Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/6dkBUwL-mhaODMyRqo4g1V5Aqm0.roa
File: 6dkBUwL-mhaODMyRqo4g1V5Aqm0.roa (raw, json)
Hash identifier: Qmi5vwRBC8G/em6HsgOnkDIH/4egeMg5iAbwYtXG1+s=
Subject key identifier: E9:D9:01:53:02:FE:9A:16:8E:0C:CC:91:AA:8E:20:D5:5E:40:AA:6D
Certificate issuer: /CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Certificate serial: 019426D9F9530F53DF672A76F7FDC6EF5B67
Authority key identifier: C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/6dkBUwL-mhaODMyRqo4g1V5Aqm0.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31014
IP address blocks: 193.28.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f9:53:0f:53:df:67:2a:76:f7:fd:c6:ef:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9d9015302fe9a168e0ccc91aa8e20d55e40aa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:3a:a5:89:3c:0a:32:fd:58:58:2e:40:bd:
25:68:ea:1f:3f:6c:86:bc:5c:00:ef:f6:a0:8d:6f:
45:65:82:86:11:da:7b:ca:ca:3e:12:62:8d:23:b5:
e9:34:a2:b4:99:f4:c8:02:e8:89:34:25:d0:76:67:
52:da:be:07:9a:72:9e:de:ca:84:df:01:0a:ef:65:
52:c7:9a:62:2d:e3:ea:74:ad:af:80:a7:91:cd:9c:
2e:c9:a0:e2:f9:38:8a:0c:7d:5f:53:1a:d7:6e:d6:
3a:46:b9:6d:db:df:ad:f0:6f:8a:e7:45:6a:85:9a:
72:42:a0:c4:c3:c6:f0:f1:4f:38:a9:5c:95:f1:36:
70:8e:a7:77:d4:3d:a0:f8:13:18:0f:cd:9c:68:72:
02:46:27:50:c1:84:b0:5a:c5:12:53:de:59:67:15:
45:fb:0c:a6:5f:c6:ab:25:1e:f3:a0:cb:59:e0:29:
c2:96:c2:8e:40:3d:9c:40:7c:26:c5:89:a8:5a:2a:
95:6d:51:64:86:b9:0d:04:f5:aa:4e:73:21:bb:69:
29:7d:e1:4c:58:ff:4d:23:ab:b6:98:98:e6:57:21:
4d:36:9c:cb:c6:e2:b3:4e:53:4f:80:d6:2f:dc:6a:
2b:c8:52:91:5a:4d:d4:c7:b8:9b:0f:8f:c9:af:2e:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D9:01:53:02:FE:9A:16:8E:0C:CC:91:AA:8E:20:D5:5E:40:AA:6D
X509v3 Authority Key Identifier:
keyid:C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/6dkBUwL-mhaODMyRqo4g1V5Aqm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a6:4e:80:fd:e0:10:51:4c:ab:52:21:9f:70:7e:25:55:1a:
72:c2:58:cf:dd:0f:6f:8f:32:48:7d:27:e8:31:e8:43:b7:26:
10:03:98:72:b5:77:d9:95:b4:4f:bd:9c:c7:28:15:71:8d:fc:
d5:3d:fa:54:4a:79:3f:c0:aa:3a:98:a7:36:78:d4:da:2d:6f:
4d:dc:69:b5:de:73:9e:4d:84:f1:fe:ce:55:35:d7:fa:77:d5:
24:7d:c9:90:df:39:d0:eb:7c:97:b8:ef:51:fa:97:f4:b7:5b:
62:12:93:33:95:fc:be:bf:18:1b:fd:a6:72:ef:1e:dc:b8:98:
84:4f:d6:6a:e0:50:84:35:3b:6b:e1:8d:85:13:53:08:98:59:
64:1f:bc:fb:42:68:46:8c:ab:90:1e:2f:4b:bd:09:6a:de:2a:
f1:d5:b1:0f:cf:b8:4d:90:82:06:86:fa:dd:e6:8a:63:76:ef:
ae:f1:64:98:d6:30:1a:a3:d4:ac:f6:05:bd:1c:6d:9d:92:35:
9b:9c:8c:42:a8:62:a5:d2:01:b1:1e:3c:cf:68:50:8a:43:4d:
ae:a7:34:f4:67:9f:5a:a3:d6:a7:67:2d:85:8e:16:95:7f:05:
a3:83:ca:e0:0d:e1:3f:b6:e7:a0:28:31:95:5d:76:6f:07:0f:
69:e8:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net