Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/fnBkrIGhazl4u19mtv8qgvxymog.roa
File: fnBkrIGhazl4u19mtv8qgvxymog.roa (raw, json)
Hash identifier: K+4n5TOvIimoLjl9pQIARfKh0OC3efu1YiLeyARuuyU=
Subject key identifier: 7E:70:64:AC:81:A1:6B:39:78:BB:5F:66:B6:FF:2A:82:FC:72:9A:88
Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial: 01949A2CFB6FDEB3DEB1CC88D1A2E3518142
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/fnBkrIGhazl4u19mtv8qgvxymog.roa
Signing time: Fri 24 Jan 2025 21:17:06 +0000
ROA not before: Fri 24 Jan 2025 21:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213790
IP address blocks: 185.93.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9a:2c:fb:6f:de:b3:de:b1:cc:88:d1:a2:e3:51:81:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Validity
Not Before: Jan 24 21:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e7064ac81a16b3978bb5f66b6ff2a82fc729a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:0a:48:15:a4:35:4c:35:98:b3:21:49:b1:
d8:6a:99:31:1a:8d:12:84:9b:ba:07:89:db:0b:57:
f5:81:b3:29:5b:31:95:cb:87:5c:e5:0d:b4:9e:42:
45:02:69:6d:ff:bf:15:ba:c8:db:05:cc:7a:7d:92:
d4:2e:22:e0:6b:70:f1:40:b3:21:6e:96:f1:8f:7c:
9e:c2:13:39:a6:e8:0f:ac:6e:0e:6b:a3:47:e5:89:
f7:e9:e7:53:1b:6c:cb:89:f0:3b:34:0c:29:b5:9d:
90:01:1d:c3:bc:72:ca:4d:45:f2:ab:51:59:9e:7b:
33:d8:48:66:8e:61:50:00:1c:77:94:22:75:15:ea:
00:30:7c:52:04:cc:4a:fb:a7:ae:95:e7:87:b1:7c:
80:c8:bc:2a:9a:24:de:56:70:31:c0:fb:31:9d:5f:
76:fc:2d:e4:48:eb:d6:94:9f:0f:cf:6b:96:0b:08:
eb:68:b6:d0:5f:63:c4:f0:a7:07:79:d8:07:59:70:
65:90:cb:a3:0c:0f:36:2a:95:06:01:e1:d9:64:7e:
7b:29:9d:c3:8c:6d:17:57:d5:81:43:46:ea:e8:9a:
d0:f6:d1:57:bb:ab:49:8a:ed:dc:a1:da:16:7a:0f:
d8:98:80:69:30:f9:b7:15:f6:49:8d:4f:c4:4f:87:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:70:64:AC:81:A1:6B:39:78:BB:5F:66:B6:FF:2A:82:FC:72:9A:88
X509v3 Authority Key Identifier:
keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/fnBkrIGhazl4u19mtv8qgvxymog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:62:73:00:9c:14:b0:20:87:95:b2:f4:13:ac:f6:59:9e:78:
0f:e9:81:eb:30:1d:93:fe:4a:b8:0f:a2:ff:3c:4e:78:2f:f5:
f2:57:fc:10:af:fb:0e:69:e2:39:bd:11:95:c1:8d:75:f2:a1:
8d:df:06:3a:9a:3a:20:78:db:d4:ca:b3:7d:06:d9:9e:f6:13:
19:9b:c3:43:07:89:b7:dc:bd:e8:ac:f9:ae:28:c1:63:0a:6f:
ad:f3:1a:bc:b6:94:eb:93:55:27:81:95:7a:06:25:3e:6d:d8:
57:9f:2a:ee:d2:a7:08:99:41:01:58:0c:eb:11:df:94:e6:43:
3c:49:32:69:f1:41:e1:b6:8b:cd:46:43:74:86:66:61:d4:12:
e1:5f:17:eb:c0:c7:aa:ad:1c:a7:c5:52:ae:33:f2:24:31:e7:
a8:0d:7d:a9:11:78:e8:a6:83:68:d6:f3:d8:c5:5c:dd:b4:bc:
f5:fe:98:ee:23:cf:66:fe:81:ae:eb:44:07:47:e5:e0:12:d3:
83:5f:be:6b:cc:30:72:a7:81:9d:9e:a4:7b:ed:d8:24:6c:e7:
d4:0c:26:ca:27:b1:f8:d3:86:2f:c5:02:e2:1b:c5:7d:80:90:
c7:10:2b:c2:92:30:5b:d8:b2:d0:7d:7f:eb:ad:09:c4:18:9a:
81:b2:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net