Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa
File: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (raw, json)
Hash identifier: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=
Subject key identifier: DC:96:C3:69:42:D7:1A:FF:D9:B5:38:14:00:EF:94:F6:15:A5:F1:F2
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 01941FFA9E2DAC3EBEA5228A0E2833D05E82
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42333
IP address blocks: 193.25.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:2d:ac:3e:be:a5:22:8a:0e:28:33:d0:5e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc96c36942d71affd9b5381400ef94f615a5f1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:52:24:ad:52:de:22:27:f9:51:69:46:60:
94:3d:64:b3:47:65:cb:c1:01:e9:c2:cc:30:26:ee:
37:b0:3d:72:e4:94:7c:1b:d7:d5:e5:66:2d:79:e4:
ae:b6:00:85:f1:16:e6:f3:bb:e8:89:8f:5e:5a:1e:
6e:ad:f0:45:40:07:91:b3:08:da:d3:33:36:4f:64:
71:4f:9c:dd:2b:96:24:f4:76:5d:8b:b7:66:da:31:
6f:6e:f3:b0:1f:31:2e:69:df:6c:cf:01:77:39:7b:
dc:25:d7:21:71:34:6e:8c:ed:f7:93:4b:a4:77:63:
19:70:e2:70:b5:12:5a:4e:f3:d5:1b:5c:08:86:ed:
f8:c6:9d:aa:6f:db:e5:53:12:be:9d:d7:01:e4:7f:
38:17:6d:16:36:59:94:98:0d:ff:05:1a:0a:e8:31:
28:15:40:68:6d:a3:88:9b:6e:88:87:21:11:8a:0a:
cb:b8:e9:6c:e3:66:60:ad:28:b2:8d:c4:e7:1f:cc:
2e:b5:7e:df:48:69:87:b5:b7:c4:d5:a9:1c:85:d7:
99:5e:70:1e:c8:a9:e1:8e:df:06:36:b9:9e:71:37:
40:bf:e4:80:7e:44:8f:94:18:58:23:0d:5f:91:c8:
21:e8:fd:5f:7d:ad:7e:da:29:02:13:b1:47:73:ba:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:C3:69:42:D7:1A:FF:D9:B5:38:14:00:EF:94:F6:15:A5:F1:F2
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.205.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6e:6e:8f:57:ea:45:6b:7a:f5:1b:7e:9a:6b:65:c7:8d:1d:
1b:09:34:00:d2:6f:9c:fe:22:cb:5e:a1:d7:41:17:d5:d2:6e:
ea:66:39:60:98:ef:53:9c:2a:fc:c3:33:59:38:8e:e3:6e:bc:
d6:e4:4e:30:4b:b9:bb:73:33:74:1d:4a:2c:7c:f4:71:72:74:
59:2b:13:f2:8a:57:1e:d2:b9:04:9f:77:18:f3:96:dc:41:7e:
bb:37:27:74:82:88:ec:dc:94:9b:8f:98:5d:68:69:37:17:63:
9d:3e:e6:fe:a0:3c:a7:97:dd:c9:69:46:55:31:76:32:15:0a:
95:0f:59:8f:a8:bb:46:d9:72:44:9f:5e:23:9a:f7:08:44:84:
a3:50:1b:d5:c5:6e:d0:5a:f3:c6:0e:1d:76:87:5d:fe:a8:dd:
29:66:cb:0c:66:17:a4:7b:69:df:fd:e2:c5:16:ee:41:8f:6b:
32:de:be:77:e3:34:80:4d:b9:25:4d:96:65:13:5e:81:1c:3d:
23:7c:a6:65:b5:4e:3c:04:df:23:d7:81:e0:90:62:3e:3a:e8:
2e:c1:07:88:27:00:79:e3:ce:e5:66:c9:7b:e6:fd:9d:30:a2:
ed:05:8f:7a:08:b0:3c:f8:26:f4:6b:4c:55:a4:bf:7b:7f:20:
80:da:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:52 2025 by rpki-client on console.sobornost.net