Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/0MC1362R9lRRGpq84ZgFyJggIsA.roa
File: 0MC1362R9lRRGpq84ZgFyJggIsA.roa (raw, json)
Hash identifier: 2oe5jKK2VDNOSC6ja+1wPu+cY+lyRN63lTJAf4/SoR0=
Subject key identifier: D0:C0:B5:DF:AD:91:F6:54:51:1A:9A:BC:E1:98:05:C8:98:20:22:C0
Certificate issuer: /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Certificate serial: 0194266C2644BC51652A8957FC40CAF2AD34
Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/0MC1362R9lRRGpq84ZgFyJggIsA.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3232
IP address blocks: 193.17.43.0/24 maxlen: 24
193.105.132.0/24 maxlen: 24
194.165.45.0/24 maxlen: 24
194.165.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:26:44:bc:51:65:2a:89:57:fc:40:ca:f2:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0c0b5dfad91f654511a9abce19805c8982022c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:32:7e:09:e6:38:ed:3a:92:50:c7:c0:94:
f9:9e:63:fe:1d:a6:65:00:10:bd:5e:96:29:88:5b:
24:98:41:17:98:39:63:6d:81:4f:40:3c:5d:1f:53:
f5:1b:9b:97:2f:57:9e:a6:70:51:12:5d:c8:79:d4:
1f:0b:46:66:a1:f8:30:28:d6:16:cb:2d:f1:db:6d:
40:fd:91:b6:d2:35:c8:02:0f:89:55:be:a5:8c:54:
b2:b3:3b:c5:ad:1f:4d:1a:6a:11:ed:29:52:b2:b4:
77:7d:74:db:b9:da:43:16:8f:8c:ac:56:04:b1:dd:
0c:ac:ad:4e:c6:4e:f5:4e:e3:6a:d0:14:e5:3c:34:
5d:dd:2c:c2:7d:38:ef:e7:ec:ba:e2:cd:b1:da:76:
ba:d0:ae:12:0d:97:c1:a9:98:53:f5:2f:bc:4e:4d:
b2:b3:5e:64:f2:b8:55:d5:7b:63:92:e9:7c:2e:72:
b9:b8:0a:37:15:0d:1f:3b:e7:32:d3:12:01:d0:57:
9a:09:80:0f:4d:3e:3f:44:49:2c:22:16:63:39:7e:
e2:fc:43:5a:75:6b:9f:7f:01:f8:19:a9:99:2c:c8:
a2:a2:3f:a4:96:11:c5:d0:2e:89:5c:7d:27:38:28:
20:93:0f:01:10:b0:d4:40:f7:21:76:e9:54:f2:1f:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:B5:DF:AD:91:F6:54:51:1A:9A:BC:E1:98:05:C8:98:20:22:C0
X509v3 Authority Key Identifier:
keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/0MC1362R9lRRGpq84ZgFyJggIsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.43.0/24
193.105.132.0/24
194.165.45.0/24
194.165.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:93:07:2d:1a:10:44:fe:eb:70:ea:d1:06:c0:6f:16:e7:69:
11:1e:fd:bd:45:be:05:d0:6b:1c:69:ca:bb:f7:c0:7c:7b:57:
1d:00:d9:80:99:3a:da:db:1d:7a:f0:f6:4c:cd:d0:24:12:c8:
ea:e3:36:08:c7:e2:49:be:22:6c:ab:70:7d:c6:4c:f2:31:7f:
5f:03:b6:cc:12:4c:23:99:32:60:61:8f:3e:31:94:0b:92:46:
41:c2:7e:70:8a:de:10:b5:68:10:f3:30:d8:66:17:2a:74:ac:
a6:7a:48:70:12:04:96:54:ba:31:45:a2:65:4c:0f:1e:29:a7:
5b:9b:aa:b8:0e:8e:59:3c:9e:e3:05:80:63:ad:f5:89:b9:12:
cd:4c:e4:08:bb:17:33:2f:4f:e5:96:ab:d8:26:dd:94:8d:3f:
51:ae:72:8a:81:1b:72:57:80:c9:f1:09:e0:de:27:1a:3c:ef:
4e:8d:54:fc:cf:65:f0:df:6d:8e:e3:08:e6:b3:fe:95:af:0a:
bc:99:3e:08:b1:15:b2:13:fb:f8:35:c1:e9:85:c2:d1:ee:8e:
0a:39:59:5e:be:9b:26:4f:a7:f4:d5:dc:7b:38:0a:e7:19:00:
66:0b:16:c2:93:f2:26:31:99:84:24:e7:f5:fa:94:60:11:74:
45:95:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net