Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa
File: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (raw, json)
Hash identifier: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=
Subject key identifier: F9:9A:30:85:67:49:96:73:B5:27:A7:24:32:20:B3:16:93:B8:36:A0
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 01942826FE99381F550379EE407B87F9FB42
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa
Signing time: Thu 02 Jan 2025 17:53:51 +0000
ROA not before: Thu 02 Jan 2025 17:53:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16086
IP address blocks: 192.102.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:fe:99:38:1f:55:03:79:ee:40:7b:87:f9:fb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 2 17:53:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f99a308567499673b527a7243220b31693b836a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:bf:3d:90:14:8e:f3:57:75:49:ae:f0:2b:
22:47:d1:51:9d:19:7e:0e:cb:1c:61:cf:a8:f4:b4:
95:a7:fc:6a:b4:d0:c9:c4:b6:ea:b8:40:f5:05:dc:
df:a2:eb:d4:c5:d8:a1:2d:da:07:6e:8e:5e:1c:6a:
df:28:30:40:80:7e:97:8a:ed:4e:8e:48:72:e3:76:
f1:e4:1d:e7:e8:61:32:f2:7c:79:6b:8d:00:e2:f1:
f1:c4:df:a7:9e:86:02:70:ca:50:a9:ed:c8:3e:4c:
6a:2e:19:45:4b:01:04:62:cb:6a:1e:2a:8d:85:af:
96:ac:81:07:a9:ab:02:4e:7f:57:f9:b7:c1:80:3b:
80:b2:2c:8b:c2:8e:26:f7:d9:a5:c7:c1:44:04:e3:
dd:0b:5f:63:a1:a5:59:02:51:22:d2:ab:94:ab:5a:
be:99:26:51:bf:69:bf:a8:2f:79:f7:f1:86:54:44:
b3:73:76:74:77:5f:6e:8e:1f:0b:7e:d8:01:27:95:
4a:ca:40:ea:be:23:ec:83:6a:a4:0b:ab:cc:c6:52:
2f:91:4a:61:6f:34:02:94:a5:e3:76:53:df:1c:aa:
5b:a6:89:cc:0c:fe:c2:1a:53:56:90:b5:5f:f8:4c:
ef:db:96:79:e9:e7:78:94:ba:27:4b:ca:9f:93:fd:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9A:30:85:67:49:96:73:B5:27:A7:24:32:20:B3:16:93:B8:36:A0
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.102.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:70:74:97:bb:88:7e:fa:86:b7:2e:9a:1b:56:84:26:bb:ff:
01:b4:29:4d:ec:49:9c:d1:43:09:a1:ac:06:5c:e8:cb:45:62:
f9:0f:9f:48:6c:22:f1:3c:d1:a0:1f:dc:75:69:14:52:96:18:
1b:d1:0b:21:a2:c7:df:8b:b7:01:b0:dd:fc:6f:27:74:e9:35:
96:3f:cb:e3:5b:05:eb:18:c0:9b:24:64:7a:71:ca:be:5a:7a:
8a:2d:73:6d:0d:a8:ed:78:1f:fd:ab:20:c2:54:28:de:73:c8:
10:fe:6a:ec:89:81:c7:dd:53:43:c5:fe:dd:92:aa:fd:7a:44:
be:3f:42:42:9f:c8:43:92:d2:bb:ea:c2:15:07:1c:a1:ca:21:
0b:81:34:6d:8c:ae:55:5b:58:0b:d8:17:d4:58:15:98:2c:24:
71:1e:6f:96:8e:c9:87:26:1d:28:29:a8:0c:9b:53:f8:1c:7b:
32:6a:b6:8d:6c:40:be:b1:a7:f7:23:b4:81:9a:ab:3c:da:f8:
c7:4a:81:35:50:f2:f8:14:10:54:47:06:94:eb:39:f4:b8:71:
44:21:4f:dd:67:fc:43:37:4f:67:dd:1f:e4:8c:18:5d:43:27:
4f:72:0a:b2:36:71:24:31:b5:f3:aa:f9:93:44:56:37:de:03:
fc:6f:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net