Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa
File: ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa (raw, json)
Hash identifier: N095uXaZbk2Jvru/0oYsrQzeZ/eKCMXo6ETE3DefpcQ=
Subject key identifier: 89:E0:1F:0A:1F:EF:C1:B0:53:6C:5D:C3:18:12:57:41:83:31:F4:FC
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 01941FFAB35FBD10A742D6DC2B3CD18787FD
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48076
IP address blocks: 217.199.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b3:5f:bd:10:a7:42:d6:dc:2b:3c:d1:87:87:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89e01f0a1fefc1b0536c5dc3181257418331f4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:ff:49:1a:06:7f:14:c4:d9:27:49:9f:7d:
8d:30:33:81:e0:10:04:58:4d:40:1b:7f:9d:6f:d4:
eb:10:3d:81:ea:8f:23:c2:7a:c7:74:03:43:21:bb:
b4:ce:c5:a6:b0:aa:df:4d:c1:8a:bd:ab:37:37:3a:
79:36:bb:7d:1c:02:40:0a:59:a8:5e:d9:7f:1e:d0:
93:ec:85:8c:c2:16:4e:57:42:59:bb:f3:0b:f6:72:
4a:c1:94:9c:45:c7:73:57:02:ab:31:a7:b2:9d:2d:
7e:ba:bf:22:42:cb:82:d9:98:97:e8:aa:7d:86:d0:
b8:20:f6:e9:24:a8:75:6c:80:d1:75:fd:9a:52:13:
33:d2:de:d6:77:19:88:39:e5:f3:19:41:48:08:bd:
ae:d6:0c:96:75:bf:4b:c4:0d:9d:54:84:39:78:f2:
b1:1a:2a:58:16:60:29:2c:3b:b9:64:20:d2:18:16:
51:66:2c:7d:70:13:0b:9a:fb:66:cd:86:da:a3:83:
e0:4a:82:f4:21:06:22:e9:ab:da:3f:73:31:cd:ad:
cf:27:02:c9:5c:54:ff:ac:69:dc:87:1a:00:37:1e:
02:7d:1c:fb:21:01:10:3c:d9:9b:0f:c2:c4:44:5f:
bf:4c:9f:12:13:71:8a:84:1e:e1:b1:f3:84:02:72:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:1F:0A:1F:EF:C1:B0:53:6C:5D:C3:18:12:57:41:83:31:F4:FC
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.199.211.0/24
Signature Algorithm: sha256WithRSAEncryption
56:57:4c:9b:3b:6d:bd:a3:51:8e:e4:47:bf:30:95:b9:35:6a:
32:9e:c2:8d:3b:f8:50:d0:39:94:44:06:55:bb:ad:d3:c3:39:
d4:96:ac:8f:51:af:34:31:96:1f:cd:fe:b6:ee:c6:7f:59:cb:
f4:79:46:e1:85:21:27:0a:01:b6:41:37:a4:f8:c0:a5:79:d7:
d5:c0:9d:8c:d5:79:bf:e9:17:58:a0:c0:e2:d9:d6:ff:f4:ec:
68:a0:4a:19:66:dc:b7:73:8e:1a:6c:16:4c:b1:f3:e8:ff:46:
c8:2f:b7:13:a2:86:e4:15:41:56:7e:13:55:28:dd:2a:bb:3f:
0d:f2:07:63:ee:08:2d:91:7b:58:80:28:ec:bc:69:e2:a3:1f:
34:fc:f0:0b:cc:02:3a:c1:4a:e8:24:d4:a2:f1:c7:3f:94:51:
c5:9e:fb:d1:eb:21:19:3b:b0:2f:b3:1c:3b:9b:14:cc:a9:dc:
5a:2c:05:c2:cf:59:b3:4c:c1:ac:18:a8:72:de:a3:15:74:9c:
eb:49:e9:87:20:c1:96:f1:22:50:b2:85:80:43:27:aa:df:b0:
5a:11:68:1e:fb:56:2d:29:e2:26:13:1e:30:87:90:8f:5a:0c:
97:d4:9a:6e:1b:c0:07:2e:69:c0:9b:2f:51:c8:3b:16:53:da:
ec:8b:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net