Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/VEmtcTDf-XxN-2zL8Oay3Fp05IA.roa
File: VEmtcTDf-XxN-2zL8Oay3Fp05IA.roa (raw, json)
Hash identifier: l7M61/tXdMzCop4fGPoOrVeYzOpgSiZ8UEnps3mMyhQ=
Subject key identifier: 54:49:AD:71:30:DF:F9:7C:4D:FB:6C:CB:F0:E6:B2:DC:5A:74:E4:80
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 01961D4B8A3CD5BBC02040F7E9C1EF6AF11A
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/VEmtcTDf-XxN-2zL8Oay3Fp05IA.roa
Signing time: Thu 10 Apr 2025 01:23:31 +0000
ROA not before: Thu 10 Apr 2025 01:23:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.140.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:4b:8a:3c:d5:bb:c0:20:40:f7:e9:c1:ef:6a:f1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Apr 10 01:23:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5449ad7130dff97c4dfb6ccbf0e6b2dc5a74e480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:42:94:c7:a4:bc:06:d4:ee:0c:a5:9d:33:d4:
4e:e8:0c:2c:63:22:4a:f5:9b:4a:20:f1:9a:66:89:
b9:7a:e5:90:39:7a:b0:35:76:7c:11:b3:69:df:c7:
a8:b7:0d:c0:bf:0b:1b:e9:26:75:fd:cc:fe:d0:ec:
08:32:ed:6e:2e:74:19:ad:dc:df:39:92:8b:f2:48:
05:7b:5d:e8:ee:36:26:30:02:55:53:bb:92:ee:b5:
c0:cb:7d:b8:8e:99:7a:9d:35:af:98:bc:cd:bc:2e:
0f:cc:f9:d9:a3:b7:28:18:93:18:21:82:53:f0:4b:
a3:67:19:6d:85:de:1d:a7:7a:c6:f2:dd:3b:03:2c:
a5:46:43:55:69:99:b0:49:7c:a4:00:46:bc:69:a9:
ba:39:d6:c1:69:0f:11:f0:73:0a:8f:ea:c1:1b:ca:
6c:6f:d3:c7:85:04:47:b2:d3:f7:ab:33:6f:64:23:
ab:d0:fe:a9:06:c2:39:6a:0e:01:f3:1f:5e:10:9b:
8f:d7:cb:20:b5:ef:14:05:4c:58:8d:b6:9a:2f:d6:
2c:1d:62:2d:6e:7e:f3:9e:70:b3:67:67:26:88:2b:
21:cc:13:fe:fc:54:3f:c2:d1:92:7b:c7:3e:ee:97:
56:fa:58:62:92:ea:70:7f:cb:e2:3b:41:38:b7:63:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:AD:71:30:DF:F9:7C:4D:FB:6C:CB:F0:E6:B2:DC:5A:74:E4:80
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/VEmtcTDf-XxN-2zL8Oay3Fp05IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.194.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8c:bc:27:58:58:e2:4c:8f:80:02:3b:5a:6a:ca:3b:1e:4a:
2a:5e:b8:ba:64:cb:44:09:db:43:df:b9:fe:52:bd:12:9c:20:
89:d6:57:80:f0:1f:c3:38:e8:9a:35:0f:e8:86:fc:06:e8:b7:
91:48:0b:97:39:73:e9:a4:bd:05:b7:2f:43:2f:28:07:71:22:
bc:28:7a:28:55:2f:35:c8:09:30:00:7a:5c:4c:a9:9e:3f:b4:
1c:64:47:7f:2f:b8:7a:ca:fb:4c:9b:5c:1d:c9:f1:7c:7e:3c:
4c:39:e3:c9:e2:35:a9:fe:93:18:7e:ef:13:e5:d1:da:dd:a0:
e5:f5:fa:af:39:1b:d7:4d:e6:65:aa:7b:3f:35:87:1c:2e:d6:
b8:02:9e:d8:8a:d7:3c:23:16:8a:6e:69:e8:f9:56:53:d2:1b:
8c:9f:69:cd:70:f3:69:72:8a:ba:43:eb:2b:5a:3e:aa:61:bf:
08:29:3e:b7:cf:7e:9f:a7:2f:bd:e7:67:88:7c:a1:43:40:89:
fc:b8:ce:1a:1a:51:8e:2a:50:f2:8f:01:5f:62:49:b7:25:3d:
da:8e:21:58:7c:b4:04:de:f8:9b:68:d6:34:3f:40:91:cd:78:
f9:3d:11:de:4a:61:fd:15:00:9f:dc:b5:d0:f5:72:53:2f:89:
75:a5:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net