Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/f58ObcgtJHOBGZhyI-Tu7tFeE8o.roa
File: f58ObcgtJHOBGZhyI-Tu7tFeE8o.roa (raw, json)
Hash identifier: FxO4DweWCOIPB9mQc3GR25F1u/3RK3Tq2tncBbdEevE=
Subject key identifier: 7F:9F:0E:6D:C8:2D:24:73:81:19:98:72:23:E4:EE:EE:D1:5E:13:CA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019612270799B645C19D973795C946075EC4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/f58ObcgtJHOBGZhyI-Tu7tFeE8o.roa
Signing time: Mon 07 Apr 2025 21:27:49 +0000
ROA not before: Mon 07 Apr 2025 21:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214000
IP address blocks: 45.9.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:27:07:99:b6:45:c1:9d:97:37:95:c9:46:07:5e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 7 21:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f9f0e6dc82d24738119987223e4eeeed15e13ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:80:d6:91:20:c4:bd:37:2c:d4:5f:95:da:
0b:98:95:96:0b:e1:1b:d4:b9:f4:c6:8f:64:c5:7d:
c9:a4:08:ae:ce:31:e2:f1:bc:88:f3:84:b7:da:63:
e8:86:dc:2b:78:af:ac:49:c7:bf:30:e1:1b:11:92:
0f:d0:e1:92:38:b4:40:2a:41:1c:24:e5:e9:5a:6d:
a6:ff:13:04:fc:2f:e6:10:63:c4:2c:07:ff:cf:cf:
4f:e7:b3:78:ea:e6:02:de:ee:76:ce:2e:88:7f:20:
18:5d:32:79:21:61:ea:3e:1e:4e:cb:82:13:8a:36:
46:c1:97:1e:b8:60:1f:da:a2:be:cd:b9:9f:b7:43:
72:a9:2c:c9:72:41:84:c5:b1:43:15:04:10:d3:da:
4f:0f:c4:72:a5:77:1b:42:08:94:83:b8:00:cb:ea:
95:51:7e:6a:e7:bb:f9:9c:7e:bf:71:97:c9:9b:c0:
d8:c9:2a:08:a1:25:9e:67:15:b8:52:e4:51:b1:e5:
9f:de:1a:79:1d:8d:ca:dd:31:0f:a1:20:29:ff:2f:
e1:a6:6a:99:dd:d3:17:70:5c:2f:09:6e:42:73:1f:
a7:1c:8c:cb:e7:6f:8e:ed:b1:5c:c5:c1:ca:dc:f3:
14:11:c2:ee:44:23:a3:0c:c5:5b:f5:da:20:a0:a2:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9F:0E:6D:C8:2D:24:73:81:19:98:72:23:E4:EE:EE:D1:5E:13:CA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/f58ObcgtJHOBGZhyI-Tu7tFeE8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3d:bd:9e:9a:02:fe:ca:e2:95:fd:b9:38:20:57:17:5c:31:
19:75:5e:6e:85:6d:1e:1a:86:35:18:d8:ec:a6:c5:0a:82:a3:
e4:b2:30:bd:77:d3:41:2d:9f:35:5d:ce:36:b6:63:57:20:de:
8f:c4:4f:ad:99:a4:44:27:44:34:b4:19:67:e5:a5:60:e6:f4:
ef:6d:8b:4a:b9:d3:16:9f:cf:13:b2:1a:5a:00:3e:ab:7a:2c:
cc:04:10:cb:ae:bb:61:eb:82:dc:92:a4:a0:12:d4:d7:d2:64:
b1:2d:ce:ec:d5:56:30:71:c0:bc:f3:ec:c3:0c:d3:e9:d7:9c:
1f:68:ee:23:38:56:3c:df:11:c0:f4:1b:0f:e1:e1:b1:bd:61:
d3:df:e5:68:04:e0:e3:4a:7c:f4:e3:3d:4e:f1:f3:13:ed:fe:
e4:2c:25:b3:e2:0e:e8:52:3e:57:31:cd:85:8d:b7:44:39:ef:
49:3a:ec:5b:b4:55:57:10:3f:dd:7d:a1:f9:57:e4:1f:08:fb:
9d:de:8f:01:5b:a2:9d:0e:64:be:5b:ef:2c:9d:a3:cc:1a:97:
fa:6a:fc:0f:9a:39:6f:20:ac:f7:d2:bb:25:b8:ff:94:6c:db:
a9:23:f5:70:cd:a4:b0:88:2c:63:82:91:d0:7a:63:4c:9a:5a:
6e:84:f1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:40 2025 by rpki-client on console.sobornost.net