Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/_YMez48AMFaUyWLbfvnH7KldVDE.roa
File: _YMez48AMFaUyWLbfvnH7KldVDE.roa (raw, json)
Hash identifier: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=
Subject key identifier: FD:83:1E:CF:8F:00:30:56:94:C9:62:DB:7E:F9:C7:EC:A9:5D:54:31
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 019427B62929ECBBF68343DA1921023C6C66
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/_YMez48AMFaUyWLbfvnH7KldVDE.roa
Signing time: Thu 02 Jan 2025 15:50:36 +0000
ROA not before: Thu 02 Jan 2025 15:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57614
IP address blocks: 81.162.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:29:29:ec:bb:f6:83:43:da:19:21:02:3c:6c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Jan 2 15:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd831ecf8f00305694c962db7ef9c7eca95d5431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:2b:e8:b8:48:f0:3f:9d:f2:26:26:b8:9f:
23:e8:27:09:c4:49:60:72:0c:62:b3:37:2d:bf:39:
3e:71:4d:e3:5a:4c:35:54:5c:63:bd:b9:02:26:97:
5f:8e:23:40:1e:33:ba:e5:f9:11:6c:a1:88:47:73:
cf:8d:ba:9c:23:fb:8f:5b:11:d0:0d:11:d7:98:aa:
76:46:d5:8e:fc:6e:89:31:00:d5:bd:57:94:bd:0b:
e3:10:3e:69:8f:c6:d6:5b:50:fe:2f:eb:8f:45:f6:
23:89:aa:b1:60:80:f4:73:35:f7:c4:ad:a8:b3:f7:
3e:0e:d2:4f:67:31:6a:97:1d:08:d3:0f:07:02:90:
cb:79:5c:07:9d:11:c3:68:71:81:4c:22:d0:47:c7:
b5:99:68:81:2e:62:0e:1d:3b:38:8a:eb:fe:ae:ba:
96:5f:3b:ce:d0:24:68:e0:c4:0f:ca:be:52:90:02:
6e:b0:d2:1b:88:fb:4f:96:a1:fd:97:d4:b3:04:19:
c2:e7:2b:03:0a:dd:20:ec:9c:fb:a7:a1:05:c3:9f:
e9:89:15:a8:0f:20:7b:0f:8c:2e:91:6d:18:20:fc:
39:89:a6:70:c6:f5:33:7b:bc:f3:47:99:2b:3b:5a:
47:d9:e8:a6:28:9f:49:c8:fb:38:20:bf:63:d3:57:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:83:1E:CF:8F:00:30:56:94:C9:62:DB:7E:F9:C7:EC:A9:5D:54:31
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/_YMez48AMFaUyWLbfvnH7KldVDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.48.0/22
Signature Algorithm: sha256WithRSAEncryption
43:ea:77:bd:3e:f1:cb:fb:75:2f:c1:bd:63:98:90:53:41:f0:
b2:6f:a8:66:55:15:86:2d:ef:80:31:cb:1d:e0:c3:56:d4:9d:
75:7b:bb:e7:88:e0:b5:37:8f:59:be:bf:17:12:eb:a7:5f:19:
91:f2:f3:4c:d9:db:af:c2:6e:95:9e:53:07:13:a4:e0:43:9b:
ae:a6:47:2e:4d:d4:d3:0c:9a:06:85:e2:e8:c3:d2:88:fa:b0:
a7:02:11:93:a5:ff:37:32:45:18:56:38:f6:bf:a5:f3:e0:73:
ee:b2:5a:11:2f:6e:9f:02:49:4d:76:b7:ad:fe:74:69:1b:73:
2d:7e:61:5d:8f:64:4f:b5:bb:a9:bb:76:31:c2:66:53:da:ec:
ba:db:b2:f4:3f:5e:af:76:b6:1d:3f:14:9e:ff:5d:bc:87:da:
c4:67:55:6a:5f:6e:c4:4d:13:36:cc:32:f9:a6:36:03:b9:34:
bc:55:1c:15:b0:0d:ed:e2:41:69:0c:c3:24:c4:80:d2:ba:c5:
59:16:73:8d:d2:8b:58:ce:ad:34:36:8b:81:41:be:80:68:f0:
c0:b1:be:0d:c9:0a:9b:10:8d:37:6f:8d:07:74:2f:db:4f:ee:
71:e3:8f:6d:39:25:86:f5:4b:24:b1:38:68:2c:1e:e7:9b:ae:
0a:62:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:05 2025 by rpki-client on console.sobornost.net