Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/Ps7ItdcqBOZwFy7JAglhbkmvgec.roa
File: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (raw, json)
Hash identifier: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=
Subject key identifier: 3E:CE:C8:B5:D7:2A:04:E6:70:17:2E:C9:02:09:61:6E:49:AF:81:E7
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 01942444A93CFC0830A9C53F2D95213B7F20
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/Ps7ItdcqBOZwFy7JAglhbkmvgec.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42886
IP address blocks: 194.0.92.0/24 maxlen: 24
194.0.93.0/24 maxlen: 24
194.0.94.0/24 maxlen: 24
194.0.95.0/24 maxlen: 24
2001:67c:2dac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a9:3c:fc:08:30:a9:c5:3f:2d:95:21:3b:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ecec8b5d72a04e670172ec90209616e49af81e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:0f:9f:7c:6b:00:8b:da:51:73:d1:24:5a:
7b:6a:ec:4f:a8:f6:cd:03:1e:d4:b8:75:42:69:7e:
66:c1:4b:09:c2:42:37:44:3c:73:8d:30:16:3e:0a:
18:b3:37:06:3b:0a:93:8e:42:b6:b3:00:b3:05:f5:
58:43:5f:de:23:55:75:86:60:ff:ba:e7:5b:ca:25:
23:a0:2e:4f:82:56:2d:47:92:02:e9:71:49:4b:2d:
34:1e:72:98:fb:a5:bc:e0:b6:93:fd:62:fc:d8:7e:
c4:5c:d4:7d:d8:98:bc:78:17:7a:99:7b:44:5d:ca:
e5:aa:b5:dd:e7:3c:c1:d9:ee:a5:cb:00:05:98:e9:
7e:98:c5:3b:6a:c1:cb:81:12:3b:3f:0e:2e:d6:48:
f6:ca:cd:95:ee:c3:c4:93:58:5e:5f:3e:5d:54:8d:
1f:47:ca:fc:19:1b:e6:21:5f:ed:2d:ad:6d:33:1f:
3c:24:e6:1c:70:57:2f:45:c2:dc:16:36:34:09:db:
96:c5:53:3e:d3:bc:e7:10:4b:c5:1f:05:22:6c:fb:
7f:1e:80:f5:6f:77:66:61:87:f2:90:42:8b:a1:7d:
fc:49:42:79:9f:12:d5:6d:a7:8e:26:24:c1:43:8e:
82:06:6c:21:0a:45:4c:02:32:15:4e:c9:5a:b3:d2:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:C8:B5:D7:2A:04:E6:70:17:2E:C9:02:09:61:6E:49:AF:81:E7
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/Ps7ItdcqBOZwFy7JAglhbkmvgec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.92.0/22
IPv6:
2001:67c:2dac::/48
Signature Algorithm: sha256WithRSAEncryption
4d:22:91:39:31:01:48:85:ea:e0:9e:87:2b:7f:b3:b4:a8:a7:
5e:7c:58:cf:1f:58:dd:a4:0b:cf:e1:ad:52:bd:09:2f:d2:6b:
b9:e1:11:b1:97:e2:22:a0:4b:d9:d5:d8:40:13:e7:b1:4f:0a:
5a:4c:d6:94:50:74:68:e8:dd:c0:88:f5:02:a8:84:13:50:90:
b6:e8:1c:9a:c0:81:34:cd:af:71:3a:40:07:11:16:a5:ec:2f:
f8:ad:a6:80:99:49:15:78:75:5a:38:ae:ee:fd:78:4d:75:b0:
5a:02:cf:25:f1:2f:04:b1:c3:48:78:00:d2:1a:46:bc:d5:ab:
d1:80:e5:12:f0:1e:b4:d9:22:17:f6:cb:bc:54:e2:b4:ef:39:
16:72:e8:31:8d:12:36:97:3b:a7:28:7d:f6:de:7c:4d:9a:d1:
be:d4:2d:d8:fa:bf:ca:df:2c:4c:41:9e:0a:05:91:7f:50:88:
94:68:50:88:e6:a4:a7:8e:ff:76:10:ee:19:7f:53:33:01:41:
3e:bb:96:ee:80:ec:b0:c9:18:c0:74:36:f6:c0:46:94:81:f4:
18:73:5c:ee:69:63:bb:b9:69:24:3c:87:65:f1:75:d0:fe:1c:
9c:73:77:63:85:f2:48:57:f8:15:a5:03:6a:8a:9c:f3:ca:a0:
a9:ca:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net