Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa
File: DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa (raw, json)
Hash identifier: rQv6lxTZYs4XDzxYfgAGiCr8L0iuSbohO7siOw9JGpU=
Subject key identifier: 0E:E6:AA:7E:95:91:8D:00:9C:97:FC:26:34:52:ED:D3:46:B6:57:0D
Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial: 019423D6ACB1FB2ABA3CB92F62132BD3CB9D
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207470
IP address blocks: 193.104.98.0/24 maxlen: 24
193.104.110.0/24 maxlen: 24
193.104.130.0/24 maxlen: 24
193.104.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ac:b1:fb:2a:ba:3c:b9:2f:62:13:2b:d3:cb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ee6aa7e95918d009c97fc263452edd346b6570d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:fc:89:cc:82:6a:77:b8:cc:04:b9:05:15:
06:48:93:62:23:a4:7a:77:63:1c:b7:aa:80:ad:95:
79:6d:ed:99:09:15:e1:ab:d8:8f:86:4e:22:a2:3c:
05:93:16:0a:76:28:3e:db:40:cd:cc:fa:bd:96:d5:
07:18:51:3d:5f:e8:2d:5d:1c:52:79:96:9d:46:b7:
0c:7f:6b:6b:3c:2c:55:57:00:a5:db:19:d6:09:b3:
f9:33:9f:28:5c:1d:2b:d1:52:72:6c:18:b1:85:59:
4d:09:09:d2:a2:80:97:41:bd:d0:5c:29:63:0e:66:
50:b4:a7:4f:0b:80:d8:d4:bf:ae:df:01:75:da:2c:
d0:03:ed:45:24:46:c1:75:03:a0:d3:cc:00:a5:0f:
8c:ad:0c:d1:b3:e0:0f:1c:7e:08:9e:43:83:df:e6:
f6:f4:b0:3b:48:25:49:60:56:e2:35:91:eb:2f:60:
71:36:a4:2f:74:5a:c0:79:1a:9e:a1:80:2b:08:72:
7c:49:3d:cc:8c:e7:db:c8:cf:78:70:5c:d7:11:99:
4d:75:23:52:28:48:88:11:cf:fe:40:d2:56:30:d4:
06:06:c6:04:8e:50:c5:dc:f4:a1:32:4a:7c:b2:62:
48:3d:6f:65:6c:b7:ae:00:8f:85:94:88:6a:85:d8:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:AA:7E:95:91:8D:00:9C:97:FC:26:34:52:ED:D3:46:B6:57:0D
X509v3 Authority Key Identifier:
keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.98.0/24
193.104.110.0/24
193.104.130.0/24
193.104.141.0/24
Signature Algorithm: sha256WithRSAEncryption
53:42:a4:2b:91:62:af:9c:4f:c9:58:91:88:48:a6:11:78:f1:
bf:e2:0e:7e:4a:48:4d:92:2c:1d:d3:c0:57:cb:1d:70:44:15:
10:80:c1:fe:b7:77:01:89:17:5a:1f:dc:53:fc:04:c3:db:f7:
a2:26:85:98:58:d1:b7:38:2d:c3:fa:fe:99:78:c6:8c:d8:02:
e5:6f:73:f9:1a:13:21:4f:89:e1:e4:0b:f5:23:1a:61:ff:bb:
a9:01:e0:f7:52:32:4d:77:bf:c8:5a:88:d0:0d:86:c9:0a:3a:
2f:2a:ef:b7:59:b1:11:0d:de:ec:cc:99:46:b9:59:61:cc:1a:
a0:ab:fa:3c:67:47:5e:85:82:a0:ed:6a:4d:4c:f2:d8:3a:20:
7b:8e:3c:df:ef:18:61:e3:7f:14:76:cf:e3:cb:10:3a:82:7f:
83:42:44:56:da:f0:2e:a4:76:85:3f:c5:65:f0:3e:4b:34:d2:
c7:d6:80:48:25:2e:d4:82:23:4d:0e:78:49:41:35:4b:5a:3b:
84:c8:a2:6d:b8:5d:3f:58:f9:90:36:8d:48:c1:3e:a3:ca:39:
92:1e:2d:64:77:8d:4d:2c:bb:8c:6c:38:0a:3b:dc:60:56:d1:
85:26:71:0e:ff:e7:65:ca:62:55:ce:c5:df:05:5e:e3:2a:f3:
e4:8b:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net