Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa
File: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (raw, json)
Hash identifier: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=
Subject key identifier: 11:FE:23:76:9E:1C:87:76:C6:7B:F2:9A:DC:64:6A:F1:D1:4D:47:20
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 0194206845401ACB6169D01FA58FE9FF7958
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34019
IP address blocks: 193.27.0.0/24 maxlen: 24
193.222.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:45:40:1a:cb:61:69:d0:1f:a5:8f:e9:ff:79:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11fe23769e1c8776c67bf29adc646af1d14d4720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:9a:81:dd:67:6a:72:cc:b1:5e:5a:15:35:
d0:25:34:db:51:c8:77:64:31:eb:76:b6:54:17:df:
71:dd:67:7e:4e:d4:92:0b:c0:a1:b8:1b:03:22:09:
1a:f9:21:1d:c5:86:5f:1f:9c:70:4d:c1:d0:e7:1f:
6e:10:06:7e:03:af:bb:ff:3f:ff:bf:a8:93:1c:60:
21:eb:f2:0b:5b:61:5e:49:1b:7e:82:0b:eb:5a:1f:
7f:33:8e:07:33:47:70:43:42:e1:ab:38:81:97:ba:
6d:a1:05:e8:d4:ac:ad:38:1b:40:8a:22:49:27:5a:
4c:d3:91:5d:5f:4d:4d:62:84:55:3d:f3:bf:e7:ff:
e3:11:02:35:2e:30:76:85:8b:43:33:6d:12:f9:bb:
8b:cd:df:bf:24:43:df:5a:ec:2c:21:6d:6d:ac:d9:
71:95:54:9e:4e:85:0c:32:03:28:74:82:64:19:79:
6f:f7:08:cb:65:83:1d:13:77:b5:d5:d1:c2:13:8c:
7d:7d:24:1c:c5:56:57:56:fa:ea:db:24:c1:0b:de:
56:d8:62:94:54:a0:29:15:cd:be:1a:75:c7:8a:ab:
7b:bf:ea:6e:d7:f9:4c:b0:77:2a:12:c3:2d:cc:a3:
a8:4d:88:39:e6:c7:0e:7b:cb:a2:ed:f9:fb:8c:a1:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:23:76:9E:1C:87:76:C6:7B:F2:9A:DC:64:6A:F1:D1:4D:47:20
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.0.0/24
193.222.128.0/24
Signature Algorithm: sha256WithRSAEncryption
96:44:47:ba:4e:53:30:91:b6:9a:15:84:48:0f:12:bd:4e:d8:
fd:2f:17:16:c0:6e:1f:9c:98:47:63:6d:42:32:ac:13:bd:8a:
d9:33:cc:c7:23:de:c6:c9:b4:53:e7:7a:37:65:68:38:76:80:
fa:6a:49:ed:66:7f:98:ca:04:4a:ea:a9:70:d0:ce:90:c4:b8:
c2:75:60:1f:2e:b4:55:16:70:11:76:00:89:6a:f2:04:6a:a5:
5b:f5:2f:e7:06:a4:ea:61:f2:55:79:a1:94:04:f3:97:b4:93:
5e:39:36:35:08:8f:7c:51:cb:ae:c0:23:b4:f0:66:f5:e8:ab:
55:a5:8e:80:69:bc:dc:c2:35:b1:52:16:5f:91:8a:09:d5:5c:
97:e1:f6:55:01:2d:33:a3:1e:d9:1a:70:39:8d:27:9d:41:5f:
15:2b:51:69:26:c8:a2:72:a5:f5:15:58:5f:00:3d:c3:cb:27:
f3:1d:fd:5b:fc:b4:ac:48:8e:6c:f2:1f:48:54:da:67:25:2f:
2b:5a:12:a6:21:b4:a8:b1:bb:01:21:ec:6e:8e:90:43:0a:06:
e4:82:b0:1f:ca:a3:28:ef:75:a5:dd:23:2d:39:02:63:1b:94:
ef:58:ca:39:b5:f8:d8:07:05:c8:e1:53:0c:ca:6b:2d:f6:aa:
d8:51:70:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net