Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/iqfOVSLSaYYJjzhToYpR9ZJJuD4.roa
File: iqfOVSLSaYYJjzhToYpR9ZJJuD4.roa (raw, json)
Hash identifier: 0NkmP8qPdqaNiS7s+eoewd6jv14G/oqZDi+TYHcZtgw=
Subject key identifier: 8A:A7:CE:55:22:D2:69:86:09:8F:38:53:A1:8A:51:F5:92:49:B8:3E
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 0194258FCB2DCF8D375F7E7EE083081D208B
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/iqfOVSLSaYYJjzhToYpR9ZJJuD4.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199102
IP address blocks: 93.189.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cb:2d:cf:8d:37:5f:7e:7e:e0:83:08:1d:20:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8aa7ce5522d26986098f3853a18a51f59249b83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:a2:2a:3c:8b:de:b1:b1:6d:ca:11:7a:d6:
6f:31:0c:20:dc:8e:96:89:56:56:cf:14:c0:2c:d2:
87:ad:62:c8:cf:70:48:76:11:ef:3e:98:45:c5:9a:
90:1e:ba:3e:fc:23:b7:f6:03:b1:53:21:ed:7e:5d:
d3:61:f0:eb:e7:75:a9:e2:7a:36:15:9a:45:33:eb:
80:78:e5:35:32:69:7a:3a:2f:dc:1a:00:bb:45:b4:
54:04:6d:1b:07:74:71:2a:d6:2f:62:65:38:20:fa:
70:e0:6f:63:74:97:be:bf:d5:f5:ed:4b:fe:c6:f7:
05:0f:fc:e9:ac:75:51:18:b6:86:a7:a4:ed:91:50:
74:78:1d:20:3b:3d:15:63:3c:ac:7f:c7:1c:f4:98:
5c:6c:7b:b1:1c:af:68:3c:8e:59:04:17:91:84:4e:
e3:6e:45:a0:0d:97:4c:23:85:37:bf:60:5a:72:a3:
76:92:7b:8c:5e:43:91:59:65:a3:d9:77:16:7e:87:
ce:c2:a6:4c:e3:64:fd:5d:4b:60:63:13:d1:e2:d8:
90:e6:05:90:ae:17:c3:9a:03:41:1d:cc:94:51:59:
65:d3:df:7f:8d:70:13:4e:98:4f:42:43:04:0b:14:
db:69:26:b9:06:83:a4:db:28:f6:36:e3:85:d5:19:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:CE:55:22:D2:69:86:09:8F:38:53:A1:8A:51:F5:92:49:B8:3E
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/iqfOVSLSaYYJjzhToYpR9ZJJuD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.224.0/22
Signature Algorithm: sha256WithRSAEncryption
62:11:da:4e:78:e7:94:35:ec:d9:cb:5a:de:b4:51:a7:bd:df:
5e:01:57:ac:c0:af:6e:b1:c7:9a:38:4c:10:da:51:f2:4d:92:
d1:ca:9f:d3:c3:f1:4e:7b:b6:dd:ee:4b:55:dc:fd:20:e2:ba:
e7:bf:96:c0:5b:c7:ef:bc:dc:04:42:2b:00:18:c8:8b:66:25:
99:46:e8:5e:b3:0a:df:65:d8:46:18:ae:3c:c5:97:35:d0:98:
d8:0c:5b:f7:e4:21:3f:95:c0:02:31:57:d3:04:c1:3f:5d:44:
c5:58:04:ed:4d:a2:38:76:47:f3:87:95:b0:40:02:e0:cd:f1:
b5:85:da:86:8b:ec:da:e7:34:90:ef:77:e2:be:e2:7a:9e:cc:
89:27:38:a5:7d:98:de:92:35:b9:aa:fa:47:76:09:c6:a7:d9:
d6:ae:64:1c:b6:e6:f1:dc:db:61:fc:38:c5:85:a7:58:3f:e6:
fa:46:2e:d0:2d:9a:6b:81:42:bf:57:7c:bd:f7:b1:0f:16:5e:
8f:39:5d:39:fb:c1:dc:bd:85:33:e6:fb:83:8b:4b:03:0f:c3:
ea:33:bc:32:f2:59:3b:6f:53:00:ae:c4:0a:18:2b:b5:09:5d:
5d:cd:da:67:c6:2f:87:a3:48:f8:b4:85:bb:03:7c:f2:5d:df:
7e:03:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:00 2025 by rpki-client on console.sobornost.net