Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/r_tsaMbjHoSCsd17cgTnbS8F0qc.roa
File: r_tsaMbjHoSCsd17cgTnbS8F0qc.roa (raw, json)
Hash identifier: GyoTnn/PfaIn4sRuGe7d5zf2OcCelYM3H/gIy6Qo2Lo=
Subject key identifier: AF:FB:6C:68:C6:E3:1E:84:82:B1:DD:7B:72:04:E7:6D:2F:05:D2:A7
Certificate issuer: /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Certificate serial: 019426D9391F77EA187256C9CAC6E1EF6341
Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/r_tsaMbjHoSCsd17cgTnbS8F0qc.roa
Signing time: Thu 02 Jan 2025 11:49:17 +0000
ROA not before: Thu 02 Jan 2025 11:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2602
IP address blocks: 193.168.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:39:1f:77:ea:18:72:56:c9:ca:c6:e1:ef:63:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Validity
Not Before: Jan 2 11:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=affb6c68c6e31e8482b1dd7b7204e76d2f05d2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:74:35:10:3d:8b:be:16:f6:1a:38:8c:5b:71:
86:ea:78:da:d3:91:8f:af:9c:8f:5e:8e:f7:e3:bf:
5c:ec:ac:8a:13:63:eb:5a:9b:89:38:fa:ca:89:18:
d4:1d:86:f1:2f:0d:ae:a8:3e:d3:f4:91:72:62:d5:
a7:89:d3:6c:10:c8:05:6c:94:55:6f:45:01:6d:50:
ca:b6:90:fa:fe:da:bb:7e:1c:cb:d2:80:e4:f2:42:
69:7b:a8:b1:1d:f8:89:7a:94:68:70:b6:56:ac:fe:
a9:f0:63:f7:ee:69:e9:ae:d5:99:98:92:86:0b:7e:
40:1e:a9:68:67:e8:5e:9d:df:62:bd:c8:65:e8:2f:
16:46:03:be:f1:03:f3:ef:b1:ca:2b:0f:fd:a7:91:
68:c9:6d:5b:dc:8f:5f:cb:ba:bb:63:a4:0c:e1:be:
fd:9e:ef:96:04:3a:95:68:93:11:47:1a:3e:13:41:
71:79:2c:b1:92:a1:94:ec:52:2a:fb:eb:48:b9:bf:
dd:86:64:4e:b7:c9:9a:a5:12:d7:b7:8e:19:f3:69:
e8:57:8d:2f:4e:05:3f:cb:87:8b:58:d9:df:cf:30:
83:a5:a9:2c:4c:3e:12:97:bb:4d:90:b6:60:83:2d:
05:f4:50:94:ef:49:99:13:26:95:d4:47:3a:d0:41:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FB:6C:68:C6:E3:1E:84:82:B1:DD:7B:72:04:E7:6D:2F:05:D2:A7
X509v3 Authority Key Identifier:
keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/r_tsaMbjHoSCsd17cgTnbS8F0qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.1.0/24
Signature Algorithm: sha256WithRSAEncryption
76:76:55:e7:8f:b4:79:24:cd:c2:df:5e:3d:8d:b8:96:2a:6d:
4e:60:bb:48:d4:e1:87:87:ab:a3:72:0e:4d:72:ca:6d:53:f6:
be:0d:24:c7:64:e9:61:f8:b9:8d:7c:93:99:55:7c:a8:df:32:
ad:17:3e:d2:a0:fa:45:36:35:b4:72:5a:5b:1a:e8:3b:a5:f3:
aa:32:a6:09:b1:c2:99:4d:fa:91:f5:1e:e4:c0:2c:6d:89:b5:
c9:b7:fe:f4:e5:52:ac:bc:ea:79:b7:06:41:df:33:6b:0f:ed:
4d:f7:10:7c:ff:e4:59:74:08:2a:5c:1c:1a:29:93:96:88:c9:
ff:68:f2:77:09:d8:fb:98:12:dc:a7:5c:ce:91:6e:fd:54:98:
dc:5e:99:88:d7:52:95:a9:40:92:c1:80:e3:00:57:c4:78:62:
7a:7f:0f:12:fd:41:03:f5:c0:9d:36:b4:3a:13:bc:a0:27:31:
17:25:60:ad:cb:76:08:ab:b5:68:f8:9c:48:99:90:1d:89:6a:
fe:18:10:f2:01:65:71:f7:73:ff:d6:2d:6c:53:5d:ae:7c:05:
bb:a6:6e:c4:05:7a:4f:2c:ca:2c:c8:86:85:5d:19:90:3b:8b:
2a:1d:73:40:a8:e3:70:10:73:0a:db:14:8d:86:3b:ad:dc:c6:
8d:32:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net