Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/nXfzcpDMArjxgb2F7qR75SrYmPY.roa
File: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (raw, json)
Hash identifier: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=
Subject key identifier: 9D:77:F3:72:90:CC:02:B8:F1:81:BD:85:EE:A4:7B:E5:2A:D8:98:F6
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019427B576D0AE6CE053827D968870BB0A38
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/nXfzcpDMArjxgb2F7qR75SrYmPY.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24953
IP address blocks: 193.47.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:76:d0:ae:6c:e0:53:82:7d:96:88:70:bb:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d77f37290cc02b8f181bd85eea47be52ad898f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:1b:9d:32:30:91:dc:22:63:64:6c:8e:3b:
2b:5d:60:69:bb:25:fb:13:4b:c9:1e:8c:da:2f:ac:
2d:b4:a1:46:1e:f7:4a:70:53:6c:7e:aa:74:d3:84:
4d:b3:c6:17:19:b2:15:26:3c:52:5b:c2:85:44:d7:
8e:85:86:50:51:ad:fb:0d:ad:59:c2:eb:0d:2c:7c:
c3:01:53:42:40:28:ac:9a:5b:23:66:55:1c:31:3c:
e4:af:be:c9:f0:21:97:25:94:9b:a7:8a:b7:d4:88:
e3:50:40:48:d9:f8:73:09:e5:2b:77:e6:fb:1e:a4:
e9:5e:6c:82:85:84:05:0c:a5:60:5c:24:88:07:c8:
c3:49:68:8b:d6:90:a0:fb:ac:c6:28:ac:8a:4e:77:
53:7e:dc:89:59:09:9d:4f:8f:4a:42:2e:87:46:2c:
af:a1:00:14:5c:9e:23:91:ee:49:e8:73:f7:8a:63:
30:98:d1:48:b6:7e:13:32:27:6d:a1:e0:82:55:70:
c3:3d:78:45:fc:8a:3b:b8:89:12:76:16:d1:b8:26:
04:48:7a:64:c4:8f:2b:78:dc:eb:25:65:df:3c:a8:
77:9a:43:fa:2b:84:17:a9:3c:94:05:4d:46:fd:18:
01:b2:29:23:fe:03:71:97:71:20:63:db:71:0c:cf:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:F3:72:90:CC:02:B8:F1:81:BD:85:EE:A4:7B:E5:2A:D8:98:F6
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/nXfzcpDMArjxgb2F7qR75SrYmPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:17:da:58:14:fb:59:98:b8:75:19:02:28:fc:0b:e4:de:da:
4b:30:d7:8b:d8:fb:64:3a:97:f9:d4:31:8d:ef:9e:36:ca:3b:
1b:d0:e4:c6:38:27:18:08:35:4f:d9:b8:e1:ec:c6:17:70:ba:
80:c4:a5:ca:6a:5b:35:5a:46:97:5c:be:6e:d6:04:28:36:9b:
94:fc:65:a3:69:e1:6d:09:54:0c:9d:0f:c6:95:a6:37:d5:c3:
48:9b:ba:2e:8d:06:5f:48:9e:f1:ac:9e:e7:73:7e:3a:39:21:
b7:f9:19:05:83:91:dc:37:14:ec:8b:59:62:03:5b:9a:8e:78:
17:46:ac:e2:bd:9e:64:f1:70:db:66:6d:69:2b:2a:be:5f:47:
81:7a:27:e3:1f:42:59:3f:0c:7a:03:5d:9e:9d:b7:e0:67:bf:
f8:45:de:64:1e:e3:ca:26:76:d2:59:92:93:e7:36:04:3c:02:
f5:81:fe:52:6e:0c:ef:9f:bd:bb:8d:46:98:38:5c:0a:d2:5e:
1e:8c:8a:98:fe:2c:69:b5:50:d5:9e:ac:99:d6:ad:a6:76:11:
66:f0:38:cc:41:32:e6:59:90:57:ec:93:ee:f3:d9:92:20:b2:
69:42:b5:85:97:db:02:b1:e6:68:f0:98:bf:1b:75:16:55:7c:
6e:18:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net