Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/DKOXi_z4MSZddtY43K_RvFdLWrA.roa
File: DKOXi_z4MSZddtY43K_RvFdLWrA.roa (raw, json)
Hash identifier: YzkvxZCaiCcQ2o8QHaxCeoWLOl0t5AZ3W6UkEeHutAk=
Subject key identifier: 0C:A3:97:8B:FC:F8:31:26:5D:76:D6:38:DC:AF:D1:BC:57:4B:5A:B0
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 019426D919AFB348FE3ADAA2929EE86BCF6D
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/DKOXi_z4MSZddtY43K_RvFdLWrA.roa
Signing time: Thu 02 Jan 2025 11:49:09 +0000
ROA not before: Thu 02 Jan 2025 11:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21221
IP address blocks: 45.135.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:19:af:b3:48:fe:3a:da:a2:92:9e:e8:6b:cf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Jan 2 11:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ca3978bfcf831265d76d638dcafd1bc574b5ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:0b:9e:15:72:73:71:57:08:e2:f4:bc:87:
e0:6e:34:9d:42:d8:81:28:64:0e:97:a8:7f:e2:10:
66:45:7d:90:42:24:d4:09:44:07:f6:60:fc:3b:3e:
a3:df:dc:31:29:6d:15:f0:1e:e0:62:8c:aa:10:c0:
57:ab:f0:5e:c9:8c:12:67:a5:a5:47:a2:aa:e8:d3:
05:39:1e:99:d5:9e:ee:96:83:4a:c2:d8:e1:c1:14:
63:b9:4d:ad:79:33:af:0e:1e:13:97:21:a4:4c:74:
19:d7:1e:d5:66:aa:45:a8:3a:ef:90:01:ee:fe:ef:
cc:80:c3:56:8a:3a:1e:db:84:95:ec:8c:5c:4d:be:
50:ef:2f:36:81:bd:7d:ee:f9:ab:1a:00:af:7c:e4:
a0:9e:87:f7:1d:f0:ae:d1:2a:cf:64:a3:4d:80:f5:
94:c6:dd:06:d6:1d:51:35:90:43:f9:17:f3:24:e8:
fe:0e:97:b8:26:1d:4a:79:ea:26:ce:0c:d6:07:22:
6d:69:2b:4a:95:0e:4a:12:00:73:d1:a9:6c:d1:4e:
d8:21:6e:bf:9b:21:e5:09:dc:cb:cb:c6:5d:cb:04:
7b:2f:e9:61:69:a3:58:5b:6d:75:bf:57:7e:ea:34:
1b:70:d4:4d:0b:e9:13:aa:d2:cd:3c:33:4e:c2:6e:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A3:97:8B:FC:F8:31:26:5D:76:D6:38:DC:AF:D1:BC:57:4B:5A:B0
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/DKOXi_z4MSZddtY43K_RvFdLWrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.210.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9d:b7:26:88:81:17:af:94:dc:e4:32:dc:6f:31:e4:f2:d4:
6b:5f:00:f9:ec:3a:6e:e5:59:35:bd:ff:ce:e8:a8:79:72:61:
99:87:a0:0d:04:8a:a3:a3:fe:a2:91:be:b5:29:de:66:3c:16:
a4:df:94:c3:e4:fa:2c:10:48:71:65:9e:07:32:98:0d:10:9f:
5b:9f:22:2d:f9:4f:a5:2f:20:4b:87:98:28:74:d3:18:6d:d3:
81:b0:11:4c:75:12:e9:04:29:b0:46:77:98:f5:2f:0b:1f:a7:
b8:ff:e9:d0:3a:0a:d1:20:ab:18:47:d9:8f:00:4a:b1:af:e3:
dd:5f:cb:b9:40:5f:29:37:97:d1:f6:74:07:fa:fc:65:45:0c:
a7:4c:e0:d0:9f:be:d7:88:c9:e0:99:4d:81:a0:da:8d:b6:94:
db:29:a2:18:5f:7d:ab:9b:5b:19:79:b4:7d:80:7d:b2:a3:2f:
76:a6:d0:95:fd:84:e1:7f:e7:3e:da:57:4d:af:ee:37:0c:50:
af:c7:00:7f:47:95:b3:7b:33:06:23:c1:0a:f0:1f:27:ae:5e:
4f:d2:fc:f5:a7:79:e3:c7:d0:76:45:7d:45:8f:03:1e:b9:b6:
be:e9:18:00:14:0a:71:77:b9:16:68:01:0e:ca:0e:66:a1:db:
cd:44:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net