Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/1-f1gUau53_sy3TW5P4gG3FwDhSk.roa
File: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (raw, json)
Hash identifier: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=
Subject key identifier: F9:FD:60:51:AB:B9:DF:FB:32:DD:35:B9:3F:88:06:DC:5C:03:85:29
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 019422FBE904502292EA8B5D7EB8F925B481
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/1-f1gUau53_sy3TW5P4gG3FwDhSk.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210491
IP address blocks: 146.19.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e9:04:50:22:92:ea:8b:5d:7e:b8:f9:25:b4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9fd6051abb9dffb32dd35b93f8806dc5c038529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:3a:87:23:61:76:d3:4f:2e:db:a6:a6:fe:
b8:f0:01:61:e3:8a:c0:4e:a1:ce:83:bb:a8:43:c8:
38:d0:0f:f3:ab:25:9c:76:89:41:8f:ae:58:9f:85:
81:cd:4d:42:e4:5b:f6:e9:68:4b:a1:51:44:7a:97:
ea:16:e4:32:74:e7:a4:e7:07:a0:d3:9d:8b:d4:6e:
cb:d0:9d:3a:6e:17:fe:1f:44:3b:59:22:aa:6a:c9:
0e:1c:88:de:7c:21:2c:b6:fc:34:ca:f1:ac:8a:78:
fa:fb:18:1c:1c:94:d6:dd:84:36:be:e4:dd:95:b5:
30:1b:6b:8a:b5:d9:59:35:e2:58:c4:3c:8e:6e:3d:
46:3a:b1:d8:c9:c1:6d:97:e4:62:93:9c:08:06:f4:
cf:6d:7e:9a:59:da:28:dc:05:2a:d2:96:87:0e:35:
ab:a2:c9:91:5c:0c:d7:ee:1e:f3:55:a1:6b:92:c7:
d4:4f:cf:f3:03:49:d2:af:cf:77:69:fd:0c:df:37:
0f:cd:78:e7:b9:fd:31:85:3f:45:67:20:60:89:4c:
09:20:08:1c:79:4d:48:f5:66:41:e4:74:75:07:bf:
db:80:0a:79:91:e3:6b:ad:85:d4:b8:da:15:1a:51:
f7:5f:0a:30:22:10:72:20:c5:8a:28:a6:c8:ee:cc:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FD:60:51:AB:B9:DF:FB:32:DD:35:B9:3F:88:06:DC:5C:03:85:29
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/1-f1gUau53_sy3TW5P4gG3FwDhSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.58.0/24
Signature Algorithm: sha256WithRSAEncryption
55:53:92:b3:81:76:7c:2b:de:b4:98:26:20:de:27:90:cd:30:
0d:64:7a:b2:d3:03:c4:44:1a:a8:c8:b2:0b:22:d0:cc:7a:83:
ba:21:03:00:ef:1b:d4:be:54:72:c6:cd:df:a7:36:85:b6:94:
e7:06:97:ed:f9:fc:0b:c6:52:4e:8e:98:78:d7:4d:ff:05:c0:
7c:f2:ce:20:80:2e:bd:b2:24:6d:ab:ed:de:8a:28:c5:fe:67:
2b:ec:00:70:3e:e0:ee:06:db:de:92:f2:6b:4a:a3:c8:bf:10:
1b:4b:f9:91:82:31:17:90:81:1f:ad:2f:3a:0d:18:93:d7:79:
80:e7:4b:04:d4:5b:5a:99:34:16:be:84:a3:e6:ab:e9:b6:da:
93:94:18:d6:a5:dd:a0:1c:d2:76:18:11:0a:77:ad:80:36:bf:
f4:6a:0f:ea:63:64:87:c6:ff:e0:aa:dd:fb:bd:39:4d:c2:2e:
d0:cc:6c:01:86:1c:e4:18:85:d4:ab:68:a8:fb:bc:e5:d5:19:
e8:52:08:81:b4:a0:b6:f0:d0:09:8c:11:89:66:0d:62:3b:69:
0e:df:5e:0c:1a:e9:6c:7c:90:c6:1f:64:7a:8d:10:54:d9:fb:
3d:e3:47:77:4b:2c:6d:ec:69:4c:a0:31:c8:ca:51:2d:5a:e3:
88:f6:79:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net