Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Ges1BmDyfYelIpgZsKsAw5hM6ik.roa
File: Ges1BmDyfYelIpgZsKsAw5hM6ik.roa (raw, json)
Hash identifier: gcDsXEd80REXGz0YRTVi4BsoxS9yl6U1vWpFES5hYvM=
Subject key identifier: 19:EB:35:06:60:F2:7D:87:A5:22:98:19:B0:AB:00:C3:98:4C:EA:29
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B7B214F8C626B7C749FD0CF0839A4
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Ges1BmDyfYelIpgZsKsAw5hM6ik.roa
Signing time: Thu 02 Jan 2025 09:49:25 +0000
ROA not before: Thu 02 Jan 2025 09:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 94.103.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7b:21:4f:8c:62:6b:7c:74:9f:d0:cf:08:39:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19eb350660f27d87a5229819b0ab00c3984cea29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:b5:8d:66:4e:67:08:21:65:b8:eb:f8:d8:
58:4f:cf:4f:89:7c:26:12:34:c3:9d:3b:74:cc:f5:
d9:ab:a7:cf:a6:66:b7:87:36:ff:cd:20:ca:c1:4d:
17:24:19:dc:fe:14:f3:46:6e:5b:82:25:ff:91:95:
85:d7:ff:e9:a2:9f:ab:a5:35:7d:73:ad:dc:0d:73:
56:cb:17:c5:df:0e:9d:f7:ae:8e:db:c3:42:4c:e7:
21:23:d5:fc:ec:ba:a6:66:79:08:90:6f:33:95:53:
dd:c2:ae:ce:58:88:19:7c:66:2e:5c:0c:ef:b7:4b:
9b:24:ad:bf:3c:b4:74:8e:de:e3:63:81:e3:a4:70:
45:35:bd:04:7b:34:53:53:f8:e7:17:4f:af:3c:00:
36:42:fc:d6:7b:c0:59:7d:56:de:a9:a2:56:20:6e:
44:dc:e2:0d:ee:04:57:23:bc:bd:07:44:24:2a:5b:
59:73:4e:dc:78:0d:57:21:ac:0f:cc:f0:31:af:6d:
58:8e:5a:c1:41:66:66:2f:a4:af:b3:79:6e:46:0c:
55:5c:a1:30:95:44:26:48:b6:bb:87:37:ab:b2:f5:
05:ec:e9:66:37:42:c3:f8:50:f2:21:88:ad:23:76:
d3:26:3b:3a:0f:21:e7:f0:c2:a5:23:75:f2:ac:77:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EB:35:06:60:F2:7D:87:A5:22:98:19:B0:AB:00:C3:98:4C:EA:29
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Ges1BmDyfYelIpgZsKsAw5hM6ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.60.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:eb:63:ef:c3:6b:3f:91:bb:3f:29:f4:9a:9b:46:67:e8:93:
a4:ed:06:b7:05:28:30:4e:8f:74:7d:03:7d:c9:bf:ba:9c:c7:
02:4d:20:bb:13:0d:9b:88:24:9e:0b:a7:d3:b8:a1:70:6a:6b:
6e:61:e7:b9:00:12:e3:66:6c:f0:53:eb:30:2d:52:8b:b4:07:
51:f5:11:ac:95:43:93:2b:b7:86:01:a9:31:74:f8:9d:e8:c2:
f4:92:51:6a:4e:9b:e0:84:cc:d2:33:ef:fa:9f:a9:2e:f0:da:
7e:01:00:dc:db:f8:7d:ec:76:05:9a:05:8b:33:7b:df:9d:f1:
7f:ca:b4:f8:71:2c:3c:7b:2d:32:16:13:68:7e:33:1a:68:0b:
07:bf:22:cc:54:c2:fd:9e:96:de:ca:bf:53:0d:0f:10:e6:09:
fb:36:5e:ae:89:df:b6:7b:64:a6:5d:df:7a:2b:93:e8:5f:0a:
69:43:5e:dd:ee:aa:a5:d6:d3:04:c1:3c:39:39:b4:1b:a2:b6:
07:c0:ed:77:97:1d:0c:63:95:8b:a8:f6:fb:9f:c7:ef:b2:61:
03:c8:38:42:9a:2d:af:60:98:7e:7f:3e:b0:aa:c4:3e:5f:d6:
a7:1c:24:ed:3a:4d:0c:1a:be:ad:e8:e2:3b:6f:e7:35:84:dd:
26:c6:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:55:46 2025 by rpki-client on console.sobornost.net