Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/2m_CYVmLsPzF7bcN6vIid84YZD8.roa
File: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (raw, json)
Hash identifier: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=
Subject key identifier: DA:6F:C2:61:59:8B:B0:FC:C5:ED:B7:0D:EA:F2:22:77:CE:18:64:3F
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019423D76C4AFA18DB3643DD354752E782C3
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/2m_CYVmLsPzF7bcN6vIid84YZD8.roa
Signing time: Wed 01 Jan 2025 21:48:27 +0000
ROA not before: Wed 01 Jan 2025 21:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215432
IP address blocks: 45.151.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6c:4a:fa:18:db:36:43:dd:35:47:52:e7:82:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 1 21:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da6fc261598bb0fcc5edb70deaf22277ce18643f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:68:b1:03:df:4d:77:fa:48:b8:0c:0e:2e:
15:b5:c8:47:25:fa:e1:0d:11:85:38:45:9a:e6:81:
a2:e6:8d:62:68:c7:44:c5:a1:e5:b5:95:b4:8a:1d:
d0:1a:fa:57:6e:8a:d8:7b:15:e6:5f:bb:dc:63:cc:
b6:16:51:d4:cc:91:37:21:43:2d:f3:7d:db:59:47:
2b:21:95:63:84:b0:be:51:c1:8c:fc:29:ab:80:8b:
33:77:25:04:74:b4:84:0e:b0:dd:cc:ab:1e:59:0d:
d0:fe:74:c4:ac:25:13:45:9b:4c:dd:4a:d0:cd:6d:
31:ca:c3:01:46:58:4b:ac:8b:25:e8:26:e9:42:2f:
98:fe:b9:ac:e0:77:53:d7:2a:13:88:2f:90:60:f0:
01:bd:93:89:04:01:b2:48:84:09:0e:88:48:c9:34:
7e:73:3e:52:33:d4:bc:0e:68:49:6e:ee:67:3f:31:
58:a2:f6:b4:5b:d3:4c:cc:fe:75:62:ca:7b:1e:c9:
93:13:2b:62:3d:8d:7e:3e:d8:7d:17:67:e1:d2:7e:
9a:a9:6f:17:cc:79:0c:13:98:fd:ed:a7:93:88:60:
58:03:1e:7d:a7:4d:05:e5:22:9f:8f:c7:fb:c5:04:
72:92:16:67:0d:b5:7d:b3:aa:a3:31:e9:61:7e:27:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:C2:61:59:8B:B0:FC:C5:ED:B7:0D:EA:F2:22:77:CE:18:64:3F
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/2m_CYVmLsPzF7bcN6vIid84YZD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:35:72:3d:fe:38:7f:71:0d:1b:0f:54:da:6d:5b:49:04:5e:
53:e9:08:99:18:25:86:6c:ae:f4:f0:75:a0:55:76:7b:3b:31:
98:80:2c:46:eb:a0:16:1d:cc:3e:d0:30:05:3c:74:1e:45:0a:
d4:16:e9:56:52:e3:cd:47:9b:60:0f:42:29:d8:b0:a9:9e:6e:
5e:0c:55:c0:27:e0:71:af:f8:cb:9d:68:34:8d:c7:79:74:c8:
d9:17:ba:a5:89:74:48:6d:ff:50:82:a2:a7:5a:66:41:d0:b5:
fa:be:c2:00:98:f1:51:87:d0:81:6d:f8:0a:2e:b4:ac:e8:3b:
e1:8d:c3:00:45:75:bc:98:7d:c4:b6:ce:b6:34:b8:ee:7c:bb:
4b:c2:8b:8b:b5:d3:ec:82:d6:0a:e7:53:97:1f:9c:56:94:36:
9e:b7:c6:cc:3c:84:27:d0:b5:c8:b2:50:3d:51:01:b8:62:86:
7e:ca:8c:26:2e:1f:f5:60:77:76:de:8d:78:2d:79:b2:d4:e4:
4d:3c:f3:d7:db:86:ea:1d:48:a5:8a:60:68:05:db:1b:bd:06:
21:cb:34:39:22:82:9d:e1:4c:e6:53:a8:33:78:dc:b7:c6:ba:
57:15:89:ce:94:46:03:5d:7f:15:c1:52:09:4e:71:4c:46:fc:
6a:07:6f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net