Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/y5znuwpLKZ8JL_6tjS8ThMPHHLE.roa
File: y5znuwpLKZ8JL_6tjS8ThMPHHLE.roa (raw, json)
Hash identifier: Ff9QtDrzEqE+YPfo1QrUfXElhWcFkl8EJxj88BmOBUY=
Subject key identifier: CB:9C:E7:BB:0A:4B:29:9F:09:2F:FE:AD:8D:2F:13:84:C3:C7:1C:B1
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 019613F55E396DF536FF051FDB4EF58B078F
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/y5znuwpLKZ8JL_6tjS8ThMPHHLE.roa
Signing time: Tue 08 Apr 2025 05:52:49 +0000
ROA not before: Tue 08 Apr 2025 05:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 193.104.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:f5:5e:39:6d:f5:36:ff:05:1f:db:4e:f5:8b:07:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Apr 8 05:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb9ce7bb0a4b299f092ffead8d2f1384c3c71cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:a8:0b:9b:21:2f:91:07:7f:a9:61:c6:ff:
c3:9d:64:82:0e:9a:42:df:74:6a:a2:28:20:ae:ab:
5d:14:d3:f5:2d:16:9e:41:da:f3:a7:59:ca:f8:86:
a5:ec:05:83:c4:84:e3:58:48:cb:b8:e1:14:6a:a0:
c0:cf:cc:3d:8b:b1:ad:cf:a8:9f:4a:26:50:c7:94:
01:b5:0a:0c:fe:5f:b0:4c:1d:69:46:59:a3:b2:1f:
a7:d9:cc:9f:d3:4d:68:9f:fa:8d:c0:95:66:44:28:
fe:b8:72:4d:ad:50:42:ca:24:ce:c6:07:5d:6e:3c:
19:f2:7e:92:5b:00:ac:71:1c:09:ee:cc:66:4b:ad:
b4:e5:6a:3b:e2:e1:3b:55:bd:cb:cf:15:ef:90:d4:
b5:5b:46:f0:fd:ef:9d:40:31:fd:ea:e4:61:d4:fc:
e3:57:c6:6e:f9:eb:92:34:78:ba:73:de:f8:3b:8f:
fb:23:ab:86:bd:cf:4f:ca:a0:b7:c7:65:fe:80:7c:
16:ec:9e:fb:50:b4:26:54:60:fc:58:f3:9f:a1:47:
00:ff:ac:48:f5:98:3b:e8:71:b3:f7:f9:92:e0:b9:
86:12:19:d7:70:46:90:d7:d7:17:c4:6c:1e:19:da:
f7:7a:04:4a:f6:d8:53:76:11:ec:fe:b1:54:9a:95:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9C:E7:BB:0A:4B:29:9F:09:2F:FE:AD:8D:2F:13:84:C3:C7:1C:B1
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/y5znuwpLKZ8JL_6tjS8ThMPHHLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.33.0/24
Signature Algorithm: sha256WithRSAEncryption
77:22:b6:ea:40:ab:af:4a:b4:36:21:88:15:70:47:be:ff:4e:
c3:ab:bd:4e:fa:ac:9b:ae:1a:79:bb:2a:49:98:38:7f:d5:62:
1a:98:6e:ed:d4:07:8f:59:b0:ff:4b:d8:9d:ab:23:e2:53:cb:
1f:85:7b:4c:0b:a5:ac:81:b8:ad:67:ec:76:da:5b:61:d8:66:
8f:8b:c2:82:db:88:2c:5f:a9:94:90:a2:55:eb:2d:e5:50:6c:
04:62:8c:df:ed:34:9d:18:a5:a8:4f:1b:c3:3e:1c:dc:74:7f:
df:26:62:56:39:fb:96:96:2e:e8:d3:4d:e7:1d:5e:f1:94:b1:
03:54:5c:7e:ec:18:98:eb:4a:f9:61:af:d8:63:da:0e:cb:04:
43:c3:a3:50:18:c1:5f:48:68:b9:ee:1f:81:58:e1:9f:e6:d9:
c8:b8:7f:d5:7c:34:90:df:77:f9:96:bf:38:c8:53:d3:d5:81:
85:74:f6:b3:61:79:70:71:72:ce:a4:01:7c:e4:6f:41:13:5d:
ba:c4:ce:a9:a6:83:d7:6e:ea:ad:9b:c1:df:14:cd:81:92:4e:
03:16:5e:c5:2b:6b:6b:21:a4:bb:38:b4:dc:74:33:7a:6f:26:
38:85:19:6d:e4:3f:7c:06:35:75:f8:d4:e0:68:c2:24:67:70:
7d:d0:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net