Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa
File: 6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa (raw, json)
Hash identifier: NThSJkZPm+DD4/mAcNhw9miEjuzZudxLC0TeMXxTy6I=
Subject key identifier: E8:B9:0D:7D:70:C6:38:78:5F:F2:00:6C:21:A3:B5:80:0D:90:F9:53
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 0194228DFD51DEFCFBE7CA0D260A4711A970
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa
Signing time: Wed 01 Jan 2025 15:48:38 +0000
ROA not before: Wed 01 Jan 2025 15:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25059
IP address blocks: 193.201.212.0/22 maxlen: 22
193.201.212.0/24 maxlen: 24
193.201.213.0/24 maxlen: 24
193.201.214.0/24 maxlen: 24
193.201.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fd:51:de:fc:fb:e7:ca:0d:26:0a:47:11:a9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Jan 1 15:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b90d7d70c638785ff2006c21a3b5800d90f953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:96:ee:ad:a5:da:4a:19:84:6f:be:07:e0:
75:59:37:39:c9:b3:39:d5:d8:b0:2e:af:ee:2e:cb:
48:a0:8d:6b:37:b4:81:8a:d7:d2:d5:d5:46:46:2c:
b8:0d:d6:14:6e:81:9c:25:aa:5b:08:e5:2f:fe:18:
cc:55:25:ee:85:f2:61:14:9b:c5:f0:89:1e:a9:6f:
cb:0a:ba:6f:42:23:11:a9:b2:1e:42:80:e3:d2:52:
8e:53:e2:e5:7c:1e:1d:71:7a:b6:a0:0f:68:7d:ff:
a7:31:e8:4c:60:2c:24:00:0c:3f:96:99:72:66:2c:
b7:b1:a5:72:d7:ec:e5:39:af:c2:19:15:f1:41:ed:
9c:ba:30:91:5b:14:eb:05:58:64:6f:ad:27:d8:c8:
4c:08:41:11:02:0c:f4:e8:97:f1:3f:4f:76:aa:75:
14:22:23:99:1a:59:38:8e:a1:e5:49:b6:24:cd:39:
f2:c9:6d:c7:65:cd:41:87:c9:29:cc:91:a3:81:7f:
40:97:f2:f3:22:ef:93:d2:4a:8b:0d:fd:8e:6c:1c:
9d:ee:78:ec:9a:b5:ee:34:98:1f:46:63:2d:a0:41:
a6:58:be:fc:02:a0:03:88:85:e7:a0:a6:ad:4f:8a:
a9:f0:f3:33:78:8a:bc:9e:6e:37:08:65:89:cc:ea:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:0D:7D:70:C6:38:78:5F:F2:00:6C:21:A3:B5:80:0D:90:F9:53
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.212.0/22
Signature Algorithm: sha256WithRSAEncryption
77:53:46:73:4a:22:92:eb:42:6e:2d:a2:b5:00:28:15:31:e2:
0b:23:97:88:8e:a4:fc:a2:6a:c0:bb:45:f9:2e:c4:d3:51:d9:
08:4f:dc:2b:75:ed:32:2b:c1:3e:65:97:18:6b:56:ca:ed:ed:
52:27:58:14:00:17:f0:b6:ff:89:0e:71:2a:92:a4:84:ee:8a:
ff:e0:66:51:c2:98:b9:e6:0d:58:7b:b0:39:08:3a:ca:41:17:
3c:8c:72:7c:35:d3:2f:37:93:27:a0:63:d6:91:31:46:da:a1:
c4:60:c0:34:a7:9b:7e:86:7c:01:3a:90:5a:e9:8f:85:7f:f6:
be:cd:d0:cd:d6:0d:09:64:95:e9:d3:85:d8:d6:bc:67:af:ee:
c6:88:df:40:db:50:e2:60:3c:bc:bb:37:39:12:55:75:16:b8:
15:dd:10:02:bd:5c:cd:13:bb:9d:6f:1c:ac:9b:69:9e:92:14:
99:6a:06:14:53:8d:23:16:1e:4d:de:22:fe:e0:d6:14:08:c5:
d0:0f:69:0f:b7:44:65:09:cc:5b:05:5b:b9:e3:98:a2:f7:e9:
0d:43:ec:be:52:a9:57:39:22:4e:e3:88:eb:9b:d9:58:d0:1c:
a6:7d:83:37:3b:0e:08:5e:11:39:fd:d5:96:6c:7b:ad:a5:dc:
f4:c0:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net