Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/kchelfWvJ5H-ipXayPr2lYfELpU.roa
File: kchelfWvJ5H-ipXayPr2lYfELpU.roa (raw, json)
Hash identifier: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=
Subject key identifier: 91:C8:5E:95:F5:AF:27:91:FE:8A:95:DA:C8:FA:F6:95:87:C4:2E:95
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 0194266C440902C3932F866D3BB5FF4637F0
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/kchelfWvJ5H-ipXayPr2lYfELpU.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208126
IP address blocks: 45.128.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:44:09:02:c3:93:2f:86:6d:3b:b5:ff:46:37:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91c85e95f5af2791fe8a95dac8faf69587c42e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:29:73:81:ea:6c:97:b8:10:73:d6:41:cd:
1c:b7:91:04:63:08:50:91:33:bc:00:2a:77:72:77:
6b:ca:9a:4a:2a:31:11:4d:ac:e4:5c:b1:8f:33:63:
26:1a:ec:79:ec:9c:d1:a5:07:b4:65:85:24:fa:5d:
ef:d9:77:9a:ef:80:eb:8d:75:aa:49:dd:c2:a4:6a:
f4:13:cf:f5:71:44:48:4c:5d:0d:27:25:40:fa:99:
74:ac:70:74:c7:8d:6c:e9:69:ab:08:d5:4c:c6:4e:
4e:ba:5a:f0:17:4c:f5:9c:c6:32:3e:fe:7c:3b:0e:
4a:1b:88:32:67:96:4b:91:2d:0f:3f:1e:7e:8b:aa:
6b:13:b7:8d:a8:85:0d:fe:33:ee:a8:96:a0:63:0b:
2a:73:46:77:ef:fa:f2:a2:de:8d:89:50:cb:86:14:
a0:a1:8e:f7:f7:38:c0:d0:85:8d:59:ab:64:e5:06:
7c:14:7a:a9:11:1c:30:42:9f:62:ae:4f:18:47:18:
90:64:38:45:c5:c2:9f:66:c0:3d:ca:72:dc:09:dc:
e7:c7:ba:56:0e:01:07:32:79:25:49:5c:bd:63:a7:
96:a2:dd:8b:61:96:62:e9:7d:78:a5:a8:26:95:76:
2c:b3:b7:34:93:3c:94:fd:83:a7:73:71:d6:b6:4c:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C8:5E:95:F5:AF:27:91:FE:8A:95:DA:C8:FA:F6:95:87:C4:2E:95
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/kchelfWvJ5H-ipXayPr2lYfELpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.68.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:44:36:e7:82:11:66:83:ec:e4:5f:37:55:1c:b8:d4:88:34:
5b:64:9d:7b:92:de:bc:ae:ce:fe:29:38:36:b7:aa:e3:67:18:
9e:38:5b:50:05:12:2a:58:f5:a5:4e:f2:1f:01:61:46:68:14:
9e:82:88:4d:10:11:14:4e:8e:9d:21:ca:e4:40:1a:bf:37:21:
83:62:96:93:01:25:04:11:aa:67:ab:cd:05:ed:e4:0f:98:0f:
d2:ee:4b:9b:e1:d9:9a:42:d1:5b:e6:84:aa:5a:32:d4:ee:c5:
1f:d3:bf:b5:8b:68:c7:d6:13:22:8f:11:45:92:9f:4e:82:48:
b5:fc:cb:0e:08:80:5b:a0:0c:d3:42:d2:43:e9:5d:ec:46:02:
8b:02:78:80:7d:54:1f:85:ae:cb:6e:03:f3:96:3b:0e:6f:93:
d6:48:a8:f8:21:17:e3:c8:48:16:be:6c:4c:b5:df:8f:31:58:
66:43:45:a0:44:31:28:ec:fc:46:9e:37:1f:f5:93:38:58:b1:
f3:a0:12:ec:69:c0:e9:f7:0d:b0:f5:3e:9f:1b:0d:bf:84:c2:
7d:ad:94:93:be:b2:b7:dd:13:c6:b7:ac:5b:91:40:39:a1:27:
ed:50:b5:b1:37:c3:b3:f4:07:c0:d6:ce:9a:dc:ec:c5:32:0a:
e0:53:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net