Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/kepUhm0anFry8RwMMkqJayre0fg.roa
File: kepUhm0anFry8RwMMkqJayre0fg.roa (raw, json)
Hash identifier: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=
Subject key identifier: 91:EA:54:86:6D:1A:9C:5A:F2:F1:1C:0C:32:4A:89:6B:2A:DE:D1:F8
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 019425FDC7C751ECDA3DF733648B82393793
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/kepUhm0anFry8RwMMkqJayre0fg.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204949
IP address blocks: 176.53.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c7:c7:51:ec:da:3d:f7:33:64:8b:82:39:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91ea54866d1a9c5af2f11c0c324a896b2aded1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:e4:a2:0f:40:86:96:21:85:4d:ab:de:cf:
f6:48:5d:e6:da:b5:a3:0c:95:0b:98:3d:e6:75:6d:
c1:f6:4d:98:4b:8f:24:e3:7a:11:5f:a2:09:18:48:
95:c6:21:0b:b2:cb:15:e2:95:87:0d:68:6b:a7:a0:
da:3a:4d:cb:5a:ad:dc:07:f8:38:5a:7c:a8:20:85:
37:ba:a5:6f:49:65:53:b8:53:c7:64:4e:40:95:90:
82:20:ed:6f:b7:bb:0e:05:eb:70:3c:59:1e:7d:d9:
87:97:02:41:eb:fc:12:e8:61:7b:b1:1d:89:b8:7d:
0d:a0:f4:00:a3:21:2f:29:ad:bc:51:d7:1d:28:3f:
60:b6:af:67:39:46:58:11:2a:0a:d6:3c:dc:70:8d:
89:93:07:18:b2:bc:f6:24:54:f7:ac:99:12:a8:0d:
83:1a:86:ad:28:4c:fb:b7:27:db:db:ee:34:23:1e:
de:99:88:04:7f:32:4b:c5:e2:b8:37:58:f4:e1:00:
ef:1c:36:aa:81:7c:1c:dc:f3:2e:cc:0d:38:2e:7f:
a1:30:00:42:8d:45:84:e0:b4:39:09:53:e3:2a:ad:
3d:50:fc:4a:6b:e1:d8:2b:24:ea:2b:55:6c:ca:4b:
04:d8:98:e3:f5:65:bb:dc:80:b4:6a:d9:41:cb:17:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EA:54:86:6D:1A:9C:5A:F2:F1:1C:0C:32:4A:89:6B:2A:DE:D1:F8
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/kepUhm0anFry8RwMMkqJayre0fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.145.0/24
Signature Algorithm: sha256WithRSAEncryption
42:59:ca:08:f0:bf:b6:21:d8:39:a2:60:b0:99:b3:c0:b2:bd:
d0:0e:1b:9d:a1:d7:37:82:26:70:e7:94:29:88:9f:85:92:b0:
34:dc:62:ab:bb:5d:ba:ad:76:6b:17:f9:67:21:5c:18:68:de:
7c:d4:50:aa:fd:f2:8e:1d:be:dd:76:34:b4:02:0d:8f:dd:d1:
5c:64:2d:05:5f:d5:6b:14:a0:1a:a4:e2:ba:b6:89:dd:bc:4f:
16:96:da:70:92:f3:46:a5:79:c4:3e:9a:4e:44:4a:32:5b:d5:
22:e4:f5:c3:32:10:f8:3c:86:69:cd:c3:af:27:78:41:8f:c9:
8f:51:31:26:8f:8a:ae:ab:1b:31:e8:a2:48:e2:a5:65:20:88:
dd:16:68:32:f7:b9:fd:2d:c4:02:97:33:95:9c:45:27:23:83:
90:2c:59:e8:4c:9c:53:38:cf:25:84:bc:5f:79:8a:c1:80:94:
f8:d9:6c:06:63:86:dc:04:b8:27:9b:70:fe:10:6e:fb:da:da:
0a:c3:af:5f:28:98:84:bb:b7:5d:4c:dc:a4:7e:56:02:dd:18:
cf:7e:d8:f0:42:e0:d7:49:bf:74:61:e4:39:af:91:da:ab:34:
ca:d9:8e:ed:dd:65:f6:d4:03:35:46:77:cd:5e:90:f9:a5:c7:
7f:dc:d8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net