Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nOBL4kT0E1WRodWWUksE-3Bu0FU.roa
File: nOBL4kT0E1WRodWWUksE-3Bu0FU.roa (raw, json)
Hash identifier: 7XRq1IanOlqbbC9S2YNEVL1ZnuZODGiqIarpx8kYQfQ=
Subject key identifier: 9C:E0:4B:E2:44:F4:13:55:91:A1:D5:96:52:4B:04:FB:70:6E:D0:55
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01960BFC313AC7E3158EC22B7537836C1C19
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nOBL4kT0E1WRodWWUksE-3Bu0FU.roa
Signing time: Sun 06 Apr 2025 16:43:19 +0000
ROA not before: Sun 06 Apr 2025 16:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.151.142.0/24 maxlen: 24
77.111.96.0/24 maxlen: 24
89.106.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:fc:31:3a:c7:e3:15:8e:c2:2b:75:37:83:6c:1c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 6 16:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ce04be244f4135591a1d596524b04fb706ed055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:14:41:50:e1:ac:cb:61:f0:de:13:c0:82:
37:c8:67:af:c2:c2:06:71:2e:87:16:bc:d8:d3:7a:
a4:20:f2:4c:cb:92:40:c1:d2:c2:c0:e9:6b:9f:68:
11:16:2c:c7:98:53:43:e4:eb:43:d8:6b:10:28:9a:
0d:d1:33:8b:c9:a1:46:a1:8e:18:1a:21:fa:28:d1:
08:5c:41:1b:00:58:b9:2f:a8:6c:c2:24:c1:d3:83:
32:62:f6:77:5b:4f:51:f8:78:e5:54:f6:67:01:92:
6c:00:1f:bd:e4:0d:f8:70:b1:29:45:a5:90:67:7f:
0c:86:01:6d:6e:3c:0b:01:bb:0d:f6:1f:e0:91:f7:
23:f6:1f:20:1f:8f:a1:7a:b0:ed:e1:52:5e:f6:ef:
94:92:95:b9:91:38:92:e4:d9:03:5e:d9:fb:7e:4f:
fd:0c:2b:c0:a0:be:c2:90:d4:6e:35:f4:b1:33:c4:
23:ee:16:14:47:1d:f2:c6:f9:2d:1d:e7:b1:1a:f5:
ee:23:16:02:9a:dc:a7:f9:c7:3a:fe:58:7f:7e:1d:
2a:5b:c0:55:78:34:ca:0d:6c:ad:c4:aa:b3:ef:52:
4d:1d:e7:a5:08:5b:34:71:83:89:c7:f8:96:a9:82:
1f:1f:ae:5d:66:59:4b:75:ff:8b:9d:64:46:ae:26:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:4B:E2:44:F4:13:55:91:A1:D5:96:52:4B:04:FB:70:6E:D0:55
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nOBL4kT0E1WRodWWUksE-3Bu0FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
77.111.96.0/24
89.106.14.0/24
Signature Algorithm: sha256WithRSAEncryption
99:07:7e:07:18:ce:75:e1:e6:2e:10:db:74:a4:7b:9b:66:e3:
24:35:ab:75:63:dd:e8:ac:c4:ae:98:68:18:d6:c9:4f:91:45:
be:74:41:37:c3:be:6e:a0:87:7d:60:57:e5:f0:c8:5f:61:b0:
c5:ac:c3:3f:12:16:ad:69:3f:f1:09:89:b2:31:25:65:e1:04:
33:f6:ef:df:9a:ff:88:55:53:45:ab:4a:d0:cd:fd:68:35:b6:
6e:ec:bc:b7:c3:7f:d1:13:78:fb:53:8e:81:ad:1f:ed:1f:07:
53:4e:93:1d:90:97:3a:71:40:13:f8:f5:9a:21:26:4a:b0:25:
cb:25:28:1d:8a:72:81:fc:b1:2d:6f:bb:30:21:59:e6:f8:c7:
b9:2f:0b:c1:df:34:dd:82:80:9b:ca:90:01:48:6c:0a:fc:70:
50:80:45:78:b6:81:52:b1:f8:66:28:ba:14:11:10:58:6e:6c:
1d:92:e8:90:9a:21:7e:35:ae:8a:83:c6:b0:ac:ae:30:2d:25:
ee:71:a7:5f:3b:e2:a5:f6:32:8f:9b:c1:f6:5d:60:aa:b1:6e:
5e:bf:82:71:c3:63:48:2f:60:da:99:66:78:31:6a:84:8e:ac:
a6:ff:dc:10:3f:5d:b6:72:5b:db:18:00:f1:a2:3e:4a:f3:a0:
62:19:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net