Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/zlP9_orrw6aHHSv7bATBUkhqiRA.roa
File: zlP9_orrw6aHHSv7bATBUkhqiRA.roa (raw, json)
Hash identifier: NvMCHUJ14Lp9H+mYdu1xuY40BR4qWMQHtDYR2W3Odek=
Subject key identifier: CE:53:FD:FE:8A:EB:C3:A6:87:1D:2B:FB:6C:04:C1:52:48:6A:89:10
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 01955D04070B91B7489ED9C11036B64BD8EA
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/zlP9_orrw6aHHSv7bATBUkhqiRA.roa
Signing time: Mon 03 Mar 2025 17:18:19 +0000
ROA not before: Mon 03 Mar 2025 17:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2876
IP address blocks: 195.245.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:04:07:0b:91:b7:48:9e:d9:c1:10:36:b6:4b:d8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Mar 3 17:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce53fdfe8aebc3a6871d2bfb6c04c152486a8910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:f8:7a:8f:b7:8a:db:92:62:8e:74:8b:fc:
7a:c6:5c:12:3a:c5:3c:12:8f:52:b8:f0:0f:98:aa:
66:92:bb:1f:2c:d6:3c:4c:eb:38:01:9f:75:cd:09:
a8:e7:c1:1a:00:7b:2d:79:1c:69:ad:de:72:43:1f:
99:cc:b2:59:43:d4:69:02:cb:2c:a6:fe:d3:c7:87:
c8:68:f8:65:e1:cf:0d:7b:99:70:bd:b5:0a:d8:bf:
20:fa:8a:ba:cd:e0:49:39:bf:bb:13:6f:b3:a8:03:
e5:7a:d4:c5:33:f0:27:97:3a:d4:e6:c3:85:df:5a:
9e:26:d7:7a:65:e7:86:94:12:f5:56:2c:9f:0f:5a:
56:3d:ac:43:de:f5:01:0b:b1:56:ca:bd:dc:66:f1:
98:ae:83:1f:de:c7:30:d0:b6:94:aa:d1:77:6e:84:
17:4f:5d:ee:40:da:de:47:d6:b3:86:e2:38:8b:6b:
89:2f:67:a7:54:51:dd:a3:d8:b2:fd:62:55:8f:b1:
25:75:88:39:fa:dc:fa:d2:78:3f:20:eb:b4:c4:9b:
a4:da:2b:1f:ca:29:28:df:e1:24:7f:50:4e:67:2e:
07:86:1a:41:9d:46:1d:79:45:b9:b4:76:b9:9b:27:
28:af:c9:11:95:fe:59:74:27:77:0e:99:af:32:fc:
7c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:FD:FE:8A:EB:C3:A6:87:1D:2B:FB:6C:04:C1:52:48:6A:89:10
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/zlP9_orrw6aHHSv7bATBUkhqiRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.83.0/24
Signature Algorithm: sha256WithRSAEncryption
04:35:b1:c2:9d:ba:1f:ca:99:5e:63:6a:99:9c:c5:b8:0d:6d:
e7:2f:32:c7:8b:fa:75:37:70:92:d8:c1:f3:6e:ef:f6:71:5b:
1e:aa:f7:0e:71:88:b1:4b:7b:87:7b:9f:1e:57:66:a0:2c:60:
15:92:be:31:35:d2:d3:5d:a0:89:a1:2b:a8:de:a6:5a:86:21:
cb:6a:82:69:9a:bc:02:a0:d5:05:da:cc:53:79:10:8b:ca:8d:
b3:c8:b8:bc:9c:24:06:9e:d3:75:d4:9b:a2:67:a8:44:9d:48:
d7:4e:d4:b1:11:f5:f9:a6:0d:6e:0b:b4:3b:40:90:ea:6b:35:
62:3c:9e:0b:36:f2:1a:45:06:e5:19:4a:f1:c5:21:cf:f4:22:
43:35:8a:9b:73:c6:0f:d7:d2:7c:cf:a7:0c:0c:5a:a4:d7:ef:
9b:a6:7c:1e:24:8d:42:18:66:51:9f:06:c9:a9:24:77:5f:b4:
99:eb:07:54:9d:7d:ed:69:d9:ae:f7:6b:50:9d:c3:f1:8a:e4:
9d:20:3b:c5:ed:6d:63:5d:cd:aa:8d:ab:00:15:e6:0b:a6:98:
59:a9:2a:ab:53:49:91:d7:b3:7d:8c:2d:e8:d7:fd:5d:d1:22:
69:29:e5:cd:2c:35:36:5e:1b:63:14:6a:34:f0:46:8b:41:6c:
da:45:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net