Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/dJFzFqOy9s1TVKhhr4avdrSs9xk.roa
File: dJFzFqOy9s1TVKhhr4avdrSs9xk.roa (raw, json)
Hash identifier: 30npI85OXfYdptLmEiu0TM9ss2PSJQEChfqRrEP5IzI=
Subject key identifier: 74:91:73:16:A3:B2:F6:CD:53:54:A8:61:AF:86:AF:76:B4:AC:F7:19
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 0194236A059F5F3CEEEA0B21AAF81E143B46
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/dJFzFqOy9s1TVKhhr4avdrSs9xk.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24936
IP address blocks: 217.150.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:05:9f:5f:3c:ee:ea:0b:21:aa:f8:1e:14:3b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74917316a3b2f6cd5354a861af86af76b4acf719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:7f:f0:15:07:6d:8a:f3:c1:d5:05:d5:bd:
0c:a2:29:00:b2:bf:6f:90:f5:60:08:85:f9:31:51:
53:5e:9f:76:7d:f7:d4:43:d9:ef:6a:8e:f2:71:f9:
b7:5e:8d:47:2a:71:b2:16:26:4f:c3:02:78:0f:78:
a0:12:6c:dc:42:23:df:5b:cb:06:f6:bb:64:b4:01:
a1:0d:c2:fd:30:b6:0a:9d:0d:ab:14:24:a0:e4:56:
1b:dd:be:07:06:75:14:e6:4b:eb:a3:62:b2:ec:0f:
a3:b0:35:39:46:b5:59:23:b8:56:b5:b5:80:27:90:
6d:59:d1:ba:05:e7:09:c6:8d:f2:04:77:2e:7c:38:
35:3d:a8:95:39:c3:a7:6a:cb:6c:b6:f1:12:02:95:
0f:3f:25:d4:37:e4:f2:87:e9:73:14:a9:d0:59:0f:
57:de:30:25:56:d1:34:ca:60:bf:18:82:81:7d:7a:
b7:a1:ac:ce:62:cd:a1:d5:74:bc:ed:ad:fb:63:ba:
c7:2a:e2:86:b3:0f:fe:a0:f3:8a:d5:e2:62:c7:4b:
4e:10:0f:2c:da:c9:05:96:7d:70:4a:80:06:a3:0b:
00:6d:22:98:48:e8:b7:88:28:c4:14:42:d7:38:f9:
60:2a:41:14:f4:0b:ca:fa:41:3e:d8:2a:a1:34:8d:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:73:16:A3:B2:F6:CD:53:54:A8:61:AF:86:AF:76:B4:AC:F7:19
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/dJFzFqOy9s1TVKhhr4avdrSs9xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a6:73:bd:b0:20:56:40:6e:29:93:9e:e7:af:9c:54:b7:1b:
fb:71:6f:2f:ad:e2:60:8b:ef:cd:50:a8:58:71:a0:01:b2:44:
d0:c9:ea:ce:b3:6e:cf:9d:9e:72:26:69:18:b4:6b:cb:a3:2e:
d2:79:fe:5c:ae:f3:b3:cd:43:c7:45:c0:46:f8:06:79:29:d9:
70:f1:b7:48:ee:4f:d8:bb:b9:4a:65:b0:84:f2:ab:b9:90:0d:
14:00:c7:18:f4:ef:a6:74:4e:23:02:6f:58:97:29:b3:2e:38:
b0:d2:81:e2:4d:9c:8a:3d:17:95:14:d1:93:d7:fd:f2:2b:f9:
10:8e:18:fb:ba:3c:1c:74:c1:88:75:b3:f0:a8:93:3a:d5:13:
02:1f:e2:5f:b4:ea:83:bf:39:28:f6:5d:9f:c1:c0:69:7c:c7:
7a:03:a9:9d:29:93:21:a4:97:03:cf:c2:4a:07:a2:03:9e:1d:
f1:02:78:80:2d:c3:b2:e0:ec:cb:c6:55:ab:83:86:2a:dd:d9:
12:6d:1f:44:16:aa:33:51:62:3a:09:56:6a:ac:3f:35:e6:e3:
2f:21:75:a8:53:1d:a9:1f:fb:0d:5d:0a:3b:7f:ed:da:94:20:
dd:4e:d3:d8:57:1e:65:aa:04:a5:3e:4a:0c:39:34:43:72:85:
08:1a:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net