Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa
File: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (raw, json)
Hash identifier: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=
Subject key identifier: 97:B6:69:87:14:CD:2D:D7:F3:DE:CD:1C:D2:CA:FA:EC:84:0E:9F:F4
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 019421B1C5034197B6D61FF3DC00D729C57F
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202712
IP address blocks: 45.89.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c5:03:41:97:b6:d6:1f:f3:dc:00:d7:29:c5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97b6698714cd2dd7f3decd1cd2cafaec840e9ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:eb:f9:a1:7b:bd:d9:dd:fe:c4:cd:5f:e2:
d1:7f:a3:2f:e7:c6:09:70:1c:ff:83:8a:97:00:f6:
e3:ac:37:96:5f:68:a7:18:e0:1f:27:6a:01:80:c0:
3c:cf:d7:d4:39:7c:5c:ac:12:23:56:b2:7e:66:cd:
1a:a8:d4:7f:41:7f:f0:7f:52:10:72:53:f3:46:51:
4e:88:7e:d3:e7:ba:6c:38:4f:fc:07:37:7b:3d:52:
bd:bc:48:d7:14:9d:cf:d2:d2:20:36:3d:ca:e7:2b:
97:a4:e9:75:c6:25:c0:54:2d:4e:f0:cf:99:a6:38:
23:65:05:af:18:f0:bf:70:73:1e:7b:36:6b:f9:5c:
4c:a7:96:2e:e2:a6:01:a1:14:f3:74:96:a2:f8:61:
7d:33:7d:72:4c:da:57:4c:48:4f:7f:0e:68:09:de:
41:d1:55:84:64:61:a3:e8:2e:56:44:58:ab:a1:fb:
1b:b7:6b:d8:ea:14:9b:54:ef:b9:d4:e4:75:0e:d3:
77:87:e1:04:dd:65:af:c7:e4:03:2b:0a:f1:38:14:
1f:bf:97:16:f6:24:0a:c0:ea:d8:31:33:9b:08:f9:
75:16:43:e4:67:69:8a:7d:1c:ea:4e:2d:69:1e:5e:
a0:ae:7a:18:39:7d:e0:27:ab:00:65:34:29:6f:a5:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B6:69:87:14:CD:2D:D7:F3:DE:CD:1C:D2:CA:FA:EC:84:0E:9F:F4
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.10.0/24
Signature Algorithm: sha256WithRSAEncryption
20:02:bc:bf:46:84:62:6e:4e:44:49:f4:dc:cc:30:1c:90:03:
af:d8:7b:ed:b7:0a:e8:ce:a4:7f:23:b6:22:77:df:a9:d1:23:
1b:0a:6d:aa:a9:02:4b:b0:5b:1c:d8:bf:eb:84:28:9d:83:51:
61:0c:bc:c0:96:e9:54:c5:31:89:dc:32:37:3b:f7:81:f4:6f:
04:ca:4c:0c:23:98:d8:aa:d9:a2:ff:c0:1d:c7:9f:b8:46:b7:
28:4b:82:c3:40:87:0c:25:89:ad:ed:f0:11:48:3f:bb:cc:ef:
0e:8e:1e:42:6a:b8:6a:f7:e2:26:de:a6:eb:3e:9b:71:3b:06:
e6:1a:ce:e5:4f:d3:b9:5a:a5:2f:d8:b6:c5:00:cb:f8:85:44:
7b:6d:c5:01:df:29:bd:48:50:98:e1:03:f3:f6:3e:51:2c:f2:
ca:b1:e9:6e:fd:df:67:c1:d5:0b:90:0f:74:68:5f:e2:bd:4a:
1d:13:ad:c6:f8:0d:0e:89:45:6a:44:e5:7d:4d:a7:6e:f5:5e:
3a:52:fc:7f:e3:11:fc:98:e7:3b:14:2a:5f:29:39:c2:b0:22:
01:c0:c2:25:28:06:80:9e:42:0d:78:8f:e7:c3:a1:1d:9f:39:
47:5e:d8:42:88:18:26:93:29:07:7a:f4:9a:95:eb:31:74:0d:
13:d8:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net