Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/ap6bPmgHUfAh5wuoqG1kdVuYoGU.roa
File: ap6bPmgHUfAh5wuoqG1kdVuYoGU.roa (raw, json)
Hash identifier: FRWb8W/VjUKZi4bCa79dR9xehManyu8Gtrb5uK1Umc8=
Subject key identifier: 6A:9E:9B:3E:68:07:51:F0:21:E7:0B:A8:A8:6D:64:75:5B:98:A0:65
Certificate issuer: /CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Certificate serial: 019424B36966BDC3CB04171CD1E12348E9E0
Authority key identifier: B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/ap6bPmgHUfAh5wuoqG1kdVuYoGU.roa
Signing time: Thu 02 Jan 2025 01:48:45 +0000
ROA not before: Thu 02 Jan 2025 01:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31173
IP address blocks: 193.25.176.0/23 maxlen: 23
193.25.176.0/24 maxlen: 24
193.25.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:69:66:bd:c3:cb:04:17:1c:d1:e1:23:48:e9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Validity
Not Before: Jan 2 01:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a9e9b3e680751f021e70ba8a86d64755b98a065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:27:86:b6:e0:d9:e2:19:bf:1d:f7:63:98:c7:
1a:97:f4:ae:da:db:e9:1a:02:6b:9a:41:01:fc:c9:
9a:b4:f8:47:ee:6d:c4:9e:ed:71:74:66:ad:70:3d:
a2:1d:92:6c:59:18:b1:76:5f:7c:39:d0:86:6e:a8:
2c:1e:34:04:ed:6d:f1:fc:2d:3c:d4:c1:3f:46:d2:
86:57:89:18:ed:38:58:ba:07:6f:a3:3f:89:89:1f:
c0:76:16:ac:16:ae:dd:bd:2c:86:ab:14:a9:d6:a9:
50:ad:a0:85:a4:ca:3e:76:08:44:bd:a7:11:1c:79:
61:ce:be:e8:c7:f9:03:a8:e0:33:b6:f1:b0:5e:ff:
22:ee:28:f2:fc:74:02:08:fc:09:ef:3a:e7:29:68:
10:df:19:a6:f1:1b:10:0c:11:51:75:b8:15:cc:ce:
ff:6c:49:6b:4c:7c:7f:62:0d:e2:c6:f1:d2:43:7e:
5e:f0:ba:b5:98:03:9d:c8:eb:7e:69:f3:0f:0d:9e:
7b:59:65:3f:ec:02:8a:69:89:fa:0a:47:1b:d2:18:
2e:80:f8:1e:2f:06:b1:1c:97:99:ea:e5:0a:db:02:
74:51:10:33:3a:80:25:1f:4a:aa:21:6c:23:ee:3e:
03:63:62:2d:88:f4:85:c9:a0:90:18:ed:b6:22:ab:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9E:9B:3E:68:07:51:F0:21:E7:0B:A8:A8:6D:64:75:5B:98:A0:65
X509v3 Authority Key Identifier:
keyid:B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/ap6bPmgHUfAh5wuoqG1kdVuYoGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.176.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:d3:df:c9:0a:6f:9b:c5:e0:97:8d:81:ed:69:b5:58:08:56:
08:9b:de:e0:f7:f7:99:07:08:e8:54:0e:8d:13:5a:b2:5d:d5:
e9:9c:d9:f7:3c:bc:dd:59:65:a5:29:d5:e6:f4:a4:84:38:dd:
db:2b:80:03:7a:bf:fd:7e:01:26:a6:3c:d9:cf:c9:78:2e:94:
c7:95:5f:5d:58:be:37:14:03:fd:cb:30:3b:62:76:c0:d2:bc:
ec:1c:93:cb:e8:86:14:20:1b:e8:8f:0d:2f:19:59:bf:44:a4:
c8:85:20:91:19:38:12:25:70:3a:01:ef:b0:b6:da:c5:a9:07:
8f:b7:65:00:fc:50:37:00:b8:21:d8:3d:bf:0d:76:af:17:70:
8f:a5:5f:5e:78:dd:a9:91:f8:76:2d:26:e0:12:8e:8b:03:b5:
fd:9b:6a:23:31:bc:12:bb:5b:a5:cf:21:76:8b:df:3b:2c:b6:
02:a8:33:e5:db:be:32:05:2f:f2:a6:a4:54:1f:2a:3b:d5:a2:
4f:2b:cd:38:5f:7b:35:e9:2b:a3:ce:36:22:ea:0b:11:88:6a:
92:ff:e0:ab:d1:b1:e0:3d:3b:bf:df:18:a7:2e:22:fe:47:2f:
5b:5f:e3:37:4d:75:4a:a1:21:d3:1c:ca:dc:67:40:58:5b:63:
38:b3:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net