Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/cPczL7BSG5C-UOorLa44AbTPVd4.roa
File: cPczL7BSG5C-UOorLa44AbTPVd4.roa (raw, json)
Hash identifier: iC/fXBJJkXo1CbjOzv3JUUnSB7oUYt0rT8G7YWmNXm4=
Subject key identifier: 70:F7:33:2F:B0:52:1B:90:BE:50:EA:2B:2D:AE:38:01:B4:CF:55:DE
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 019427481FE4EA035C8C7F5A8879D43F12ED
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/cPczL7BSG5C-UOorLa44AbTPVd4.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16203
IP address blocks: 213.170.41.0/24 maxlen: 24
213.170.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1f:e4:ea:03:5c:8c:7f:5a:88:79:d4:3f:12:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70f7332fb0521b90be50ea2b2dae3801b4cf55de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:c4:58:24:8c:1f:5e:4f:81:1b:45:94:56:
d4:1c:35:32:2d:74:82:76:bb:53:eb:39:cd:3f:9b:
08:e8:0c:bc:6a:c6:e1:ca:ee:6d:24:8d:c8:38:34:
60:52:4f:fd:a5:57:18:5e:69:b5:8e:9a:d8:8f:99:
fc:43:be:78:a5:9a:d1:a2:48:51:ab:1f:60:30:e7:
73:4d:3f:7e:e9:0a:16:96:51:ee:dc:76:23:38:2a:
30:3d:91:13:d0:33:8c:cc:e4:02:17:6e:f4:74:d2:
6b:9f:92:21:bf:99:ae:23:c4:05:b7:2b:4b:e6:9b:
7a:e5:8c:3a:3c:9a:eb:74:ce:86:79:2d:91:c7:f4:
07:bc:1d:ad:0b:0c:3f:b4:04:4b:71:29:40:0b:d3:
c6:c4:a0:98:79:c4:b6:3c:82:83:ac:d2:9c:7c:e1:
be:d8:2b:f4:25:10:ca:d5:0a:7b:ce:e5:7c:01:ae:
e4:87:0e:5d:7d:8f:54:ef:75:47:82:39:41:3b:c0:
bb:36:85:5c:28:42:cf:86:ab:fa:34:ae:39:60:f5:
2b:93:8b:5b:78:18:c5:25:55:58:5d:d2:cf:cc:4e:
a3:98:2d:80:08:a8:0b:14:d8:2f:ad:aa:92:0c:e0:
2f:4c:be:f8:7b:8b:45:cf:df:cb:98:cc:f3:ae:25:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F7:33:2F:B0:52:1B:90:BE:50:EA:2B:2D:AE:38:01:B4:CF:55:DE
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/cPczL7BSG5C-UOorLa44AbTPVd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.41.0/24
213.170.46.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b6:65:20:72:46:a1:53:13:b7:d7:a5:d5:61:04:2a:5a:0c:
18:d5:20:92:df:8a:23:90:4f:d1:78:a1:f8:70:98:7e:48:fc:
3c:80:a6:f2:d1:aa:d2:b4:b6:19:97:94:50:ca:27:62:8d:a3:
e6:54:08:8d:2a:0e:e6:41:34:ec:7d:ca:fd:5d:25:4a:32:f2:
58:28:47:67:10:f8:59:73:ab:88:26:fc:10:2e:e0:7a:28:ef:
1e:32:bd:7d:88:91:fc:3a:9c:f9:b3:ed:83:08:1f:43:c3:6a:
53:f1:cf:bb:8f:d6:da:9b:f4:b1:26:9b:32:71:b5:d7:8e:42:
ca:fe:7d:b0:2a:23:00:5b:28:39:11:5c:76:ce:8b:f1:b4:26:
51:fd:35:60:df:5b:79:14:9d:4e:93:0e:f6:d0:60:e0:7c:e0:
c0:81:ee:d4:25:45:54:b6:c8:28:ab:79:36:fe:80:dc:de:4d:
c7:1c:36:a4:ca:ab:bb:28:de:9c:23:14:e4:9a:f7:4c:db:7e:
4b:91:6f:94:b0:df:ec:21:a1:5f:06:da:cf:83:49:67:9c:74:
f7:60:76:21:b8:ee:4b:74:9a:a5:48:36:b5:38:3f:48:6b:46:
78:2a:a3:6b:04:46:7f:b7:e0:d7:f5:00:3f:ad:5c:c8:d0:27:
af:39:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net