Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa
File: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (raw, json)
Hash identifier: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=
Subject key identifier: 36:83:A2:DA:39:09:A4:CA:45:C0:70:82:6C:BF:9C:EF:18:C8:5B:5B
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 019420680510D1B886D113B615D00A777C4A
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 45.92.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:05:10:d1:b8:86:d1:13:b6:15:d0:0a:77:7c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3683a2da3909a4ca45c070826cbf9cef18c85b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:fb:4a:09:04:c4:7b:3e:34:d5:ad:64:94:
03:88:ac:c2:5c:2e:28:7c:d0:5d:30:7d:40:a7:6e:
dd:4a:2a:39:19:af:43:04:b2:c2:fc:8b:71:a3:3a:
55:38:41:1c:39:e3:1a:57:3e:70:9f:6d:7d:28:f6:
04:f6:51:33:69:c6:63:fa:32:25:f5:80:2e:1f:fa:
d6:81:9f:bb:88:73:5a:bb:b6:22:93:ed:40:34:ca:
c9:da:23:5c:b7:b6:73:c6:3c:20:e1:f2:02:63:76:
bc:b7:6c:68:ff:e3:8d:f6:0d:16:47:93:20:9f:11:
31:07:5b:f2:99:31:b6:97:73:47:3f:87:e0:88:66:
2f:5a:0a:b7:bf:1a:67:3f:bb:7f:86:a3:d3:ed:31:
14:f0:34:c0:26:09:c1:89:07:43:88:55:28:df:23:
42:90:df:01:05:ff:d0:25:f7:86:f3:d7:93:76:30:
ce:20:7c:c2:20:b9:f4:e5:0a:91:cf:40:ab:6d:1a:
3d:82:3e:e1:9d:29:a7:61:ee:c1:d4:51:81:af:8a:
94:88:b7:48:32:f3:4a:6a:68:99:74:cd:99:8c:04:
3b:91:bf:41:47:d2:93:8e:ad:0d:5c:09:6b:af:f6:
f2:42:56:46:79:b5:59:98:b8:39:e6:f3:08:9a:08:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:83:A2:DA:39:09:A4:CA:45:C0:70:82:6C:BF:9C:EF:18:C8:5B:5B
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a4:a6:f4:d3:22:cd:b4:f6:3c:44:d1:ff:03:29:91:5f:11:
cc:26:4f:7d:4d:c4:ae:bf:3b:9c:47:b6:50:c1:e3:38:a1:ad:
19:b5:d2:ef:9b:aa:d6:fc:26:d1:19:6e:20:fa:02:f6:c9:c5:
3d:57:1d:2c:c6:3b:1a:51:48:e1:2d:f5:b1:cf:7c:01:26:ea:
07:5a:3b:05:db:6b:c2:39:73:5a:dd:9b:cf:12:ad:5d:de:59:
aa:0e:53:26:db:6b:62:54:a3:0e:bb:13:08:ba:69:ca:37:6d:
2b:32:37:9a:09:32:a3:3e:f1:37:9a:fb:c3:0f:6b:ff:34:90:
87:50:2f:ad:73:6a:82:7f:58:96:41:53:ab:28:96:bc:40:24:
40:97:3c:45:08:e1:9b:bb:e2:f1:eb:65:3f:26:b3:ba:cb:ae:
89:a4:98:db:ac:c6:6f:41:40:d9:d3:32:21:7e:a1:97:19:e0:
1c:6a:c2:e2:4d:96:e1:8e:19:89:f1:ff:99:90:79:9a:e8:6e:
8a:70:6a:d7:13:46:c4:57:27:66:3c:36:62:24:6c:99:dc:e0:
09:54:4c:28:95:06:54:04:eb:d3:c9:2c:1b:33:7b:58:5e:74:
dc:32:a7:17:6c:e5:c8:79:8d:59:2d:3a:a6:97:92:56:68:aa:
72:b9:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:38 2025 by rpki-client on console.sobornost.net