Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/pDSqiruHTrt5wT6tXenOPgXVrZ8.roa
File: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (raw, json)
Hash identifier: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=
Subject key identifier: A4:34:AA:8A:BB:87:4E:BB:79:C1:3E:AD:5D:E9:CE:3E:05:D5:AD:9F
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 01942067FE3A6F497FD8069D2B2E139F256B
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/pDSqiruHTrt5wT6tXenOPgXVrZ8.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50289
IP address blocks: 88.84.193.0/24 maxlen: 24
88.84.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fe:3a:6f:49:7f:d8:06:9d:2b:2e:13:9f:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a434aa8abb874ebb79c13ead5de9ce3e05d5ad9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:6c:22:70:80:36:77:da:d0:07:02:d9:1a:
2b:6c:cc:6c:32:49:4c:02:03:b0:40:2b:85:32:00:
54:32:3f:6f:e7:fd:91:71:63:c3:80:c9:57:cd:db:
30:d7:04:f3:51:7a:ce:cc:06:29:57:78:d0:d8:d2:
e3:1a:78:71:8f:bc:af:1e:d5:0e:06:4c:89:b5:ec:
d8:af:e2:34:c7:10:64:26:6d:e4:35:09:7c:a7:81:
16:2d:17:d6:1c:ca:96:14:90:22:04:56:c0:47:f6:
35:55:b1:ac:32:fc:dc:53:86:22:5b:3d:f2:3e:d9:
fb:3f:10:64:a9:49:4d:66:2e:03:34:f4:62:d2:09:
2d:00:7b:67:57:eb:40:f1:cf:94:10:da:07:6a:23:
01:2d:21:74:65:21:64:08:3b:a7:f9:9e:cf:fd:05:
5d:23:c7:d3:e4:eb:e9:f7:ba:ef:3e:d4:10:d0:4a:
60:75:f2:0a:c3:7f:d7:26:95:df:fc:22:99:31:de:
c8:0e:8c:e5:a4:3c:a2:27:c7:b9:fb:63:e7:65:ef:
05:44:4b:46:7a:0a:a6:fa:48:be:6e:25:be:b1:6e:
1a:33:e9:e0:5b:9a:fa:b7:03:c0:c2:7e:12:98:b8:
33:b3:97:48:0f:8b:67:35:d9:f0:db:ca:f9:71:ad:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:AA:8A:BB:87:4E:BB:79:C1:3E:AD:5D:E9:CE:3E:05:D5:AD:9F
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/pDSqiruHTrt5wT6tXenOPgXVrZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.193.0/24
88.84.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7e:05:c3:c4:9e:fd:07:ce:77:ae:04:93:eb:f3:e1:af:18:
5e:f3:5f:71:eb:c4:e3:40:dc:58:4e:7c:fc:ec:78:96:6d:cc:
b4:f0:5b:e1:c1:01:1d:7a:9a:ac:aa:b2:ab:bd:cd:25:d8:65:
c0:5d:5b:d4:f2:cd:d5:bd:6f:9a:8c:ec:07:53:4e:7a:20:86:
fd:a6:78:94:34:5e:ea:44:79:c9:db:36:a5:c7:e3:49:6e:9b:
fe:b5:65:6e:93:71:e5:fd:54:8d:0f:6b:b6:50:eb:80:75:d0:
5f:83:a2:c8:d9:b6:ee:1e:8b:02:c3:82:29:6e:a3:a6:b7:e3:
d1:53:51:67:59:86:52:d2:8e:1e:8c:3f:b8:d0:4f:c2:1e:64:
a5:5a:29:9a:0d:ac:68:c5:ec:c6:09:d7:6a:eb:ea:09:e6:2b:
53:f1:4a:a2:c5:c4:4f:ce:8e:20:dc:02:2c:09:60:7d:a9:d0:
5b:11:3c:bf:24:b0:c3:a5:9f:be:b4:24:91:1a:da:7d:43:fe:
9d:2d:4d:1f:a2:e7:43:45:b1:ee:c9:dc:15:aa:02:10:1b:c2:
0b:d6:1f:5a:99:a9:25:c8:95:30:1f:4a:46:bb:55:02:bc:37:
61:19:8f:33:0a:e1:db:9f:be:4a:b2:8b:2b:61:1d:c7:aa:ed:
9a:12:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:03 2025 by rpki-client on console.sobornost.net