Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rVRMkskBzwl9zi-JY6YFOAI1hcA.roa
File: rVRMkskBzwl9zi-JY6YFOAI1hcA.roa (raw, json)
Hash identifier: v08kT5N9ZXsSCeQYLs3P8oE3ZLKAofwCwujUwPJ72Pc=
Subject key identifier: AD:54:4C:92:C9:01:CF:09:7D:CE:2F:89:63:A6:05:38:02:35:85:C0
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BA15BF68E51271C4E8B1D2A0B8EE
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rVRMkskBzwl9zi-JY6YFOAI1hcA.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199815
IP address blocks: 193.59.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ba:15:bf:68:e5:12:71:c4:e8:b1:d2:a0:b8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad544c92c901cf097dce2f8963a60538023585c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:03:90:ef:17:95:33:f1:31:ec:4a:39:f0:
ab:5b:33:54:d4:14:2a:39:85:eb:36:5e:73:5d:e3:
01:5e:be:f9:b9:8c:2e:a8:e0:13:8f:e7:91:57:c5:
91:f5:72:44:e3:be:d9:e9:6d:9c:71:0a:67:63:c2:
f2:f3:c3:a6:75:39:a0:59:ad:b4:98:c8:b2:d5:86:
eb:ac:51:d9:e2:32:0c:8e:3d:46:a1:47:41:fa:fb:
56:bb:99:ad:d3:7e:05:73:bb:4b:96:93:97:70:76:
bf:ee:09:ef:fb:58:79:10:ec:56:fe:47:c1:b3:c0:
95:1f:7d:6c:70:b0:93:d0:d9:60:92:ee:6e:cd:4c:
2e:58:dc:a6:78:1b:2f:20:1b:4d:40:24:f6:3d:dc:
90:18:af:c3:53:0a:7a:69:d8:c1:a4:ed:0e:6f:a4:
18:c6:4f:55:76:15:f7:f5:8b:ab:eb:79:fa:94:65:
1c:2b:2d:e2:af:85:56:6e:b5:9e:1f:72:05:52:25:
1f:6e:91:3e:95:6b:80:0e:c9:64:d2:bf:04:a2:16:
e2:e6:72:d1:ab:40:32:8f:00:aa:b6:61:b4:3d:fe:
0e:ae:3c:31:3b:a8:e1:b0:80:55:8e:58:21:58:f3:
62:84:ff:6f:97:10:32:9a:b1:2d:f1:11:49:7b:49:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:54:4C:92:C9:01:CF:09:7D:CE:2F:89:63:A6:05:38:02:35:85:C0
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/rVRMkskBzwl9zi-JY6YFOAI1hcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.176.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d7:b1:49:f5:ac:1c:db:34:72:1e:d5:f0:27:dd:08:13:39:
21:c0:b7:96:50:eb:57:96:8f:74:41:05:3d:20:18:0a:02:c6:
e3:00:fa:ee:ee:a7:03:db:b0:0b:26:7f:47:77:fa:c6:26:a7:
c0:bb:21:c9:71:79:ac:f3:27:65:2e:0e:8a:f6:9b:4a:71:d1:
11:26:ab:28:45:e3:bb:37:75:8e:7e:6d:fb:f3:c1:f4:f8:6d:
fe:96:05:30:82:2e:16:ac:88:39:f5:b2:41:09:e2:86:af:d9:
d3:f8:39:cb:7b:fd:2b:19:64:81:98:c0:c4:cf:f7:bc:3d:77:
17:da:9e:9f:17:55:cf:b3:80:53:66:a7:db:0d:1c:0a:aa:6e:
d9:3d:01:34:00:31:f4:62:8f:ab:63:1c:5f:7a:83:3d:6f:1f:
e9:1e:eb:c7:bd:b4:e6:7e:dd:bd:e6:78:49:df:21:85:17:94:
0a:a6:49:47:7a:1e:6b:93:ac:00:6d:00:16:f2:3b:ec:81:80:
82:1f:10:a4:10:5e:a4:57:7f:49:1c:32:bd:33:f7:6c:df:17:
52:00:29:3d:7c:8f:e7:be:dc:d1:d1:09:f5:69:aa:8e:30:4b:
83:6a:5c:63:55:99:40:47:f0:63:14:83:bb:0d:3e:15:6e:31:
e3:c0:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net