Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/doDyzqqCQoqFs364AYHR_vs_9YI.roa
File: doDyzqqCQoqFs364AYHR_vs_9YI.roa (raw, json)
Hash identifier: n0tTCokEp8NBC6AkuYcyF3ZEXZVQKkGkYM93Vv520tk=
Subject key identifier: 76:80:F2:CE:AA:82:42:8A:85:B3:7E:B8:01:81:D1:FE:FB:3F:F5:82
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 019421442F8E77733157B1DE63D7BD499F88
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/doDyzqqCQoqFs364AYHR_vs_9YI.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211552
IP address blocks: 45.157.1.0/24 maxlen: 24
74.220.16.0/21 maxlen: 21
2a10:c881::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2f:8e:77:73:31:57:b1:de:63:d7:bd:49:9f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7680f2ceaa82428a85b37eb80181d1fefb3ff582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:b7:f4:75:72:66:ea:f8:57:89:3f:43:7b:
98:af:9e:a6:3f:9b:f9:5e:62:f0:ce:8e:a3:cf:04:
5a:d0:ff:a1:07:c4:ae:a4:68:19:c9:c0:4f:1b:c1:
36:f5:d5:ac:bf:2f:a8:34:06:24:b3:be:82:3e:ea:
da:ac:38:ff:c5:1f:16:7e:74:05:5c:90:6a:d3:6e:
8e:c9:e5:99:0c:8d:0e:ec:d5:cc:58:b7:3d:7b:71:
d7:ad:0d:5e:ac:1a:be:b1:cd:ba:98:fc:6e:83:c8:
42:37:a3:3e:d7:b3:c4:52:06:58:c4:dc:57:c8:d3:
0f:b4:bc:6c:c5:e1:6d:c9:6b:f2:49:5f:9a:35:7d:
2f:13:88:83:df:64:71:f2:cb:be:38:8b:09:c4:71:
a8:22:21:3f:0c:20:82:b1:20:fe:58:87:1f:3d:ed:
b8:4a:39:3b:b6:02:e4:b4:ee:ba:5f:41:e2:9f:33:
bc:ad:bf:90:e4:bd:ac:66:55:9e:cc:30:a3:06:d6:
25:82:4c:bc:9a:e0:28:b5:b3:3c:e9:ee:78:bc:af:
f4:8f:76:cd:b5:7d:3d:78:d1:08:a1:0c:a1:42:a8:
27:42:51:ae:9e:b0:1b:8d:be:0b:d5:bf:62:39:3c:
d5:48:e8:6a:db:15:63:4f:34:c8:48:ff:76:49:04:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:80:F2:CE:AA:82:42:8A:85:B3:7E:B8:01:81:D1:FE:FB:3F:F5:82
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/doDyzqqCQoqFs364AYHR_vs_9YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.1.0/24
74.220.16.0/21
IPv6:
2a10:c881::/32
Signature Algorithm: sha256WithRSAEncryption
32:3f:c8:3a:51:f0:ab:45:c7:95:0f:45:da:2c:92:6f:0d:24:
05:31:0e:3b:fd:c9:dc:ff:5b:6c:aa:8f:04:11:5d:50:f4:be:
f7:71:90:fd:78:73:0c:91:84:27:e9:31:78:5c:8e:e0:74:3a:
a6:57:6b:6e:a8:94:8d:cf:57:7a:51:0f:d6:14:1e:62:f5:4b:
b6:0d:35:3f:0f:84:5b:81:b6:9b:d9:87:cc:01:73:43:06:b4:
09:7e:85:f9:13:c0:99:77:a5:22:1e:a0:86:6a:0d:06:3f:7f:
b0:cb:83:18:16:8f:08:10:cf:ef:ee:99:7c:8e:69:e8:22:d2:
54:db:b1:d4:1f:03:b1:c2:1c:a3:3b:eb:fc:5e:17:ed:36:9d:
d8:91:a0:b4:4a:f3:7c:cb:40:d7:6f:79:f0:c2:f9:65:9f:7f:
47:cf:49:15:d2:08:fb:b3:39:93:de:44:ad:09:c7:5c:af:64:
f9:ab:37:c3:67:7b:64:21:8b:29:b3:7f:8a:cb:32:32:a6:0a:
30:06:c9:58:2d:86:f8:19:83:63:45:eb:1d:ff:1d:d4:de:bf:
91:f4:3f:9e:df:44:87:b3:09:0f:01:09:e6:c9:b1:85:b1:0e:
33:71:79:82:1d:a0:b5:ec:39:9c:57:51:38:4d:27:a5:47:41:
70:75:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net