Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/04OJZX_SXGi1dDIA0YBUJmsNUbg.roa
File: 04OJZX_SXGi1dDIA0YBUJmsNUbg.roa (raw, json)
Hash identifier: 9tAP6j+iweaxy1fPEg9uzdBmtNCe4D1XVZeIv5o6D6Q=
Subject key identifier: D3:83:89:65:7F:D2:5C:68:B5:74:32:00:D1:80:54:26:6B:0D:51:B8
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 019422FC29659C9347196CD1D13F8110259A
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/04OJZX_SXGi1dDIA0YBUJmsNUbg.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43668
IP address blocks: 94.131.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:29:65:9c:93:47:19:6c:d1:d1:3f:81:10:25:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d38389657fd25c68b5743200d18054266b0d51b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:66:8b:88:4e:a0:4b:7b:64:95:a0:ea:27:
d0:8d:f8:45:0c:72:6a:ab:77:fe:61:fb:a0:f5:2f:
23:53:6b:d5:0d:09:b0:28:49:df:c2:16:26:fd:e4:
c1:4c:c9:04:73:f7:1f:70:56:86:f7:81:d8:22:09:
d8:e6:27:d9:29:aa:b2:2f:c9:3d:72:25:46:f2:27:
fe:78:a8:e4:5e:7c:cf:af:cb:6e:44:2b:69:7a:f9:
3d:bf:a7:f3:cb:2e:aa:ff:e4:4c:58:01:c0:98:50:
c1:83:26:1a:01:dd:25:24:fd:1b:68:8e:47:eb:d3:
c2:a8:3e:05:22:56:9b:46:50:57:0b:da:44:c4:f8:
52:69:93:c4:5f:ae:33:aa:65:a8:b4:f5:f9:bd:a6:
40:55:97:28:18:f9:54:9a:4d:91:f5:ba:d3:fa:d6:
06:7f:3e:d0:d6:6c:ca:25:97:90:55:cd:e2:2b:10:
d4:1e:0b:74:77:dd:ea:64:f0:a8:c2:67:75:a0:bf:
d8:ec:22:18:4f:58:6c:6b:cc:14:34:57:e3:4f:6f:
a1:f9:f2:7d:1b:9e:22:7b:02:26:5c:0b:49:be:0c:
4d:fc:6f:6a:36:e7:d2:d7:ce:66:45:9a:02:77:17:
ac:58:51:9e:33:60:3e:98:a8:6a:08:b0:ed:07:2f:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:83:89:65:7F:D2:5C:68:B5:74:32:00:D1:80:54:26:6B:0D:51:B8
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/04OJZX_SXGi1dDIA0YBUJmsNUbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.221.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fe:f0:ce:04:9f:8f:ed:ad:77:94:2a:a1:86:99:94:d5:4b:
0a:4e:99:8a:24:a7:c6:ad:56:8f:29:27:a4:48:88:b6:ac:80:
9a:bc:47:22:1e:38:2f:fa:87:fa:94:a5:01:9b:63:a7:67:7b:
98:4f:57:26:e0:f6:80:a2:7d:d4:ae:dc:8e:c6:bd:6d:0a:e0:
13:d4:b2:72:17:76:8e:14:22:98:97:93:cb:60:e7:af:2c:77:
00:9d:ce:81:7d:16:58:eb:84:f3:ff:d5:a9:fe:6d:c3:aa:92:
5f:7f:a4:79:a2:d3:cf:94:9c:0d:e4:bf:ba:67:e3:6d:01:06:
39:26:3d:bd:11:43:40:78:f1:09:37:4e:bb:e2:a9:47:64:fa:
be:e4:00:58:e1:6d:df:ce:96:12:3d:85:25:78:52:4e:7c:5b:
87:3b:5b:31:dc:6c:fd:e9:cc:41:34:d5:f4:eb:8e:24:e2:ef:
39:01:7f:56:90:8f:cc:e9:61:09:17:89:2f:75:00:dd:c7:e6:
18:8e:50:a7:97:c3:d5:56:dc:ad:ee:29:59:19:2c:e6:c0:30:
ca:86:df:4e:f7:72:17:bb:13:19:54:99:43:7a:b5:3f:71:13:
de:90:62:4d:f1:bd:a5:45:e6:6c:00:57:a6:46:b7:3c:ab:51:
91:22:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:05 2025 by rpki-client on console.sobornost.net