Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/67owXOjZq5o3HDXuYLsiV8c-S6U.roa
File: 67owXOjZq5o3HDXuYLsiV8c-S6U.roa (raw, json)
Hash identifier: UxRan1KNvT2Va4G2MZKcbUitVgmYW/xtvGPeO/mIwow=
Subject key identifier: EB:BA:30:5C:E8:D9:AB:9A:37:1C:35:EE:60:BB:22:57:C7:3E:4B:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019615CE6D9BD869464221B55FBF7FECC7B7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/67owXOjZq5o3HDXuYLsiV8c-S6U.roa
Signing time: Tue 08 Apr 2025 14:29:32 +0000
ROA not before: Tue 08 Apr 2025 14:29:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34470
IP address blocks: 192.124.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:ce:6d:9b:d8:69:46:42:21:b5:5f:bf:7f:ec:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 8 14:29:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebba305ce8d9ab9a371c35ee60bb2257c73e4ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:86:4c:7a:a8:ab:b9:b1:d5:94:32:6e:04:
d7:58:61:46:84:0e:fe:66:12:6d:38:82:7c:02:5b:
41:06:e1:ec:8e:7c:f1:cb:78:92:f1:9a:84:25:63:
fa:96:de:dc:f9:4a:d7:68:90:ec:5c:19:ee:32:08:
06:d5:b3:a2:48:e9:50:29:d1:c6:6e:dc:a2:ff:26:
48:df:82:c1:fe:e8:1b:5c:ca:7f:e3:6e:d4:68:f5:
25:2c:20:24:ae:38:6e:b2:41:18:82:44:41:48:0c:
82:3c:a5:6f:a2:c6:23:66:5a:9f:f2:7e:4c:93:a3:
0e:2e:a2:e1:27:42:7f:37:60:d0:f3:73:4b:de:a9:
73:95:4e:20:93:6b:2b:b3:c0:0c:9a:5f:03:b7:1b:
e4:5b:ec:91:40:b1:42:79:de:d7:5c:10:2e:c5:84:
bc:37:f7:74:82:b2:80:37:8e:c1:85:00:c5:73:ab:
db:72:34:e6:e2:c5:08:ac:0a:9e:d1:04:70:ec:44:
72:c2:e0:61:64:75:94:4a:f6:7c:8d:8c:b7:9d:aa:
af:06:e4:e3:1a:04:1b:f4:90:aa:10:f4:13:95:cd:
04:de:a7:40:44:8f:cf:c5:e0:0d:73:44:f9:a7:bd:
59:60:44:e2:19:e9:e2:49:f1:2b:a1:54:3d:2c:41:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:30:5C:E8:D9:AB:9A:37:1C:35:EE:60:BB:22:57:C7:3E:4B:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/67owXOjZq5o3HDXuYLsiV8c-S6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.171.0/24
Signature Algorithm: sha256WithRSAEncryption
13:44:72:67:be:bf:15:09:4b:01:5b:f1:b1:28:7e:ed:f6:bd:
a7:07:2c:36:02:0c:71:7f:ef:ca:3d:ec:c1:3e:d9:5a:1a:5f:
b2:58:75:4f:e1:48:b3:51:7c:9e:4a:e3:24:1c:39:35:35:33:
96:48:23:9e:1b:db:96:1b:0e:97:8c:d3:35:4b:79:5d:8c:d6:
2d:02:1b:c1:00:52:5f:fe:d7:48:4f:52:8c:c8:b9:bb:17:b3:
bd:21:12:1a:9e:46:8c:de:51:9f:2a:ab:a6:3c:b7:20:62:50:
8d:9a:0f:8b:5d:db:d7:41:55:be:41:33:0c:3c:4b:4d:2c:b9:
48:44:ad:15:23:33:94:4b:38:3b:cd:e5:c0:f2:05:3f:8c:d1:
39:8d:cd:d9:f5:57:92:43:9e:78:d9:65:6a:b9:a3:9d:ba:82:
bc:7d:85:62:69:78:d2:16:9b:96:4f:a1:5b:b3:0b:ff:fe:1a:
dd:b7:c6:41:4a:d8:82:b9:85:c3:a7:07:ad:04:30:06:f7:59:
4a:c3:2d:d2:62:5a:57:63:81:b8:de:26:9c:e7:c4:cd:3a:bb:
90:61:bd:61:df:88:1e:93:00:01:07:d6:6b:e2:89:51:67:ae:
8f:ef:6d:b6:e5:d3:77:3d:83:b0:c7:6a:f6:21:8e:bf:ff:f6:
b9:ca:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net