Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/_LxyVkgbKLMaCoKf-wa-gjXEY9g.roa
File: _LxyVkgbKLMaCoKf-wa-gjXEY9g.roa (raw, json)
Hash identifier: Tt/J7UaLJpGwa3pTn7jEj8mr5nT4j+av9OQ17W7ixzc=
Subject key identifier: FC:BC:72:56:48:1B:28:B3:1A:0A:82:9F:FB:06:BE:82:35:C4:63:D8
Certificate issuer: /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial: 019425215CFDD8635F077A6137F3A38621D9
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/_LxyVkgbKLMaCoKf-wa-gjXEY9g.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 161.3.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5c:fd:d8:63:5f:07:7a:61:37:f3:a3:86:21:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcbc7256481b28b31a0a829ffb06be8235c463d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:92:eb:41:df:a2:ba:d6:aa:b1:2d:06:48:
35:89:0c:4c:14:54:8e:50:76:33:80:9c:05:f5:e5:
96:40:61:00:81:f2:92:52:5c:16:4e:05:46:12:bc:
03:9d:98:a9:2c:9c:59:a3:3d:71:67:90:2c:d4:88:
bf:30:bd:47:f1:ad:3f:b5:b7:47:00:af:6c:77:cb:
f1:ea:3f:78:4b:65:55:5c:ab:2c:d3:2a:6e:fe:90:
eb:4d:96:f3:e5:10:56:9f:56:04:88:e5:3f:43:66:
39:80:a9:e1:d9:ec:58:3d:26:7a:e9:80:0a:6d:28:
2f:5e:fe:39:ca:47:4e:66:33:47:b5:e4:b0:a3:2f:
10:0c:f5:60:19:bc:43:e6:d1:46:0c:7b:30:66:4d:
2f:4a:fa:8f:99:80:90:50:48:3c:58:7a:ec:70:e2:
cf:39:32:2a:b8:e4:a3:75:70:0d:9d:3a:02:03:a0:
40:f2:f1:82:0c:e1:a7:3b:f0:96:27:62:e5:6c:61:
38:f5:f5:29:b8:17:db:8e:ab:22:cd:b5:b5:9c:29:
f1:62:11:36:ae:b6:c0:37:9c:af:76:02:99:64:17:
26:f7:3c:8e:7c:0b:85:96:03:ec:dc:84:ad:1a:20:
a8:a4:51:a5:a1:8b:3f:a6:6f:ab:16:d8:88:66:1a:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BC:72:56:48:1B:28:B3:1A:0A:82:9F:FB:06:BE:82:35:C4:63:D8
X509v3 Authority Key Identifier:
keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/_LxyVkgbKLMaCoKf-wa-gjXEY9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:39:69:0c:d4:3b:45:73:31:24:98:5f:ef:7f:37:2e:54:c7:
74:e2:f2:25:81:e8:92:0e:93:ff:5b:28:d1:95:65:6c:9e:b3:
42:15:46:9c:c6:c9:65:f1:f2:22:be:39:0c:4b:47:d7:08:5f:
f7:f5:d3:0b:fe:61:e5:90:06:60:ea:bd:f1:25:e3:14:f0:32:
22:0a:64:b0:2f:4d:78:bd:44:c0:ea:23:d8:98:6d:43:1e:76:
86:cf:ad:2e:52:d8:9a:6e:da:73:64:17:69:bf:fd:fa:5b:41:
03:8f:57:d6:70:c9:90:da:2d:77:99:a6:23:97:1f:79:4f:2d:
4a:00:62:eb:c5:a2:c3:cd:af:c8:d2:69:1e:f3:45:6c:29:f6:
f2:2f:81:e7:f1:36:4a:6e:3e:55:f2:fc:ac:2a:15:36:83:8d:
b7:19:c4:01:38:90:14:c8:32:2b:e3:73:2a:c7:9d:24:f9:bc:
57:f8:f7:95:a6:ce:31:2e:c0:67:8d:68:08:03:3a:95:c3:fd:
e2:1e:84:c1:ff:ce:97:88:5a:98:c5:dc:38:22:d3:27:5b:73:
d8:58:e2:1a:e2:50:5b:04:d4:d9:73:78:a8:c9:c3:f6:50:54:
bc:20:87:a4:69:8d:bb:eb:e7:39:17:01:2c:19:55:86:a9:7c:
54:88:8c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:10 2025 by rpki-client on console.sobornost.net