Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PLHlOEI8OTEsrWEb9gcEoJkppTI.roa
File: PLHlOEI8OTEsrWEb9gcEoJkppTI.roa (raw, json)
Hash identifier: HqryYXEFzx4Aim3Zpzxpc+c6ErO0nPq1Js+lyJLuXYs=
Subject key identifier: 3C:B1:E5:38:42:3C:39:31:2C:AD:61:1B:F6:07:04:A0:99:29:A5:32
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01943FB429058BC85EE790783CE738B3C0CE
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PLHlOEI8OTEsrWEb9gcEoJkppTI.roa
Signing time: Tue 07 Jan 2025 07:39:19 +0000
ROA not before: Tue 07 Jan 2025 07:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:b4:29:05:8b:c8:5e:e7:90:78:3c:e7:38:b3:c0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 7 07:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cb1e538423c39312cad611bf60704a09929a532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:1b:10:8d:0e:c7:4b:d7:f6:b8:6b:c7:c1:
67:48:94:07:83:f1:22:bd:12:b5:87:3a:d7:a6:ef:
1f:10:c7:05:82:93:dc:1d:7b:c8:04:64:06:06:3f:
ce:b3:3c:02:e0:88:0a:ef:6f:18:8b:56:40:b5:14:
9e:01:bf:69:af:7f:b6:a7:20:f2:bb:ed:73:7d:b1:
a3:9b:15:88:63:fb:9c:ac:a9:5f:a3:80:6e:3f:ad:
47:ff:31:11:1c:e8:b5:96:52:84:27:04:93:d9:87:
09:20:15:fa:b4:a9:a3:60:a1:de:dd:f9:f6:26:3c:
80:d9:e0:8e:cd:a5:c1:0c:2f:00:63:0a:42:da:48:
aa:86:69:51:9e:45:81:4a:21:39:3d:db:01:ff:a3:
80:dc:62:50:32:b5:db:35:b1:11:71:c7:0e:3c:ce:
37:d1:73:ae:27:52:53:0b:39:24:8b:45:6e:51:a4:
23:fb:fd:4a:a0:18:2d:75:62:15:2e:2c:1f:dd:1d:
d8:95:a6:20:59:1c:42:43:32:26:28:fa:f0:7d:5f:
08:cf:f0:bd:fe:75:f6:15:c5:e3:c5:4f:84:6f:9a:
43:a3:fc:9a:3a:a0:fb:22:24:3d:c1:b5:5b:5b:16:
7e:9a:be:a2:39:c4:94:c1:d0:9b:7b:9b:d2:3d:9d:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:E5:38:42:3C:39:31:2C:AD:61:1B:F6:07:04:A0:99:29:A5:32
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PLHlOEI8OTEsrWEb9gcEoJkppTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
71:89:e8:4c:d0:ae:bf:56:f4:a0:fe:97:db:62:4d:ef:c6:70:
1d:3b:90:2d:ed:9d:e0:5b:a6:f3:4f:0d:5c:3b:8e:41:46:6a:
38:fc:1f:99:56:9f:c0:43:31:dd:b8:48:51:3d:6b:6f:f2:8d:
96:62:2a:8d:ef:41:98:42:87:76:36:d6:b9:77:10:da:c4:c1:
50:ae:1a:00:1d:df:00:0e:76:aa:ab:80:73:f5:36:04:b4:d1:
25:b3:44:24:51:71:79:80:28:73:69:94:33:a9:d7:5a:10:1b:
fc:1f:40:71:bb:83:ad:ce:7f:76:ec:00:c4:10:d5:fe:13:c6:
de:6b:64:8d:f0:23:68:2c:ad:23:0c:70:b6:bd:97:72:0c:87:
92:8e:58:6c:da:a5:f8:c9:ed:6e:e5:92:35:3e:80:b1:b6:3d:
86:66:d5:d0:07:05:93:74:88:06:9a:5f:16:c3:d4:37:d7:89:
e7:a4:9a:a6:83:2c:ff:d2:6b:7b:be:3b:ca:a2:be:a2:62:f1:
97:a7:b3:23:90:0b:e5:39:cf:6a:87:0c:f9:3d:48:eb:e9:94:
d1:60:4e:51:a5:79:59:11:58:60:61:73:6a:60:e6:6b:5b:c6:
bf:0d:88:e7:7f:74:e1:c8:13:a0:e9:a7:47:3f:b3:61:84:a9:
2e:fd:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net