9a:e3:e9:f2:d6:67:bc:be:dd:07:4b:7b:1a:25:a7:9e:
02:a7:6d:84:1b:23:6b:0b:80:73:0a:8f:89:58:58:5e:de:ae:
c6:35:0b:91:34:f7:ad:84:83:26:b6:b4:59:9b:62:44:37:a3:
c7:1c:e9:ca:a0:a4:89:9d:7a:94:cc:68:c9:e8:14:41:1b:2f:
0a:b7:9d:14:71:0e:d1:8a:fa:29:76:8f:3f:63:d3:6e:21:42:
f2:2c:cc:38:f3:19:b1:1e:28:17:70:28:b1:60:8b:ac:a2:cb:
94:db:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net