Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/tNlE-RsS8yP8q3aEd77vtdKV4ao.roa
File: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (raw, json)
Hash identifier: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=
Subject key identifier: B4:D9:44:F9:1B:12:F3:23:FC:AB:76:84:77:BE:EF:B5:D2:95:E1:AA
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 0194266A392AE20B3D150E9ABFBC18CF6D87
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/tNlE-RsS8yP8q3aEd77vtdKV4ao.roa
Signing time: Thu 02 Jan 2025 09:48:03 +0000
ROA not before: Thu 02 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197107
IP address blocks: 194.31.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:39:2a:e2:0b:3d:15:0e:9a:bf:bc:18:cf:6d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Jan 2 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4d944f91b12f323fcab768477beefb5d295e1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2c:1a:9c:29:44:43:73:67:65:15:4f:c7:93:
98:2e:1e:02:71:31:fd:5c:19:1b:e7:bb:96:de:89:
f5:e9:de:ca:4f:19:84:70:94:a6:ee:7c:d8:b5:de:
b5:90:65:82:41:7e:0b:17:c7:c3:46:c1:7a:86:e0:
c4:07:67:f5:e7:84:30:2e:a3:cb:98:d5:22:12:92:
b9:77:0c:5e:5e:91:58:bd:38:f1:b4:68:06:da:14:
b9:7f:e5:3a:1d:7d:a1:bb:a0:a6:82:d9:90:a3:f4:
2e:86:90:50:d5:6b:9b:8c:29:0d:1a:22:b4:5c:e9:
ee:5b:a3:f0:77:b2:dc:72:70:db:8d:a8:6c:24:a1:
5a:b8:e8:0b:b3:5b:79:95:61:de:fe:06:b8:e2:cd:
72:72:5a:d3:2c:d9:55:2a:8d:12:73:9a:47:2c:f9:
db:6f:dc:06:7f:e0:cd:fa:15:68:26:be:e0:db:f4:
2b:93:53:b4:94:39:1f:3a:31:45:fd:f8:be:b0:46:
79:ce:50:84:1f:90:b2:4e:62:84:80:35:95:b5:61:
aa:89:8b:18:44:64:51:4d:87:7c:ec:f5:10:03:e2:
ad:fb:63:a8:ee:88:95:0b:94:97:2d:ca:71:7f:75:
57:b3:c8:71:41:4e:d6:fa:14:c1:5a:57:59:95:02:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D9:44:F9:1B:12:F3:23:FC:AB:76:84:77:BE:EF:B5:D2:95:E1:AA
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/tNlE-RsS8yP8q3aEd77vtdKV4ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a1:da:8f:43:0d:ed:bf:73:98:6c:e4:6a:d1:69:61:b5:e4:
18:12:c8:e5:da:a4:de:da:59:9b:93:43:61:1c:a9:d2:27:79:
2d:7c:b8:88:e4:92:c4:79:fe:17:73:61:7e:74:43:4e:d9:02:
f5:a3:38:cc:c0:21:ad:6a:87:62:7d:16:21:63:cf:0a:66:ef:
03:3a:6a:5a:f1:5a:85:9b:bd:29:0b:d6:2f:53:01:3c:f3:78:
e9:45:5e:64:a5:21:b1:d0:a9:05:90:37:2b:0b:e0:7b:c1:9f:
83:58:aa:60:47:2e:d8:71:ac:8f:05:b2:ec:ba:e7:03:2c:7e:
0a:fd:6c:bf:41:9f:38:05:7c:00:c2:1c:e9:ac:2b:f1:dd:84:
97:10:2f:8e:3d:51:62:31:06:22:23:90:99:e6:e7:1f:7e:f3:
3c:c7:0c:ab:43:09:b9:1d:ab:9d:71:46:2e:0e:e5:7e:ce:37:
f3:19:1c:20:06:f7:c9:a1:9d:d5:32:e1:53:f9:4b:94:b7:99:
b1:06:a6:8d:7d:49:c3:aa:bd:70:2e:be:4c:e5:83:fc:94:bd:
b6:65:ae:3a:5b:e6:9a:e9:1d:64:90:8e:2d:27:55:89:9c:c7:
11:56:be:c9:f8:4c:40:c6:c4:05:f9:c9:cc:dd:73:08:1c:f6:
6e:f1:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net