Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/iONsIN03z4IKNXYg6US72IxJBcU.roa
File: iONsIN03z4IKNXYg6US72IxJBcU.roa (raw, json)
Hash identifier: X7Mx72vOONyXDgxRP6UfNMJzZuu3rnCgwN1U1ZoR2/s=
Subject key identifier: 88:E3:6C:20:DD:37:CF:82:0A:35:76:20:E9:44:BB:D8:8C:49:05:C5
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 019425FC51909C65AA2ECEA71605D3715028
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/iONsIN03z4IKNXYg6US72IxJBcU.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 194.153.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:51:90:9c:65:aa:2e:ce:a7:16:05:d3:71:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88e36c20dd37cf820a357620e944bbd88c4905c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:3d:98:19:96:f6:0c:f9:a6:05:6e:2c:33:
b3:7a:29:07:78:15:fd:0b:d2:bc:d6:bd:76:8f:be:
f1:dc:64:fe:5b:b0:1c:3c:03:e4:2e:40:b4:d6:ea:
f7:20:39:9d:59:e1:c5:62:19:f1:ad:4c:52:34:b0:
75:d7:a0:b5:97:d6:41:de:6b:84:76:f9:2a:5a:4a:
28:54:42:ae:3f:ca:ba:ea:d1:d2:86:a8:51:45:d9:
f8:6d:8f:6f:1c:ab:6e:37:b2:ef:c3:e8:c3:51:a6:
a8:0c:73:76:89:95:88:35:93:76:ce:b0:3b:78:f2:
d8:f4:01:a8:ac:e1:bc:71:8e:d8:1b:01:7b:23:61:
82:81:72:b3:b5:04:08:3b:d9:53:e7:8e:b5:ed:e7:
e1:c7:de:8d:ab:08:ed:c9:9e:05:a4:63:c7:e0:43:
6f:bf:79:f9:2a:71:0e:74:3b:1d:64:25:a7:39:fc:
15:e8:da:d8:61:82:d3:7e:bc:8f:9a:d3:3f:4a:da:
a7:c4:34:71:45:a2:3c:f5:a9:60:c3:94:98:1f:a8:
b5:69:a0:98:da:b1:7a:1f:01:ec:f1:5d:98:f3:a5:
4d:53:d7:d2:d5:6d:1d:b2:0b:a4:34:6e:78:f0:44:
7f:06:bf:6e:3e:f0:ff:83:be:08:39:3c:2e:1d:26:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E3:6C:20:DD:37:CF:82:0A:35:76:20:E9:44:BB:D8:8C:49:05:C5
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/iONsIN03z4IKNXYg6US72IxJBcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.87.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b7:f5:bf:db:33:78:b8:2d:43:19:bb:36:7d:cb:06:d1:b9:
ec:81:ec:6e:76:e4:bd:5a:6f:ef:0a:2d:10:19:74:64:b1:a7:
85:cf:ba:41:08:6d:ed:fb:80:b5:94:1e:1b:4a:00:0f:d8:f7:
05:af:4e:25:e5:ce:07:34:72:38:b9:cc:2c:ca:f6:05:84:63:
32:37:0e:39:84:e5:d2:9a:c0:55:15:5e:49:23:ae:65:0b:61:
78:00:d6:72:88:c7:05:5c:f9:e3:04:15:bb:ca:d0:91:5f:a9:
42:da:4f:c9:ea:2f:04:c3:05:f2:a1:b5:6c:de:3f:45:9a:99:
d5:47:eb:bb:5e:54:c6:cb:f4:a9:96:3b:f6:15:44:0d:52:e0:
f1:96:da:33:80:e7:23:9c:68:ec:60:23:94:a0:7d:d1:8b:2f:
80:81:93:bc:90:6b:a8:fd:74:93:8f:4f:fa:39:65:81:61:2c:
1e:56:0c:d3:90:f7:43:20:4a:29:d5:bd:7b:53:8b:6d:d6:d8:
a1:40:8c:16:df:12:db:a1:85:8f:4d:fa:1c:01:60:d2:02:00:
1c:a3:4f:ab:64:36:1c:1d:e6:bb:05:34:b2:f2:8e:b3:73:a9:
52:4b:58:f1:a4:9d:39:6f:a2:e6:5f:8a:94:5a:cd:0a:86:91:
7d:c2:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net