Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/7ap_QJi20SaGnPgK1pV6_7cP-Uo.roa
File: 7ap_QJi20SaGnPgK1pV6_7cP-Uo.roa (raw, json)
Hash identifier: BOo8F2wEw4BgZClwTOfUjkt0HIqhHPtSsQJru4E0kFk=
Subject key identifier: ED:AA:7F:40:98:B6:D1:26:86:9C:F8:0A:D6:95:7A:FF:B7:0F:F9:4A
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 0195F6DBBB5046341C7CFB7FAA88E4DC464C
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/7ap_QJi20SaGnPgK1pV6_7cP-Uo.roa
Signing time: Wed 02 Apr 2025 14:15:50 +0000
ROA not before: Wed 02 Apr 2025 14:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61154
IP address blocks: 45.10.136.0/24 maxlen: 24
45.10.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:db:bb:50:46:34:1c:7c:fb:7f:aa:88:e4:dc:46:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Apr 2 14:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edaa7f4098b6d126869cf80ad6957affb70ff94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2f:3e:c0:63:a5:ea:71:7d:6f:d3:f4:75:92:
a3:74:df:ec:31:57:63:b8:c8:3f:0f:9f:07:4e:53:
89:9a:de:fd:a2:7a:21:26:bf:dc:44:bc:40:b9:c0:
f9:a2:89:81:b3:1b:ec:5f:0e:5c:5c:55:30:73:78:
ce:21:56:9f:47:cb:3c:14:c2:90:4d:5b:86:78:68:
54:91:48:9c:b7:01:56:2a:14:31:99:61:6f:04:c5:
ea:c6:10:00:0b:c1:d2:a2:31:35:19:b3:dc:f9:48:
5a:46:ba:a0:40:82:75:8d:b3:86:5b:1b:fc:2e:a8:
2f:4d:1b:32:06:da:8e:39:44:5d:05:68:de:58:7d:
46:d1:4d:93:3e:d1:10:70:88:bc:6a:46:9e:e4:df:
14:ec:93:d8:c5:5f:d1:09:20:94:0e:93:af:03:2d:
f7:52:ee:49:a4:7b:69:a3:90:8a:95:8c:44:ce:fd:
9b:91:f1:3e:50:85:30:4a:a6:17:17:c2:d8:49:b0:
ff:b0:c6:1a:04:67:47:fc:5b:d8:f4:63:ba:e1:4e:
43:0a:a6:f9:1e:3f:ff:7a:cd:30:5d:89:7d:43:5c:
b8:9b:6f:ab:b7:40:07:4f:72:22:65:df:7e:6b:3d:
ce:b3:4a:a6:2e:9d:59:32:d9:75:e0:5e:41:12:c9:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:7F:40:98:B6:D1:26:86:9C:F8:0A:D6:95:7A:FF:B7:0F:F9:4A
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/7ap_QJi20SaGnPgK1pV6_7cP-Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.136.0/24
45.10.138.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:31:89:f5:82:86:a9:46:5c:cf:66:80:7b:37:af:2a:3f:47:
cb:44:0d:c8:86:39:37:b6:48:6d:bd:fd:9f:b1:3e:4f:8a:48:
9b:7b:78:eb:b6:a5:66:c8:47:2c:be:f6:98:68:1c:c6:e1:74:
88:38:ca:1e:1f:92:ae:d3:1a:99:68:48:d0:7d:05:81:9f:a7:
a2:f3:96:56:ec:5f:e7:db:46:69:bf:b6:a4:de:3b:22:e0:00:
0e:e1:a1:47:c5:91:5d:f4:2c:c1:d7:91:69:11:ca:56:94:80:
65:74:12:5b:b7:01:15:85:56:b3:80:98:25:26:1e:20:1f:21:
57:ad:eb:89:f0:c1:af:6e:37:fc:eb:ea:b3:b8:5c:cc:59:89:
6a:c9:4b:56:ef:25:24:3e:70:fe:f4:8f:32:af:74:0f:df:e6:
db:da:dc:b9:da:c8:89:66:d1:ca:60:2b:4b:8d:a5:3b:ea:cb:
d9:94:b9:a5:4a:ff:c0:9e:8b:bb:86:e6:cd:1a:1f:04:06:e4:
fd:9b:65:7e:ed:4e:c9:ae:a7:95:28:8d:ed:f3:84:42:1c:9a:
50:77:cc:f2:a7:1e:c9:d1:e2:f2:22:67:7c:ae:ea:b9:35:69:
f9:c6:ba:c0:54:84:38:62:fa:22:06:9b:fb:54:b9:84:bc:e6:
50:95:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net