Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/DskJ3QKfzbRX76wY5Y62eU4erR4.roa
File: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (raw, json)
Hash identifier: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=
Subject key identifier: 0E:C9:09:DD:02:9F:CD:B4:57:EF:AC:18:E5:8E:B6:79:4E:1E:AD:1E
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCDEF3901FBE0C6039636BAC4B9ECE
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/DskJ3QKfzbRX76wY5Y62eU4erR4.roa
Signing time: Thu 02 Jan 2025 07:48:36 +0000
ROA not before: Thu 02 Jan 2025 07:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 45.248.53.0/24 maxlen: 24
192.145.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:de:f3:90:1f:be:0c:60:39:63:6b:ac:4b:9e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ec909dd029fcdb457efac18e58eb6794e1ead1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:18:2f:d6:8f:bf:c3:75:f7:35:40:3e:0f:
06:eb:03:f3:f3:19:7f:2b:84:fe:40:a5:8c:35:23:
7f:90:fd:16:8d:7c:4e:d1:66:82:dd:8f:92:36:43:
21:09:b3:6d:82:95:10:8b:c0:ae:e3:4d:01:ac:c7:
12:ec:ec:dc:02:f0:e5:10:8b:9e:b0:65:69:d3:1b:
2e:df:0b:80:f9:1b:a5:69:8d:83:f5:5f:62:d8:ac:
b4:40:78:dd:11:03:01:7f:52:73:f5:6c:0c:61:28:
e3:b3:85:a1:83:51:2e:fc:07:12:1f:80:03:64:eb:
a5:0b:c0:a6:0d:c2:e4:17:9c:b9:78:6f:b7:0f:82:
8b:e1:db:f3:6f:7c:2a:aa:46:11:d4:d3:fb:6a:77:
dc:66:b6:55:12:04:19:7e:2c:5e:94:0f:22:4a:94:
42:cb:f1:90:e8:7f:e6:96:3c:11:e2:85:9e:c7:cb:
84:01:39:8d:71:66:d2:bf:7a:3a:9f:0b:b8:2a:9a:
5f:2a:1f:c3:a8:cd:57:9f:eb:91:26:ad:9e:05:dd:
37:e3:9a:96:0a:cf:e3:a8:a5:99:c1:28:ca:76:51:
24:f8:e2:f9:da:f7:ac:3d:36:fd:58:98:5e:34:66:
46:5d:88:37:0e:fa:26:88:64:73:c6:b3:89:ca:3d:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C9:09:DD:02:9F:CD:B4:57:EF:AC:18:E5:8E:B6:79:4E:1E:AD:1E
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/DskJ3QKfzbRX76wY5Y62eU4erR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.53.0/24
192.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2c:2f:6d:f8:26:bb:f5:31:65:11:20:7b:23:44:4b:21:fe:
af:93:be:d5:f1:1d:70:45:91:d5:4d:7b:c8:c5:26:ec:c5:13:
47:14:a7:bc:e7:f9:97:09:a0:5b:42:1d:6b:92:98:bc:10:88:
37:2f:42:11:c9:7f:af:87:1d:58:c7:da:e2:23:5c:51:ad:c1:
c4:8c:2a:f1:ec:47:36:7c:0f:36:ae:e5:bb:4a:69:71:27:f4:
f4:c6:a9:e9:f0:7d:59:c4:82:4c:81:07:2d:46:e4:de:19:df:
b4:11:01:01:f6:f9:e6:2d:21:76:61:4e:b4:1e:cb:6a:40:20:
d2:8c:63:57:44:1b:3c:72:51:9a:8f:63:67:0b:38:a8:c3:8a:
b6:54:45:0a:80:94:b8:27:19:23:a8:90:b4:2c:fb:2b:d4:c4:
f7:74:d5:ae:2e:e2:f1:94:e0:1a:06:b1:73:25:1a:d1:d4:bf:
ce:99:a1:0a:96:be:d2:1b:03:b8:bc:10:68:d9:59:c4:c4:6f:
7b:74:54:71:48:d9:0b:27:1a:41:31:17:62:69:e7:95:6a:a1:
f6:a6:89:75:c5:2f:27:ba:7b:5f:c2:9c:cd:bf:a7:f3:c3:1f:
d5:6b:bf:6a:23:a5:e9:ef:a9:a1:9d:b9:5a:4f:39:77:fb:58:
20:df:1a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net