Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/w87Aon_q3Dh_buadzZYFIwp5KBk.roa
File: w87Aon_q3Dh_buadzZYFIwp5KBk.roa (raw, json)
Hash identifier: 7IIsdhKEICY+k9oemxpxzAnNC22IAqB5l+eqfg/W2eE=
Subject key identifier: C3:CE:C0:A2:7F:EA:DC:38:7F:6E:E6:9D:CD:96:05:23:0A:79:28:19
Certificate issuer: /CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Certificate serial: 01942747D47CC7DBFE62736FA15F6516FA14
Authority key identifier: 9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/w87Aon_q3Dh_buadzZYFIwp5KBk.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59829
IP address blocks: 45.133.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d4:7c:c7:db:fe:62:73:6f:a1:5f:65:16:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3cec0a27feadc387f6ee69dcd9605230a792819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:d7:89:d4:84:89:54:c9:b6:9a:cd:09:0a:
1e:80:94:31:f7:72:29:86:df:47:d1:e5:dd:01:ec:
8f:8c:18:b1:a6:83:ef:5e:f9:34:55:af:81:be:c0:
d3:69:7e:b9:9c:b2:f5:ac:66:fc:68:b8:85:c2:60:
29:22:92:81:74:ef:c4:32:f9:7c:c5:89:15:1a:2f:
02:1a:f3:e3:79:03:3f:ef:45:df:91:97:f5:6c:71:
6f:cf:c6:bf:12:6d:bf:5b:f6:52:92:bf:27:1c:7c:
40:84:58:ed:11:92:14:ad:f0:12:2d:7b:90:da:bf:
6a:08:d4:b5:35:65:6f:a0:24:ba:ed:96:8a:5e:97:
0e:7d:6d:ed:2b:59:1e:a4:9c:2d:e9:25:f3:fb:14:
dc:c5:60:9b:31:3c:02:59:ec:89:00:7a:84:b7:40:
55:41:93:f1:e4:af:41:ed:ee:0a:79:26:6c:ee:26:
90:aa:0a:db:e7:ad:3b:ab:49:7e:84:79:6d:0f:ca:
00:d3:83:2e:98:48:e2:51:57:fa:24:bd:39:3e:0f:
24:66:89:2f:eb:ac:92:93:21:97:52:cb:e1:13:8b:
cd:9f:1a:10:4f:4c:68:37:50:82:93:1f:29:8b:84:
50:fb:5c:f7:4b:79:ba:95:4c:35:7d:f2:ad:6e:c3:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CE:C0:A2:7F:EA:DC:38:7F:6E:E6:9D:CD:96:05:23:0A:79:28:19
X509v3 Authority Key Identifier:
keyid:9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/w87Aon_q3Dh_buadzZYFIwp5KBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.242.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:44:d4:d2:fa:a3:e8:e4:48:90:e2:92:a9:85:4e:ea:91:08:
b9:bb:c7:2e:7d:d1:12:60:8e:69:e4:95:50:b4:8b:19:e4:37:
cf:15:99:d1:42:38:b0:5b:c3:8e:93:ef:9e:15:be:ef:7f:7a:
eb:22:4f:87:e1:36:d3:ec:a0:e3:16:32:d2:6d:04:0b:c4:c0:
3c:ed:78:a9:da:eb:56:d6:fa:de:97:ae:dc:c1:7a:73:69:00:
f7:b2:d9:25:cc:d3:56:ea:79:ab:c5:32:3d:66:01:48:17:42:
3a:99:e1:1c:8c:10:e0:5f:9a:51:3e:39:4b:a8:8e:25:22:3d:
4c:a3:75:15:54:e0:0d:48:43:26:2d:25:55:f5:8b:8b:74:05:
4c:52:95:c1:2e:d2:b7:b9:73:8b:71:6c:3a:cb:95:e4:38:6c:
7a:69:ef:0a:f4:c8:0e:12:47:0e:55:fd:b8:48:be:57:93:7d:
b8:52:a6:1c:58:d3:7d:4e:93:99:ca:be:1c:fd:22:80:84:9c:
e6:45:cf:79:c1:e1:d2:80:1e:db:5e:76:74:a2:d2:b5:43:4c:
88:c4:68:62:1c:c1:48:54:85:9f:d9:56:1e:67:c2:d8:23:3a:
37:a5:0e:64:b4:52:99:75:ba:58:57:3f:d8:75:5d:28:9e:8a:
92:9b:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:09 2025 by rpki-client on console.sobornost.net