Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa
File: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (raw, json)
Hash identifier: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=
Subject key identifier: FA:3A:6F:80:E1:81:6F:8B:52:00:09:42:F5:66:62:5C:22:A8:58:03
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 01942368DE66CD72F27E8A4DA354858329E5
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa
Signing time: Wed 01 Jan 2025 19:47:42 +0000
ROA not before: Wed 01 Jan 2025 19:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205729
IP address blocks: 149.62.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:de:66:cd:72:f2:7e:8a:4d:a3:54:85:83:29:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jan 1 19:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa3a6f80e1816f8b52000942f566625c22a85803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:0a:04:07:5a:fe:a6:b0:c4:10:bf:18:08:
f4:db:a1:09:bb:81:39:33:66:69:ea:ee:d0:9e:6c:
90:c9:8f:f9:fa:23:3e:60:65:58:f7:1f:19:7d:e7:
fc:b3:ff:d7:7d:1e:80:8e:f7:5e:45:fc:5d:cb:e3:
f7:2e:19:c9:d5:0f:b1:b2:9c:f0:7f:92:b7:db:4d:
8e:45:c1:de:ce:33:2b:f7:2f:28:24:9d:9e:d2:8d:
e0:32:74:65:01:62:60:54:60:d3:7b:03:c3:f6:ae:
b5:c7:29:c9:84:55:13:7a:bf:2a:90:7b:e6:73:72:
82:7e:df:2c:97:8b:39:7f:7d:85:da:8f:db:59:ca:
dd:85:97:7b:d8:d8:2c:54:e0:c8:96:8c:ed:03:e3:
31:f9:7f:3d:aa:09:e2:a2:65:1e:5e:9d:f9:86:5d:
71:6f:94:a6:db:3d:0d:42:68:3d:46:ef:74:79:f5:
c5:ed:b3:0f:f0:f7:ab:d2:43:07:97:12:77:1d:27:
8e:06:fd:2c:74:8e:a1:3e:c8:10:cc:3c:4d:cb:92:
d5:2d:c7:2b:af:8c:65:50:af:60:f7:10:db:2c:5c:
f3:d9:89:06:08:47:1d:5e:3f:64:bd:e8:bc:52:7e:
a0:62:8e:5a:a7:d6:a5:3c:cb:4d:a6:fe:cd:8c:51:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3A:6F:80:E1:81:6F:8B:52:00:09:42:F5:66:62:5C:22:A8:58:03
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.32.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fb:bf:f0:1d:c5:b0:73:fa:ad:96:15:d5:7a:23:0e:eb:aa:
2e:3c:52:d2:de:af:72:11:59:11:6f:d5:ed:0e:f2:c3:46:32:
08:a1:1f:5d:81:67:7d:44:a6:70:be:47:52:8a:c8:e9:25:b0:
59:f8:b6:e5:05:97:6d:c9:f3:39:6e:82:9e:1f:50:b7:10:b8:
c2:06:dd:ce:b9:b0:8c:c3:1d:84:52:42:a4:dc:8d:43:06:c1:
09:be:c7:a8:67:61:40:61:f1:85:c5:10:d4:7c:7f:e0:51:2a:
86:95:a3:e5:0b:86:81:6a:00:2d:19:93:91:01:82:61:6b:c1:
69:32:8b:cf:5f:a8:64:21:f0:27:79:52:ae:b0:7b:86:1c:3f:
e5:bf:b1:f4:68:2c:55:04:b5:51:bc:ac:d4:df:f3:ce:62:77:
06:9f:b7:35:d1:25:0c:60:5a:e4:04:cb:1a:03:b3:15:f2:dd:
28:7f:5b:14:c1:b4:cb:48:9e:f8:3e:22:ce:4d:79:bb:59:6a:
6b:25:47:d5:34:bf:81:7d:88:eb:88:4c:bb:9e:9b:ee:41:7c:
c3:3f:c7:e7:30:32:a4:f8:04:8c:0e:e7:53:84:a6:57:3b:e9:
9e:6c:48:8e:1c:0b:f9:df:95:21:7b:6e:39:0c:61:93:a7:af:
e0:b3:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net