Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/eQ54edgYKIUcfPhFEws-eNJ8BAA.roa
File: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (raw, json)
Hash identifier: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=
Subject key identifier: 79:0E:78:79:D8:18:28:85:1C:7C:F8:45:13:0B:3E:78:D2:7C:04:00
Certificate issuer: /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial: 019428235291BA4A651A537DBF469D9A5F0F
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/eQ54edgYKIUcfPhFEws-eNJ8BAA.roa
Signing time: Thu 02 Jan 2025 17:49:51 +0000
ROA not before: Thu 02 Jan 2025 17:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8453
IP address blocks: 194.11.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:52:91:ba:4a:65:1a:53:7d:bf:46:9d:9a:5f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Validity
Not Before: Jan 2 17:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=790e7879d81828851c7cf845130b3e78d27c0400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:93:c1:02:d4:3c:5d:8d:5d:94:2e:a8:24:
4e:25:d7:75:fd:8e:98:44:ff:bf:4d:c9:2c:8d:9b:
5f:88:19:18:bc:7a:2f:82:65:20:c6:10:ae:9e:73:
28:44:07:7d:cd:28:d7:3d:1e:4f:33:e0:52:3d:da:
b7:59:2f:fd:24:f2:a5:5e:fe:ad:b0:b5:e0:17:38:
3b:a7:5d:e5:61:f9:d4:0f:42:75:d7:e1:cd:a0:53:
af:fe:6d:ff:b4:5d:8c:75:9d:6e:37:1c:a5:25:ae:
c4:44:ed:f9:e9:96:4f:e9:fe:93:20:5f:0c:08:ab:
b7:b6:a8:99:a0:78:ea:8d:37:28:ec:fb:27:25:7c:
70:d6:5a:ec:fd:be:a0:38:c6:e6:ed:8e:18:c6:b9:
ed:e8:cd:c3:89:a9:ff:11:a4:4e:b8:fb:eb:c6:30:
6e:68:2a:89:a7:72:4a:ed:a0:a6:f3:3e:64:45:92:
f9:01:df:eb:37:24:74:95:e5:97:cf:24:11:f2:f7:
40:16:78:b7:fc:72:8e:e5:49:eb:a7:1c:42:c4:7a:
bb:a5:8d:7a:f9:60:17:0e:91:99:af:53:23:28:d1:
48:df:d2:e4:89:7f:0b:51:3f:0e:a9:9c:dc:ff:de:
eb:74:42:49:6a:7c:74:fb:f4:e8:8c:55:ca:41:30:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0E:78:79:D8:18:28:85:1C:7C:F8:45:13:0B:3E:78:D2:7C:04:00
X509v3 Authority Key Identifier:
keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/eQ54edgYKIUcfPhFEws-eNJ8BAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.136.0/21
Signature Algorithm: sha256WithRSAEncryption
45:8b:0c:e2:86:b0:2d:10:4e:c0:e2:f6:47:dd:d7:93:f0:f3:
46:7f:5c:1f:09:8c:1b:4b:0e:41:2f:88:51:aa:25:1e:24:26:
7a:f1:21:82:5a:56:c8:ab:90:81:5a:ee:f5:4f:d3:2d:bc:30:
a3:e5:15:1f:72:b1:34:4a:fa:bd:4b:0a:b4:ca:c7:fc:ff:6e:
c4:d6:c2:8c:11:62:a9:10:bf:c9:2f:1a:57:81:c2:9f:5e:51:
4d:5a:8e:45:e4:77:a7:3b:b9:d7:d6:77:63:4a:3a:54:cf:3f:
cc:ac:b0:62:4f:e0:93:a4:8f:fd:9e:f8:22:72:40:e2:c1:31:
57:15:17:9b:f0:8e:35:9b:9d:31:ab:17:e2:76:5f:68:5a:13:
60:51:ef:67:2d:44:68:6a:7b:9d:fb:88:47:37:55:be:f4:3e:
21:17:c2:2f:dd:4a:84:54:03:05:ee:f1:fc:8a:f4:e2:23:8d:
84:d6:1d:a4:b5:21:ca:10:e3:4d:9d:61:30:eb:a5:8c:46:85:
41:18:18:ad:f4:6c:47:99:15:d0:66:84:d8:bd:b8:fb:7d:e7:
ad:df:d1:fe:bd:8f:03:65:a6:02:88:18:3b:0d:18:81:26:37:
af:ef:15:12:8b:a9:96:c1:31:21:69:fc:83:7c:a8:e6:d9:55:
f2:82:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net