Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/zkP1QU3MF0GoTFmSaWvEQsODbsE.roa
File: zkP1QU3MF0GoTFmSaWvEQsODbsE.roa (raw, json)
Hash identifier: qo/m2b8+nCxd1dPgymjA/2fWlVcNJMND2bMF+AfYiPA=
Subject key identifier: CE:43:F5:41:4D:CC:17:41:A8:4C:59:92:69:6B:C4:42:C3:83:6E:C1
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 01942823E37220E5547362F4D695B457A0AF
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/zkP1QU3MF0GoTFmSaWvEQsODbsE.roa
Signing time: Thu 02 Jan 2025 17:50:28 +0000
ROA not before: Thu 02 Jan 2025 17:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212307
IP address blocks: 147.234.104.0/24 maxlen: 24
147.234.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:e3:72:20:e5:54:73:62:f4:d6:95:b4:57:a0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Jan 2 17:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce43f5414dcc1741a84c5992696bc442c3836ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:fd:7d:89:ed:19:9f:be:73:e9:16:8c:38:
82:94:3e:69:39:0a:99:cc:3a:89:1d:5f:4f:40:ab:
19:0f:f1:9b:de:92:86:db:1c:55:b1:2e:93:f6:6e:
5a:da:fe:96:69:25:d3:de:bc:3d:cd:93:d8:fa:e5:
e6:5c:6c:da:dd:e7:28:c9:17:fe:d9:96:34:9e:a6:
2b:85:f5:5a:2f:f8:d5:6d:fb:a5:11:4d:55:7b:b4:
bb:7a:e6:2e:d7:2d:dd:aa:f5:cd:49:28:7a:3c:cc:
2b:aa:99:8e:95:0e:cf:48:c2:9b:97:79:47:7e:62:
1c:6a:6e:a2:d7:1c:e2:b6:87:1d:99:2a:2f:56:99:
bc:31:c9:03:62:73:ae:21:42:d6:4b:a0:16:59:84:
34:53:ce:9b:7d:60:e0:62:3c:e4:e4:88:53:95:02:
d6:30:77:89:5f:4c:29:7e:66:cf:84:7f:35:50:22:
5d:af:93:e8:7b:dd:04:43:82:4f:4e:08:8d:ae:08:
ba:a7:aa:a4:29:74:3c:43:df:3c:d1:c8:cb:69:ad:
de:3a:06:74:9a:93:7d:6f:27:b0:31:3c:d0:cd:37:
eb:57:db:ed:91:78:10:c7:5f:52:f9:19:2e:da:6e:
c1:a1:24:a6:79:71:4c:de:07:64:4b:51:9f:f5:d5:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:43:F5:41:4D:CC:17:41:A8:4C:59:92:69:6B:C4:42:C3:83:6E:C1
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/zkP1QU3MF0GoTFmSaWvEQsODbsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.104.0/23
Signature Algorithm: sha256WithRSAEncryption
52:6d:d5:6d:cc:6f:66:2f:c6:db:45:fb:54:f3:da:03:3f:0b:
92:51:91:2f:ee:c5:c5:d1:c5:c1:f6:df:ac:f0:5b:c9:b2:45:
1a:8b:c5:29:8b:61:3f:b2:32:7c:b0:88:28:3f:9f:85:fe:01:
47:d7:bd:f8:d6:76:3d:e1:07:ad:f3:ba:02:84:74:04:9d:a3:
ca:e8:a6:71:d7:c3:0d:54:06:fb:80:5a:ad:a3:a8:6d:f5:e6:
97:90:4a:72:d8:e3:0a:f9:42:be:95:58:e8:4d:e6:29:6c:d8:
45:e1:90:31:fa:dd:9b:47:45:83:36:8b:df:f7:e4:75:d8:7a:
61:68:50:4d:ed:bf:75:49:f2:12:5d:f4:91:1b:12:90:16:0e:
56:b6:56:69:91:5a:0d:08:b0:ac:fe:e4:ce:d3:69:45:38:4f:
60:9f:11:77:2d:bd:46:19:af:94:50:22:cd:c0:c5:fc:3e:45:
7d:01:ec:5d:b6:ff:af:23:c6:82:a4:41:9d:20:49:59:d2:f2:
2b:57:f9:0e:ac:ea:e5:47:30:94:a0:5e:a8:15:89:6e:6c:fa:
a9:21:d4:31:d4:64:78:37:5f:30:55:43:33:ef:7f:be:b1:72:
2c:8b:43:f5:ad:b9:ed:b8:ca:07:cf:76:8d:8c:37:a7:e0:44:
ee:05:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net