Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/sRhEXZaGwXqtptay-RphiAgSVt4.roa
File: sRhEXZaGwXqtptay-RphiAgSVt4.roa (raw, json)
Hash identifier: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=
Subject key identifier: B1:18:44:5D:96:86:C1:7A:AD:A6:D6:B2:F9:1A:61:88:08:12:56:DE
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 0194258FAC013B71EF70236B1E849D1856EC
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/sRhEXZaGwXqtptay-RphiAgSVt4.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59554
IP address blocks: 193.160.92.0/24 maxlen: 24
193.160.93.0/24 maxlen: 24
193.160.94.0/24 maxlen: 24
193.160.95.0/24 maxlen: 24
2a0d:ed40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ac:01:3b:71:ef:70:23:6b:1e:84:9d:18:56:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b118445d9686c17aada6d6b2f91a6188081256de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:c6:f9:82:15:9a:e0:be:91:a0:52:f2:67:
23:af:4f:f1:1e:58:ff:b0:33:c9:74:49:70:3b:8c:
45:90:f0:6b:c5:5c:c7:0a:15:fe:f0:5c:92:e8:75:
b6:a4:ff:86:8e:cb:6f:d3:1f:f1:7b:fe:ad:43:26:
1e:14:c7:f8:05:af:e8:1e:b1:7b:f6:20:2b:64:93:
ba:d7:80:58:3f:fa:b5:22:db:76:59:0b:f6:81:21:
12:a5:3d:1f:4e:04:ad:e5:18:57:de:fe:14:7c:1a:
5c:b6:a4:87:64:30:48:43:9d:d9:ab:d6:75:6b:a7:
c5:d0:a7:f6:bb:15:3b:a5:c4:d5:5b:d2:fe:36:c5:
fb:6a:28:74:85:5b:44:44:ec:e6:0b:b8:e1:14:54:
dc:4a:1e:ee:8d:a5:ac:b1:bc:5c:e0:8b:6c:9a:f2:
43:07:d6:2d:e9:e3:07:e1:8a:1a:66:47:f0:80:c4:
05:63:9e:df:2a:b0:96:b0:1b:c4:22:46:53:39:58:
f8:fb:79:1b:eb:56:dd:dd:3b:00:0e:58:99:10:e5:
56:b2:49:f0:e1:cd:a3:d8:8e:01:15:bd:7d:9a:80:
03:1c:37:e9:88:37:7b:26:35:3d:e8:e4:8b:6d:56:
cc:64:ae:b9:a2:24:7e:2a:27:cc:d9:97:8a:38:cd:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:44:5D:96:86:C1:7A:AD:A6:D6:B2:F9:1A:61:88:08:12:56:DE
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/sRhEXZaGwXqtptay-RphiAgSVt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.92.0/22
IPv6:
2a0d:ed40::/32
Signature Algorithm: sha256WithRSAEncryption
6e:62:54:ba:6e:28:d6:35:94:b1:9c:8b:76:81:b1:d3:a7:ad:
40:10:fa:50:3e:28:9c:63:08:6f:97:3a:70:30:04:c3:85:10:
ad:b0:bc:5b:6e:c3:e9:a4:18:a1:fa:15:40:a8:28:a1:29:c8:
6c:74:a2:7e:4b:50:14:7e:cf:6a:78:88:9c:41:6a:b2:37:30:
93:02:92:2f:3f:a6:60:f8:62:0b:b0:4c:e8:a2:3f:d0:c9:6a:
d4:94:3c:e7:22:f7:92:b5:32:85:2f:ee:69:02:e1:6a:c8:6d:
44:00:b2:c7:30:a3:09:99:3b:3d:80:d3:20:41:c4:49:b7:01:
18:17:ab:45:54:09:a8:b8:7e:15:c5:16:0d:b0:19:be:6c:cf:
b2:ba:72:e1:8c:a0:08:b2:63:13:71:f7:36:69:98:c8:0c:3b:
91:8a:9b:78:fb:2f:39:05:f9:68:c2:97:b5:99:ca:ec:75:f8:
dc:a6:3e:bd:f9:42:fe:7d:42:b3:85:cb:03:d8:bc:24:c8:b7:
14:2b:87:c5:45:b5:54:a1:40:df:31:96:d6:c0:4b:ff:f1:6b:
85:e7:19:cd:01:af:80:3b:e4:80:fb:c3:5a:d8:30:f6:bd:b6:
4e:c6:1b:85:f0:c0:a5:c3:9a:6b:8b:e8:26:da:0b:5e:db:2d:
b8:83:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:38 2025 by rpki-client on console.sobornost.net