Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/eOnuHiStsO3O13pB5kbTSUIQpmU.roa
File: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (raw, json)
Hash identifier: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=
Subject key identifier: 78:E9:EE:1E:24:AD:B0:ED:CE:D7:7A:41:E6:46:D3:49:42:10:A6:65
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 0194221FE259B88120F91D8A0FAE464D8848
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/eOnuHiStsO3O13pB5kbTSUIQpmU.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9153
IP address blocks: 193.168.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e2:59:b8:81:20:f9:1d:8a:0f:ae:46:4d:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78e9ee1e24adb0edced77a41e646d3494210a665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:50:0f:3d:ef:30:a9:53:6b:2a:95:65:cb:
30:64:fd:05:e5:0a:fc:32:58:79:43:11:89:5d:50:
bf:e5:1c:b5:df:15:38:4f:46:b8:47:e9:dd:9f:fc:
d0:fa:7b:af:9f:8f:e0:e3:8a:37:ea:23:88:ff:9e:
a9:07:5f:7c:3d:09:58:1b:58:5b:91:e5:4d:b9:e3:
f9:40:c6:80:4e:e1:d3:22:7b:d8:7b:23:ca:98:c8:
a1:83:a5:8e:49:7a:73:4c:b0:a6:9e:22:5f:60:d0:
9a:a0:25:93:65:2d:bb:d0:4b:26:8a:44:69:5d:43:
85:20:22:f2:5a:97:3d:01:62:f8:03:a0:8b:3b:21:
98:40:db:ba:c1:72:16:3f:66:7d:5d:a8:8f:38:1c:
8c:1e:b5:5c:36:d8:14:fb:57:6d:5d:5f:6b:0c:56:
11:b1:9a:45:1b:ab:70:1d:07:05:a3:e5:d9:57:43:
dd:0b:ab:9f:43:a0:70:f0:df:86:ba:31:50:03:a3:
e4:34:00:24:c8:f2:82:b3:4f:4a:f9:f2:53:32:f1:
7c:35:79:44:ff:5e:e0:98:ab:6e:ab:b7:6d:ec:dd:
dc:d0:e5:67:86:1f:bf:a0:b9:f4:db:bc:ac:43:8b:
41:f1:2c:f8:ca:f6:9b:23:82:e9:ff:c3:53:cd:82:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E9:EE:1E:24:AD:B0:ED:CE:D7:7A:41:E6:46:D3:49:42:10:A6:65
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/eOnuHiStsO3O13pB5kbTSUIQpmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.132.0/24
Signature Algorithm: sha256WithRSAEncryption
50:76:9c:a5:14:39:67:9b:0f:38:3c:50:ac:b9:3e:42:e1:f9:
70:3a:f2:09:43:28:c2:16:a1:92:df:80:70:83:b5:52:30:de:
91:3a:6c:61:53:8d:d2:c3:c2:9f:59:a9:35:02:4b:8b:0e:bc:
5d:b1:f3:b2:97:32:8e:06:fa:d5:4d:3d:df:f1:8a:56:95:8e:
aa:85:33:86:fd:8e:f7:65:b6:88:4d:ed:f1:c9:98:e6:61:17:
ef:7c:cb:eb:83:ee:5f:fd:a5:fc:e3:d5:25:1b:29:09:85:71:
e8:2c:80:58:d5:87:a9:8e:97:fb:ea:2c:68:0b:55:80:f7:ea:
2e:93:99:92:f4:ab:02:46:e0:8d:53:e2:cf:52:3e:4e:40:da:
6e:35:c0:ae:87:cb:3f:fa:4e:3c:e4:64:8a:23:af:7d:7b:c0:
4b:28:ba:18:49:c6:34:80:1d:5d:3e:4b:20:a5:6d:d6:d7:4a:
b0:e6:b3:1b:6d:f3:96:51:20:01:f1:8f:1f:76:84:f1:ec:54:
cd:ad:68:57:fb:b6:53:49:09:e5:d7:41:5a:2b:2a:56:fe:9b:
3a:6e:60:55:8b:c8:31:ec:1e:07:e5:cd:4f:35:96:26:93:25:
39:35:e1:42:f2:73:3b:a0:90:a0:6c:88:03:c1:87:46:0d:36:
2f:4d:1f:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH+JZuIEg+R2KD65GTYhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzY3OTQzNTczZDZiMzVlYmFjZTFhMmYzNDhjYTNmMDA1
NmMxYWIwHhcNMjUwMTAxMTM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGU5ZWUxZTI0YWRiMGVkY2VkNzdhNDFlNjQ2ZDM0OTQyMTBhNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+xQDz3vMKlTayqVZcswZP0F5Qr8
Mlh5QxGJXVC/5Ry13xU4T0a4R+ndn/zQ+nuvn4/g44o36iOI/56pB198PQlYG1hb
keVNueP5QMaATuHTInvYeyPKmMihg6WOSXpzTLCmniJfYNCaoCWTZS270EsmikRp
XUOFICLyWpc9AWL4A6CLOyGYQNu6wXIWP2Z9XaiPOByMHrVcNtgU+1dtXV9rDFYR
sZpFG6twHQcFo+XZV0PdC6ufQ6Bw8N+GujFQA6PkNAAkyPKCs09K+fJTMvF8NXlE
/17gmKtuq7dt7N3c0OVnhh+/oLn027ysQ4tB8Sz4yvabI4Lp/8NTzYLyHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHjp7h4krbDtztd6QeZG00lCEKZlMB8GA1UdIwQY
MBaAFB52eUNXPWs166zhovNIyj8AVsGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTct
YTQwOGQ2N2JmZjM3LzEvZU9udUhpU3RzTzNPMTNwQjVrYlRTVUlRcG1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTctYTQwOGQ2N2JmZjM3
LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaiEMA0G
CSqGSIb3DQEBCwUAA4IBAQBQdpylFDlnmw84PFCsuT5C4flwOvIJQyjCFqGS34Bw
g7VSMN6ROmxhU43Sw8KfWak1AkuLDrxdsfOylzKOBvrVTT3f8YpWlY6qhTOG/Y73
ZbaITe3xyZjmYRfvfMvrg+5f/aX849UlGykJhXHoLIBY1Yepjpf76ixoC1WA9+ou
k5mS9KsCRuCNU+LPUj5OQNpuNcCuh8s/+k485GSKI699e8BLKLoYScY0gB1dPksg
pW3W10qw5rMbbfOWUSAB8Y8fdoTx7FTNrWhX+7ZTSQnl10FaKypW/ps6bmBVi8gx
7B4H5c1PNZYmkyU5NeFC8nM7oJCgbIgDwYdGDTYvTR8R
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net