Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dkGefv9AxXZWFCJfDQswJW4gvUA.roa
File: dkGefv9AxXZWFCJfDQswJW4gvUA.roa (raw, json)
Hash identifier: FeJ4qj2PJ+JShL31shVn5wKiMiFJzC5nPYRCwB4L5QQ=
Subject key identifier: 76:41:9E:7E:FF:40:C5:76:56:14:22:5F:0D:0B:30:25:6E:20:BD:40
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196198693FB61DBCC68F70B19633DB553FD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dkGefv9AxXZWFCJfDQswJW4gvUA.roa
Signing time: Wed 09 Apr 2025 07:49:32 +0000
ROA not before: Wed 09 Apr 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 45.151.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:86:93:fb:61:db:cc:68:f7:0b:19:63:3d:b5:53:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 9 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76419e7eff40c5765614225f0d0b30256e20bd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:07:d3:8e:76:c2:8f:ed:f2:cc:93:a0:40:
e3:67:ca:03:ae:8d:21:19:52:b2:21:c3:3a:2c:8a:
d2:f5:d8:fd:d3:b7:ab:9a:a9:fb:b5:14:00:e9:1a:
37:07:37:04:09:3b:62:4e:5d:04:58:08:d5:bc:60:
17:b5:65:d2:84:8f:a3:de:5f:85:d8:d8:a5:8b:0d:
28:c4:b4:d5:8e:e0:84:bb:e2:d8:ae:0c:03:08:d5:
11:ee:b3:6a:99:89:4d:22:5e:5c:84:9a:8e:fe:0c:
43:10:b3:9f:e9:7c:1e:3f:ad:18:46:89:09:7e:bf:
88:40:52:8c:72:a6:7f:a5:25:30:69:16:ed:da:45:
48:0f:f7:a1:9b:c1:95:72:f8:eb:68:3e:3e:ce:a2:
03:40:13:99:6d:d9:2e:49:00:7f:a2:ba:00:e5:5c:
36:b3:67:91:5d:4b:10:d7:99:87:81:1f:04:57:cc:
06:c3:7e:86:66:f7:57:7c:b8:be:db:f1:f9:58:46:
a0:a2:b4:9a:60:f8:37:f0:69:fe:de:cb:a2:d8:e4:
9a:a9:02:5b:7d:16:4b:47:b7:25:22:f8:14:68:ce:
c8:3a:3e:ff:7c:a8:c7:cd:3e:95:4f:95:29:e9:d1:
09:d1:71:e7:f7:32:f9:1f:50:f8:33:c6:e4:d6:7f:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:41:9E:7E:FF:40:C5:76:56:14:22:5F:0D:0B:30:25:6E:20:BD:40
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dkGefv9AxXZWFCJfDQswJW4gvUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7b:27:6b:e1:11:92:d1:5c:57:fc:ba:5a:e8:e0:bd:6f:bb:
46:6a:0f:69:f8:b6:06:fd:fe:e3:9d:14:bc:90:78:aa:35:22:
17:c2:bc:33:33:bd:05:3d:88:fc:2b:12:1e:1e:0c:b6:72:ef:
89:f0:61:b4:2b:78:8e:39:ac:b8:95:74:b7:2f:5f:70:6f:78:
8c:10:90:3e:59:32:e7:01:53:29:1f:f6:5f:24:64:49:7b:38:
68:8d:97:0b:59:29:bb:7e:da:45:06:0e:cc:13:0e:07:67:68:
22:47:30:e1:07:29:30:3a:21:0c:3b:13:9c:a0:f3:46:1a:c3:
cb:d2:ad:f2:a7:34:37:a0:aa:1f:9a:57:84:90:b2:ff:7f:5d:
bb:fc:78:33:b4:e5:37:44:99:07:3f:fc:1b:0d:c7:83:be:b0:
3d:92:34:7e:63:c9:32:dc:c5:09:44:ae:24:70:66:f5:f3:d4:
61:17:97:b1:a4:ae:44:9f:c1:cd:d8:3d:a1:ff:d2:f5:44:e7:
fa:6c:4a:4b:03:fd:32:8d:79:23:99:d6:ca:71:29:0a:1e:ed:
d3:6f:58:29:9a:b4:35:36:87:83:53:0c:82:e5:49:d0:bf:e8:
10:03:e8:bc:aa:1b:fe:54:f8:0c:29:7e:11:41:35:3b:ec:93:
19:43:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net