Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/zGycLxq7YqbVlBvuNEd47CRzT-U.roa
File: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (raw, json)
Hash identifier: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=
Subject key identifier: CC:6C:9C:2F:1A:BB:62:A6:D5:94:1B:EE:34:47:78:EC:24:73:4F:E5
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 0194228DD22A65F1F1AD5552277EA77F584C
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/zGycLxq7YqbVlBvuNEd47CRzT-U.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39330
IP address blocks: 193.228.174.0/24 maxlen: 24
195.238.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d2:2a:65:f1:f1:ad:55:52:27:7e:a7:7f:58:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc6c9c2f1abb62a6d5941bee344778ec24734fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:4a:76:ec:20:13:fa:fe:64:50:3c:3f:33:
2e:c8:5c:f7:f2:6b:2c:7a:2e:9c:55:e5:ce:cf:c9:
09:a2:1f:05:31:3b:a3:45:38:b0:0c:d0:6b:de:fe:
3f:39:59:f6:4e:e7:50:0f:42:57:f3:07:32:82:91:
8e:12:cb:9c:28:f6:62:45:a9:68:57:9c:ea:52:60:
4a:00:89:a9:bb:e9:53:ac:25:88:b0:0f:32:08:60:
ec:20:14:d4:c9:6c:3f:ba:d4:8f:5f:a7:b3:43:58:
dc:3d:56:82:40:8f:1c:b2:78:84:ee:37:31:0c:f7:
22:f9:44:a1:5a:f8:3c:65:b5:47:40:5f:3b:e0:65:
6d:b5:47:a7:b8:04:bf:8d:ac:dd:a2:63:98:55:cf:
fd:57:2d:ba:82:c8:a0:01:4f:21:2e:b8:c7:88:f0:
c9:4a:3c:30:ae:b3:41:10:b9:c9:40:1a:37:26:a2:
3f:23:63:57:2f:6b:cc:7a:36:48:de:60:1d:8c:95:
34:6a:5e:8a:ee:1b:c8:b0:59:be:e7:e5:aa:11:6c:
d5:f5:46:95:ee:07:20:da:cc:24:94:6e:dd:51:e6:
e0:3e:27:ae:5c:c5:7f:0b:f8:9d:e0:9a:61:57:4f:
37:af:79:d5:8a:9b:d0:db:02:1b:a6:33:26:4f:9f:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:9C:2F:1A:BB:62:A6:D5:94:1B:EE:34:47:78:EC:24:73:4F:E5
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/zGycLxq7YqbVlBvuNEd47CRzT-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.174.0/24
195.238.70.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:ed:3c:32:1a:67:c4:4e:d6:a4:62:9f:e1:9b:5b:ed:8d:74:
ca:d4:12:de:07:fc:49:54:65:88:ba:46:c5:46:cb:4e:4b:22:
ac:2b:8b:0e:92:59:b6:7b:b3:32:7c:17:e9:80:89:35:e5:b0:
32:e3:9b:8f:72:04:fa:97:48:ce:a0:4f:91:91:ad:9d:a5:50:
6b:b2:10:64:2f:ec:b6:f7:05:40:2e:b9:a4:e3:5a:c4:90:97:
02:73:d3:72:6b:c5:c9:ba:7a:76:6b:e0:1e:ae:7a:19:95:f0:
ac:44:6e:24:27:b3:2b:dd:d8:56:0b:93:52:68:22:89:d3:36:
00:72:f5:06:4a:00:b1:3b:e1:81:cb:70:c0:f4:4f:77:11:92:
41:28:b1:da:83:d2:99:46:e2:25:ab:47:14:e1:1b:ec:b5:1d:
ce:c3:4a:5d:17:ca:1d:6e:ff:3f:ce:a0:c3:07:56:dd:e4:2e:
cd:9f:d1:cf:36:5a:a9:f5:93:4c:a1:dd:5e:ab:bc:dc:f0:6f:
cd:ba:9f:35:da:f6:ff:e9:46:93:a1:5f:3d:f3:0f:46:fe:0f:
91:94:18:9f:9b:a7:00:fb:05:59:ec:a0:8d:cb:23:c1:2f:5a:
1f:57:14:f3:82:90:dd:4f:cd:fb:ad:84:f0:51:d5:61:bf:2b:
22:1d:73:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net