Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/7MWkDFIvxrvBiYeFXftWIiTBWYo.roa
File: 7MWkDFIvxrvBiYeFXftWIiTBWYo.roa (raw, json)
Hash identifier: JH7VCijfXfwxkoNsfjPSzhXBNh6NzlLWZ8enC7rwxNY=
Subject key identifier: EC:C5:A4:0C:52:2F:C6:BB:C1:89:87:85:5D:FB:56:22:24:C1:59:8A
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 0194258EF26E9224C751EB07DF8C3AA10F41
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/7MWkDFIvxrvBiYeFXftWIiTBWYo.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204397
IP address blocks: 45.86.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f2:6e:92:24:c7:51:eb:07:df:8c:3a:a1:0f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc5a40c522fc6bbc18987855dfb562224c1598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:b4:f8:0f:97:39:a5:3b:4a:cb:91:94:18:
8b:84:7c:de:c9:e0:cf:7c:b5:0b:0f:6f:61:29:11:
d9:0d:a7:89:12:cc:d2:67:75:2d:92:00:ad:90:ca:
90:31:19:f3:de:63:25:f8:4d:ee:2e:70:03:be:3e:
d7:7f:0b:5d:e0:1c:8b:97:b3:86:af:73:fa:42:e7:
d7:32:3e:ac:11:3b:bd:94:6b:e8:7d:8c:92:36:d7:
2c:75:1b:66:c2:20:e1:f7:f6:ec:fb:7e:9c:26:16:
bc:e2:10:df:3a:e5:64:15:09:0a:89:e9:cf:f7:bf:
3b:45:09:20:c5:aa:39:ac:2a:a3:0d:fe:08:ef:c2:
b3:48:ab:11:4c:fa:59:c2:57:c7:9d:1e:77:28:5c:
ae:92:61:a0:bd:8f:e8:32:d4:3c:49:52:79:2f:d7:
8a:ef:93:d6:f7:3c:0b:62:98:fa:42:88:93:bd:a7:
73:be:e9:76:06:e7:78:fb:a9:d6:0a:74:03:a2:f7:
7b:ed:b8:46:f0:d9:8f:1f:c3:af:47:41:1b:fb:c4:
58:1d:69:f3:5d:01:c5:72:e1:d4:31:a1:0b:a5:2e:
d8:a1:b5:fd:50:21:79:2e:1e:b4:5e:01:d7:0e:a6:
b8:97:6b:a3:13:59:20:e8:c5:b9:5c:30:c2:1a:17:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:A4:0C:52:2F:C6:BB:C1:89:87:85:5D:FB:56:22:24:C1:59:8A
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/7MWkDFIvxrvBiYeFXftWIiTBWYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6c:07:b5:45:6a:e9:f7:4d:63:29:44:1e:43:ec:96:36:d3:
bf:c1:a0:a3:60:e1:35:3e:ac:4d:14:bf:82:28:1e:2e:88:39:
33:b6:a5:95:21:17:74:d2:74:74:6a:fc:f1:af:cc:01:45:d4:
bf:43:62:6e:f5:0e:5e:c1:17:84:22:f7:e4:5c:ca:39:2f:35:
7f:36:2c:65:37:75:79:1f:2d:87:94:e6:2c:6f:f8:e4:ca:f4:
eb:dc:e7:34:00:14:e9:ff:3b:f5:f5:9a:38:b7:79:72:dc:3d:
a8:4e:92:25:9a:f5:49:5c:bb:6c:7b:a0:94:ae:43:79:ed:35:
38:1d:4c:eb:b4:c8:44:fb:20:94:d5:66:fd:b9:db:6f:36:d6:
68:a2:74:20:15:66:41:ad:39:ed:55:c6:66:cd:b6:c0:c3:53:
9c:ab:be:b9:33:aa:40:49:13:e3:b5:4c:bf:1d:e0:48:12:9a:
80:91:b7:b0:c0:45:3a:7d:84:2d:f8:fd:50:2e:e2:12:a1:a9:
b6:9d:3a:9c:3f:04:f4:25:80:48:84:20:e3:bf:8e:32:e6:06:
0c:16:c7:2d:f3:e0:d1:3b:b0:a9:8b:d4:b8:aa:7e:a4:b3:9a:
5c:e9:f9:b2:66:60:4e:ce:f1:84:0e:96:11:c9:ac:61:8d:d9:
83:d1:d5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net