Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/zVbtVTb6VEP2n5e5elBZRVf7PBc.roa
File: zVbtVTb6VEP2n5e5elBZRVf7PBc.roa (raw, json)
Hash identifier: VV/l24AMORfvu1S58DBbEXwpnZJ00Cz7FHLsGnZlDXs=
Subject key identifier: CD:56:ED:55:36:FA:54:43:F6:9F:97:B9:7A:50:59:45:57:FB:3C:17
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 0195D2A7D730D136E294A9D7685F752D1A36
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/zVbtVTb6VEP2n5e5elBZRVf7PBc.roa
Signing time: Wed 26 Mar 2025 13:32:49 +0000
ROA not before: Wed 26 Mar 2025 13:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40092
IP address blocks: 194.146.116.0/24 maxlen: 24
194.146.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:a7:d7:30:d1:36:e2:94:a9:d7:68:5f:75:2d:1a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Mar 26 13:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd56ed5536fa5443f69f97b97a50594557fb3c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:2e:7b:2d:0c:32:59:4f:59:60:f8:03:21:
18:c0:61:c2:79:d0:80:26:9a:e5:75:91:95:bd:95:
ec:8b:e3:12:d7:d7:5a:3c:86:4d:c9:11:42:d8:36:
e3:c9:fd:6d:d1:4d:c9:a3:6f:ee:f6:4c:9b:95:7f:
73:59:52:62:7d:d0:f6:c0:98:e8:92:20:a2:e9:3f:
b6:e4:a7:3f:87:fd:40:11:42:65:0f:7d:a8:19:7f:
1a:f0:31:44:66:5b:f9:6b:ff:89:d6:9e:ac:cd:4c:
e7:2f:49:15:64:97:cd:2c:10:2d:d8:c1:b7:a9:fa:
a9:43:4b:e1:43:3d:05:dc:3c:76:8b:60:76:8b:d8:
f3:1b:80:a8:c3:2c:31:75:53:f1:50:57:f5:2a:31:
2c:41:2c:0e:33:e7:d8:7c:5a:84:e6:0c:f2:d3:4b:
b7:89:be:10:05:2d:ae:74:f8:81:1e:d3:1f:18:cd:
61:89:ab:55:33:35:fb:4b:2e:fb:64:b4:67:9e:d4:
90:99:35:e8:11:ab:a8:bc:e3:f5:9e:89:bf:5e:75:
32:82:c7:f9:7b:cf:d0:55:86:23:b3:b6:50:1f:7d:
12:c8:9a:0e:94:1d:7a:6c:d7:0d:60:b2:a2:6c:ad:
b7:03:23:1f:89:ad:29:76:31:3a:41:6d:08:02:89:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:ED:55:36:FA:54:43:F6:9F:97:B9:7A:50:59:45:57:FB:3C:17
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/zVbtVTb6VEP2n5e5elBZRVf7PBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.116.0/24
194.146.124.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a5:fc:35:e3:2f:14:d0:aa:04:43:87:c1:ff:55:eb:df:39:
03:7f:93:ba:33:8f:fc:56:5f:c8:a3:16:9d:6f:6a:48:0b:48:
6b:3b:4d:5f:47:5f:00:94:c7:22:ad:32:2e:17:4f:ff:eb:be:
f6:65:da:7a:a4:2a:99:c2:12:04:c1:1e:e6:fd:62:be:68:d7:
48:d9:74:77:c5:61:76:c0:3a:35:57:4c:3c:44:a9:0f:87:8c:
7e:99:ca:5f:89:69:07:a0:f2:33:7a:f7:af:8f:09:33:8d:86:
7c:b9:bb:f5:59:93:d4:59:6c:0f:fe:ff:a1:36:d5:37:24:5f:
a5:7a:bf:bd:f5:80:93:6d:81:48:4f:35:41:5e:56:ad:58:b0:
63:41:ab:7d:32:05:55:9d:3c:05:c7:2f:e9:ff:22:28:41:5e:
21:63:08:51:0b:86:8b:14:99:a3:ca:0e:61:5b:eb:56:50:1b:
b8:3c:0c:dd:b3:ee:bd:93:45:9d:29:50:36:b2:b7:eb:67:9f:
9f:02:a0:3e:4b:0c:c3:a4:5d:d2:c8:76:83:f9:47:d3:c1:7e:
60:e3:03:72:42:85:f7:58:4b:e8:cc:a1:11:66:80:96:b6:cb:
a6:97:16:90:ab:fd:f2:e4:4e:fe:88:33:a7:4a:3d:ea:79:1a:
17:da:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net