Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/VUbDzg-9AyYevbePTrpEdiRqwN4.roa
File: VUbDzg-9AyYevbePTrpEdiRqwN4.roa (raw, json)
Hash identifier: t4/eKGmP5PXlxUDXBzE6y3aXXoUIuyqOs01O0kBzip8=
Subject key identifier: 55:46:C3:CE:0F:BD:03:26:1E:BD:B7:8F:4E:BA:44:76:24:6A:C0:DE
Certificate issuer: /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial: 019424B2C631741C6BCB1E9D434A4D737D8F
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/VUbDzg-9AyYevbePTrpEdiRqwN4.roa
Signing time: Thu 02 Jan 2025 01:48:03 +0000
ROA not before: Thu 02 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28839
IP address blocks: 193.138.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c6:31:74:1c:6b:cb:1e:9d:43:4a:4d:73:7d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
Validity
Not Before: Jan 2 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5546c3ce0fbd03261ebdb78f4eba4476246ac0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:cc:91:ef:72:48:a7:10:4f:ef:7a:8c:25:
d7:82:fc:f5:49:fd:0a:eb:10:d3:24:f1:ae:f8:a9:
f6:b9:fb:46:0b:9e:aa:f3:31:16:77:45:34:4a:af:
48:1e:64:a3:ae:13:03:e5:d7:b1:0b:77:ba:0e:d0:
ad:78:db:10:cd:4a:cc:17:b7:2a:84:da:eb:d0:2e:
f7:8f:76:f8:b4:9b:10:ea:53:01:60:21:c4:5a:49:
25:59:2a:a4:dd:9a:28:de:a5:72:f0:cb:cf:48:d0:
bc:35:58:aa:9a:e6:f3:9d:47:58:e8:1b:32:fc:c3:
54:1b:82:e3:13:76:c3:10:f2:26:0b:98:c5:fb:64:
0d:89:d7:66:cf:98:03:e2:ff:d5:dc:0c:94:1e:44:
32:64:e2:ea:b9:2b:7d:69:12:3e:92:6e:4d:34:e1:
18:1d:63:54:aa:85:99:a0:eb:2a:c1:25:2d:52:d8:
ee:a3:35:41:08:da:ea:46:4c:17:72:c0:be:22:d4:
d1:f8:29:46:79:71:12:b5:c1:88:b7:6e:c2:57:87:
3e:5a:0f:b0:2a:f3:7e:26:d0:e0:c4:98:46:91:58:
45:29:a1:61:ec:86:0b:b2:b9:6a:65:09:6b:58:6c:
24:9a:d7:07:a9:4e:93:02:68:a0:d7:66:14:de:ba:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:C3:CE:0F:BD:03:26:1E:BD:B7:8F:4E:BA:44:76:24:6A:C0:DE
X509v3 Authority Key Identifier:
keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/VUbDzg-9AyYevbePTrpEdiRqwN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.94.0/24
Signature Algorithm: sha256WithRSAEncryption
78:61:bf:dc:11:1e:a7:b9:d2:61:81:38:16:89:ba:da:72:c0:
bc:01:23:f7:3f:d5:29:e3:17:5e:39:a7:64:70:16:bf:c9:9b:
9a:b5:fa:d4:0a:df:14:11:c5:28:7e:02:62:d4:c9:fb:a3:27:
3b:dc:fe:f0:2b:65:1e:11:c7:98:cc:d1:87:91:74:b0:50:c5:
55:4a:5d:05:77:ab:e1:43:d9:05:e9:cf:9e:e0:3d:dc:fe:88:
ea:c1:ed:6e:5b:d2:79:7b:72:f3:a4:d5:f7:51:43:5c:02:5c:
d0:ce:b7:80:29:c7:9b:c3:01:a3:99:11:ff:5d:4f:85:e2:63:
ab:35:bd:28:4c:f1:45:f1:1a:fe:d3:c0:fe:c0:c3:83:1a:c6:
f7:bf:90:f0:27:c8:4c:62:44:82:42:59:ca:53:f6:bb:d1:26:
cf:f0:3e:76:f1:39:97:e5:f3:a2:6b:86:68:68:65:93:09:9a:
5f:6f:4b:b8:13:69:2e:b9:33:f2:73:58:a3:59:81:27:78:be:
5b:52:8d:eb:4e:55:12:8f:6c:2b:bb:e4:db:f1:ae:ca:4f:0b:
fe:97:7b:79:f1:77:2d:22:29:78:42:69:9f:25:a4:07:1e:46:
ca:3e:57:92:a9:f4:2b:5c:93:83:37:2d:68:df:bf:4a:bd:3e:
c2:d4:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:42 2025 by rpki-client on console.sobornost.net