Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/_XoxeAXZ_0NOSgriyXyYImr8sp4.roa
File: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (raw, json)
Hash identifier: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=
Subject key identifier: FD:7A:31:78:05:D9:FF:43:4E:4A:0A:E2:C9:7C:98:22:6A:FC:B2:9E
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 01942748574529DCFE2C2BD01D4F6C1D2BE0
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/_XoxeAXZ_0NOSgriyXyYImr8sp4.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199821
IP address blocks: 45.154.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:57:45:29:dc:fe:2c:2b:d0:1d:4f:6c:1d:2b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd7a317805d9ff434e4a0ae2c97c98226afcb29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:9b:05:b0:e7:db:bb:c4:77:d2:9e:7b:0e:
f1:42:2f:47:a3:83:e7:76:c1:44:22:bc:b0:ea:3f:
a9:c5:2d:15:e8:e7:60:84:fc:ff:28:13:c7:7b:90:
2a:0c:c2:c4:08:60:7f:79:48:8b:62:0d:4f:77:20:
d1:75:8b:66:94:28:06:cb:ec:db:7f:34:e9:16:29:
e5:dd:dc:65:09:70:99:8f:03:82:23:e4:94:94:f3:
e4:1e:e6:a3:69:26:e5:b0:0b:b6:bd:d1:c5:4f:3f:
0c:35:15:45:b4:a3:38:91:8c:b6:fc:b6:1e:f9:fb:
58:ce:3b:5a:c5:c5:6b:a6:33:89:92:ea:ca:f9:14:
d6:35:d0:bd:48:ed:ca:aa:85:b8:6e:76:08:66:77:
2b:80:84:76:d9:9f:0a:23:ea:b4:6f:1e:58:f9:00:
f8:6a:f3:bd:68:d6:8d:3e:e8:e5:f2:03:d3:09:46:
d0:61:90:f7:90:ae:cb:0b:53:5a:4d:2b:25:76:16:
06:49:68:39:97:d8:f8:75:67:44:e4:af:30:5f:dd:
e2:bc:24:52:cf:8e:4d:d0:8e:b3:0d:69:bf:53:0c:
ce:47:25:61:cf:5b:7e:fc:b9:17:30:8e:c7:a2:6b:
d9:4e:94:e1:d4:8c:27:48:83:9d:b7:3c:bf:48:58:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7A:31:78:05:D9:FF:43:4E:4A:0A:E2:C9:7C:98:22:6A:FC:B2:9E
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/_XoxeAXZ_0NOSgriyXyYImr8sp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.234.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:29:fb:f5:8b:d9:a7:5c:7b:14:5e:4d:6e:45:7c:ea:a0:73:
87:c4:66:3a:5e:e7:c6:bc:0f:90:88:87:f1:44:cd:fa:79:14:
63:6c:a8:b2:f6:75:a5:a8:9e:db:75:eb:c7:a8:13:3a:41:8c:
db:c1:95:8a:29:19:c6:e9:aa:55:dc:c8:d9:97:f6:f6:f5:37:
7e:dd:e9:b2:14:93:f4:49:af:75:3e:ba:58:3e:06:95:7b:71:
16:dc:6c:95:ee:5e:06:25:c5:3f:1a:b7:27:65:f1:1e:e9:b2:
cf:d0:ea:a2:7b:69:21:aa:ce:65:c4:61:9a:62:ad:e9:6d:b6:
ba:9b:a5:08:ef:a6:2d:fe:08:75:27:3a:92:54:bf:8e:88:39:
02:f9:d7:b2:b0:26:0f:ca:90:e4:e9:25:f9:d2:20:14:3a:0d:
32:9d:38:21:00:62:f6:b2:41:96:d6:48:e1:e2:e6:52:f7:47:
a1:a8:1b:c6:64:b7:7b:f5:1b:1d:d5:19:6f:d5:4b:0f:78:62:
e3:88:6d:ad:b9:7b:fb:f7:c6:fd:d0:e5:8e:da:58:51:53:6e:
13:ba:04:d6:73:94:2e:b3:bb:47:cc:7a:8f:cd:6c:b3:3b:60:
e9:b1:f3:aa:75:c6:2f:1f:d3:a0:2a:50:61:da:db:c4:6f:17:
22:e0:65:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net