Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/uCvD8eRBUAPr7t4AKxbWS0eik-M.roa
File: uCvD8eRBUAPr7t4AKxbWS0eik-M.roa (raw, json)
Hash identifier: S3XQTQGpmea5gdNAFZSLFW2D1IWdCXJx15hLcxcR7CY=
Subject key identifier: B8:2B:C3:F1:E4:41:50:03:EB:EE:DE:00:2B:16:D6:4B:47:A2:93:E3
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 019427B56645A5C59624659E887E90C6D7E7
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/uCvD8eRBUAPr7t4AKxbWS0eik-M.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208873
IP address blocks: 94.127.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:66:45:a5:c5:96:24:65:9e:88:7e:90:c6:d7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b82bc3f1e4415003ebeede002b16d64b47a293e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:05:f4:d7:ec:13:4d:64:c9:91:6a:97:f7:
64:90:53:41:1b:9d:3d:5a:ac:44:f4:26:08:ba:ad:
c1:dc:e7:e5:a6:04:8e:26:fe:c9:f7:70:47:14:15:
07:d9:d0:51:b2:01:fe:9a:0d:8c:a4:d8:c7:bd:c0:
38:21:54:ab:a8:0f:34:67:88:cc:9a:d7:18:57:f0:
01:01:8f:f0:8a:fb:a3:a5:f7:9c:4d:dc:40:d0:2e:
8a:1e:47:8c:46:67:17:c5:1c:51:62:67:73:4d:a0:
4e:6f:ef:bc:a7:89:8f:ec:ae:8d:a6:6e:e8:81:44:
3a:84:ff:f7:5e:8c:b4:68:4c:96:cb:b1:a0:21:05:
64:83:a7:ca:44:ea:73:5c:59:d3:35:62:c3:d4:c6:
39:c9:e3:6a:0a:ca:e1:f9:db:73:c9:72:81:e0:3a:
51:36:c3:88:19:84:93:8e:91:90:76:b7:6c:d6:15:
2c:37:9f:d1:1c:e4:35:65:c0:db:1b:ca:e8:92:2e:
6c:aa:2c:a1:d5:4f:f7:df:97:84:85:f0:19:27:9e:
38:dd:16:c6:73:dd:55:b8:ee:af:21:36:a9:b4:b3:
db:1d:8c:bb:86:e8:85:78:90:e7:48:7f:d5:c1:27:
cc:6a:99:bc:ae:4c:53:9b:96:ff:f6:ac:9d:03:e7:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:C3:F1:E4:41:50:03:EB:EE:DE:00:2B:16:D6:4B:47:A2:93:E3
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/uCvD8eRBUAPr7t4AKxbWS0eik-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5e:56:ab:6f:b2:0f:3a:51:54:14:68:df:c0:0b:8a:0d:87:
e9:9d:ec:0a:5b:29:c8:60:8e:d8:7b:78:6c:95:3a:04:f7:7b:
1e:13:91:2d:8f:9c:d8:74:91:41:79:d3:de:2e:ba:2b:c2:41:
4c:a3:a3:74:8d:d8:d5:22:a0:fd:2a:85:48:f3:67:90:32:61:
68:37:92:d1:a1:09:a1:17:bc:40:9c:be:1e:33:c7:af:42:8f:
45:a0:d4:7d:22:7f:12:4e:03:37:6d:52:36:e0:a0:9b:91:2e:
7e:98:ad:13:1c:36:f0:5c:eb:c4:1e:28:e1:d9:88:0a:80:fd:
2e:28:5b:a9:74:a8:13:a9:11:8e:06:98:58:6e:23:fc:60:a0:
8e:c4:e6:39:64:a5:95:71:87:89:62:59:e0:b9:3b:3e:e2:e4:
96:31:89:a8:19:23:65:5f:46:3a:01:53:9a:1c:00:a2:17:b7:
f4:ac:4c:ce:78:c8:32:26:64:a4:f3:22:84:37:5e:bf:4b:73:
82:04:41:eb:75:88:08:c7:2c:a4:e7:3d:64:89:2f:e2:16:e3:
47:3b:37:39:5e:87:e3:2c:43:5d:10:bf:fc:64:18:3e:5e:af:
83:17:0b:19:6c:b6:d9:a9:11:4b:be:2e:36:8a:5e:3f:63:d4:
bd:d5:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net