Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/ReFijUPsIVT0JnrY05_yeSrYpfM.roa
File: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (raw, json)
Hash identifier: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=
Subject key identifier: 45:E1:62:8D:43:EC:21:54:F4:26:7A:D8:D3:9F:F2:79:2A:D8:A5:F3
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 0194214447B7D1E8882A98B550A4A8A50541
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/ReFijUPsIVT0JnrY05_yeSrYpfM.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207872
IP address blocks: 178.236.203.0/24 maxlen: 24
185.213.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:47:b7:d1:e8:88:2a:98:b5:50:a4:a8:a5:05:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45e1628d43ec2154f4267ad8d39ff2792ad8a5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:86:ec:c2:c0:3c:61:0e:42:8f:73:11:54:
d4:6a:1e:11:e2:06:95:97:b2:32:c7:fc:60:6d:bc:
df:71:ee:8d:fc:90:19:8e:13:0a:f1:5d:10:6d:49:
29:08:e1:16:01:8b:ea:cb:6c:ae:de:e2:db:d3:01:
9a:67:1a:59:7e:13:f7:c1:e0:e9:00:8b:8b:b9:df:
c4:7f:47:2e:75:ff:71:8d:f6:c7:5d:19:70:03:62:
90:e2:55:86:db:5a:af:e3:45:b8:99:43:1b:3e:9d:
4c:2a:45:3e:bc:8d:9e:df:08:64:2f:aa:cc:cd:17:
ef:a5:e8:3b:f9:45:e0:67:e5:d9:2e:0b:71:8b:5e:
cc:f6:8f:35:81:f6:d5:c0:ba:d6:ab:fc:db:94:4b:
ff:e6:0b:35:d3:07:03:fc:ef:d6:1a:ec:5c:02:5d:
a4:89:b4:9d:3f:f3:27:7d:d5:79:75:3b:4b:bd:d8:
4c:68:6a:37:54:5e:32:0d:bf:be:24:7a:95:ed:55:
9f:4a:c8:b3:5a:85:ea:00:95:c8:4e:66:04:0d:77:
1c:32:da:e3:9a:da:c2:55:59:66:4c:5a:4f:1e:54:
b2:47:f1:80:54:9b:09:15:2d:df:ed:9d:dc:3b:c2:
f8:3a:cf:2a:a5:2d:58:3d:d5:d0:a9:64:cc:42:99:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E1:62:8D:43:EC:21:54:F4:26:7A:D8:D3:9F:F2:79:2A:D8:A5:F3
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/ReFijUPsIVT0JnrY05_yeSrYpfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.203.0/24
185.213.44.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:98:22:21:b5:5b:f4:0e:03:0d:da:f0:42:e4:00:3a:31:b8:
b3:9f:32:13:0f:86:eb:c2:af:e7:32:50:23:7e:61:6b:fa:5f:
b6:72:7d:f2:fc:1f:67:f3:75:f9:aa:a3:a1:97:03:a0:63:1a:
af:5e:fd:f6:d0:a1:e1:77:75:a6:37:a9:f2:f0:70:a0:c2:9a:
b2:3b:ad:b4:77:26:db:c0:43:3d:21:6a:9c:ad:f2:6b:59:f9:
ee:12:f9:08:6a:6d:e2:73:b1:e6:62:76:6e:f8:f4:88:78:e5:
89:cc:1f:0f:a6:c1:ae:aa:41:05:19:78:75:14:6c:15:5a:0f:
58:69:89:04:24:36:0b:16:93:5b:92:b8:5e:1f:20:ce:9c:55:
b6:88:ce:4f:84:56:69:ac:17:f6:06:83:0f:7e:c9:02:42:7b:
a4:b5:93:a5:96:42:83:52:b7:69:d7:de:46:95:a4:82:72:ac:
89:59:a2:31:90:b4:7d:e3:72:59:b6:48:d8:4a:50:2b:89:42:
c7:60:30:3d:02:74:90:c3:22:5f:35:c1:e9:f3:ec:c6:99:95:
74:e7:26:0f:76:d4:02:d0:ac:d4:73:df:62:88:c6:3d:f5:b2:
79:ec:a0:9e:9e:8d:e5:91:db:90:55:b6:76:3d:27:48:98:c1:
a5:a7:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net