Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa
File: 1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa (raw, json)
Hash identifier: mo8wd9SPepK89v0F2kQzkzZ3y4Ds3XU7kLVQ6u6lBCM=
Subject key identifier: F9:AE:CD:1E:3E:70:BA:4B:55:06:E0:09:DC:00:E4:FD:6A:87:48:7E
Certificate issuer: /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial: 019424B3B5309B391F86D7C862C48CF7E897
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207861
IP address blocks: 193.56.247.0/24 maxlen: 24
193.57.4.0/24 maxlen: 24
193.57.7.0/24 maxlen: 24
193.57.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b5:30:9b:39:1f:86:d7:c8:62:c4:8c:f7:e8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9aecd1e3e70ba4b5506e009dc00e4fd6a87487e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:11:93:92:64:16:f5:9d:bc:ec:88:b2:2a:
83:95:32:2d:f6:57:22:b4:37:e0:e5:ef:3f:f7:83:
a1:d5:e3:9d:d9:e8:06:2a:e3:a4:f6:ee:69:b6:2b:
7d:f5:a7:cd:c3:06:98:0c:ca:f2:97:0c:e1:00:1d:
7d:d1:bf:c9:b8:49:95:5a:e5:56:c8:c9:88:75:3a:
f3:54:74:f5:d9:c6:78:7d:91:cd:82:f7:cb:f0:ee:
3e:15:9a:9b:1a:14:d5:3b:f4:6f:16:03:8c:2e:b4:
4a:dd:9a:da:8d:85:7e:c8:97:ac:95:01:aa:54:d4:
58:ed:0b:1c:50:8f:7f:db:17:a8:be:31:7b:ff:0a:
3a:11:1b:a5:95:00:1d:48:10:13:ce:07:b7:40:3f:
5d:01:b7:ed:5a:c1:dc:34:7e:c1:10:43:bb:61:d8:
f0:e6:75:f8:40:6e:a6:38:dd:8d:d2:6a:1c:11:88:
d7:ab:29:20:f7:5b:ac:92:5b:73:a5:fb:34:36:b6:
6f:11:77:cc:9e:29:e1:b3:79:73:0c:98:26:13:84:
8f:5e:f1:d6:ad:cb:c4:c6:6b:a7:7c:08:06:b4:09:
72:80:d1:44:07:43:b9:b5:b3:32:f4:36:2a:f0:06:
86:a1:a3:2c:6b:51:d4:0f:db:c8:74:7f:a9:00:e9:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:CD:1E:3E:70:BA:4B:55:06:E0:09:DC:00:E4:FD:6A:87:48:7E
X509v3 Authority Key Identifier:
keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.247.0/24
193.57.4.0/24
193.57.7.0/24
193.57.21.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8c:bf:57:cb:54:55:b9:bd:91:7b:2c:b0:98:95:86:10:5e:
b2:52:99:b1:1f:f0:92:b6:c2:5f:a2:f8:d2:a5:5f:3e:1b:d3:
8a:af:33:46:b3:27:f2:72:f1:e8:7f:e5:44:cd:13:8c:3e:ba:
15:73:36:86:2c:57:82:d2:e1:4e:47:a3:2d:0d:a0:ed:e0:df:
cf:48:38:5b:04:24:6d:e1:9c:08:2e:fa:d2:7c:30:73:e9:41:
65:fe:32:a4:c1:4a:fb:b1:22:d0:a7:72:09:98:64:52:18:bb:
ac:e5:96:5a:c2:f5:57:8b:8d:ab:25:bf:76:cd:20:64:13:0e:
69:83:9e:59:67:7b:b5:08:5d:ed:b6:a1:99:3c:43:49:69:dd:
48:1b:c0:61:0a:c1:da:5e:25:92:98:3f:d1:7d:a1:24:06:26:
73:fd:55:e2:59:20:de:b1:1d:30:f5:39:2d:8e:ad:68:af:ff:
98:bd:39:2b:11:4f:72:21:68:a0:d1:53:76:e2:da:55:00:d7:
39:f5:16:7c:f8:bb:57:98:26:c8:85:17:6f:6c:86:5f:48:40:
cb:d1:6e:c0:18:cc:54:36:97:84:d2:5b:4a:b6:cc:f1:86:02:
7a:26:9c:9d:7e:cd:74:fb:c8:ba:64:7a:5a:91:ca:a7:68:9b:
b6:2e:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net