Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/CZnlkiY3og8rtBoo7Koc6sXsHTo.roa
File: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (raw, json)
Hash identifier: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=
Subject key identifier: 09:99:E5:92:26:37:A2:0F:2B:B4:1A:28:EC:AA:1C:EA:C5:EC:1D:3A
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 0194206872E39A9860AB68CBE983774EC229
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/CZnlkiY3og8rtBoo7Koc6sXsHTo.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202275
IP address blocks: 176.113.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:72:e3:9a:98:60:ab:68:cb:e9:83:77:4e:c2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0999e5922637a20f2bb41a28ecaa1ceac5ec1d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:ac:4c:10:d9:7f:c4:a5:96:56:4b:74:36:
14:3a:fa:e8:62:6a:17:7e:7e:25:5a:9e:6d:cd:57:
8c:33:06:52:2b:c5:66:a6:f7:22:22:df:36:75:99:
71:1f:84:8d:73:19:44:ae:db:b2:13:7d:d2:27:ac:
b6:58:ef:95:72:e4:8a:03:fe:ca:12:61:97:58:e6:
9b:80:56:9e:08:99:ee:2f:e1:95:04:21:01:06:a5:
6c:7c:35:fa:71:89:0a:cf:a3:69:58:c9:69:8b:69:
9c:80:72:3f:b0:1a:97:f9:99:e5:e0:f5:7c:c5:86:
c8:f1:ea:c9:af:cc:e0:0b:16:a0:ef:77:7d:1f:85:
3d:fc:87:32:81:80:2f:b3:df:4e:97:bc:44:77:69:
a5:7f:14:a9:ed:f1:02:eb:77:c6:b0:5b:48:d6:bd:
59:bb:30:7e:66:4e:39:19:12:5b:9f:12:1c:6f:b9:
0b:a8:03:08:8a:30:60:40:3a:28:33:2f:3a:1a:4f:
84:5c:56:6e:29:fa:4c:81:6c:e9:76:cc:66:6f:47:
e1:f1:9f:c1:f5:0c:01:37:6c:06:58:c2:82:43:fc:
7f:83:f7:5e:b2:44:65:4e:d3:64:1e:55:a1:50:53:
b8:cc:3b:3c:37:17:71:dc:fa:56:a7:9f:b6:e9:91:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:E5:92:26:37:A2:0F:2B:B4:1A:28:EC:AA:1C:EA:C5:EC:1D:3A
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/CZnlkiY3og8rtBoo7Koc6sXsHTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.94.0/24
Signature Algorithm: sha256WithRSAEncryption
70:7f:15:96:cd:b9:70:68:9e:e5:14:1a:13:a4:27:d3:3d:43:
2a:ed:94:cd:a4:d3:d5:4c:24:a5:97:c6:f9:01:d2:6f:6f:17:
14:a5:a8:5f:3e:8b:39:6b:43:58:d3:c7:05:9d:56:ac:4c:0a:
02:d4:89:6f:ec:6a:74:28:2b:b1:e8:84:f9:23:ed:9e:b8:86:
50:de:bc:59:c4:f5:9b:19:c1:d7:58:63:3b:0b:61:33:44:ba:
e2:cf:35:c6:5e:fb:20:9b:3c:d2:78:59:af:ed:e5:1b:06:3d:
aa:02:e8:84:fe:bb:70:77:f7:39:f0:cf:7e:18:04:49:b7:ce:
17:f4:b7:69:b1:25:f8:64:e0:ca:79:d2:6f:06:01:d3:3b:d2:
8d:01:34:0d:5d:e3:6b:36:a8:0f:1c:6b:2f:1f:94:02:bf:86:
f1:a4:0e:18:7e:6c:2a:02:1c:a4:95:91:68:04:82:9a:4f:d0:
8e:d7:41:a3:ca:91:42:2e:74:b7:37:03:4e:28:4b:02:e3:74:
1b:67:4f:cb:12:41:ff:90:3f:d1:44:5c:eb:f6:ff:cf:07:cd:
76:14:7a:70:f0:83:e6:4a:44:fb:0f:dd:dc:ed:5e:a5:19:71:
46:19:12:05:de:f4:ba:7f:a2:59:45:14:70:42:2c:53:02:f2:
a9:97:16:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net