Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/zPOGOjbboaQbMeAXK6bmSX50QU0.roa
File: zPOGOjbboaQbMeAXK6bmSX50QU0.roa (raw, json)
Hash identifier: OFCJwWf3DDsRtbtAfKkoaMdc4vMktJu9Jl985uyVWSg=
Subject key identifier: CC:F3:86:3A:36:DB:A1:A4:1B:31:E0:17:2B:A6:E6:49:7E:74:41:4D
Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial: 01941F8C3806527EC971D2828571597F5BB0
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/zPOGOjbboaQbMeAXK6bmSX50QU0.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33910
IP address blocks: 194.126.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:38:06:52:7e:c9:71:d2:82:85:71:59:7f:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccf3863a36dba1a41b31e0172ba6e6497e74414d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:4b:f6:ce:58:48:db:45:76:94:8f:23:dc:
27:b9:cc:7f:0b:65:5f:b3:5b:cf:3c:98:21:1e:8d:
f5:85:82:95:6d:15:2c:6f:e3:0e:b6:fe:5b:f5:70:
93:f6:c8:3c:4b:fa:0d:7a:2d:69:26:84:d2:f1:ef:
9b:71:6e:b3:db:03:e3:6d:10:48:ef:7a:83:bf:44:
bc:bc:89:6e:60:84:fd:23:30:2a:36:a1:0c:68:d1:
3b:2e:9a:99:ae:9a:b8:04:b1:e7:e0:af:eb:b5:fc:
4b:0a:25:8b:cb:03:17:bb:2e:de:11:04:bd:50:6a:
ae:f5:f7:49:31:87:17:ca:d6:97:76:a6:d6:4b:af:
fa:76:26:40:b0:98:f8:a1:1f:92:46:8c:42:33:e9:
b3:b5:51:96:7d:96:39:95:87:a7:14:1d:64:ab:62:
16:46:6d:a5:61:37:8f:66:80:04:04:fc:6f:5a:e6:
a1:14:ea:8d:0e:c4:e2:07:e4:26:d9:24:c6:f3:4d:
2b:ec:b0:96:d6:b1:85:43:8d:8e:3e:6c:b2:e9:9d:
a7:e8:89:de:36:f5:63:08:9b:f1:b1:f8:db:24:fa:
b0:ba:48:2d:20:fd:69:f7:d5:42:b1:ee:fd:a7:5e:
8a:b3:21:f4:1e:f5:f0:e9:f0:72:4e:1d:56:ec:e8:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:86:3A:36:DB:A1:A4:1B:31:E0:17:2B:A6:E6:49:7E:74:41:4D
X509v3 Authority Key Identifier:
keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/zPOGOjbboaQbMeAXK6bmSX50QU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:20:e9:33:e9:df:7b:e2:1d:75:f2:ab:01:4a:43:52:df:91:
12:8c:80:0c:29:6c:a6:f2:ed:3b:af:81:9a:2c:2b:40:3f:52:
fe:d0:4b:0f:99:d7:ea:1b:45:bb:78:fe:ec:58:04:4a:03:18:
23:97:55:b8:3c:e4:aa:c9:b8:ef:fc:66:fa:ae:a7:f3:9a:62:
1a:86:7a:86:fc:9d:1c:86:bc:36:8f:bb:4d:15:14:4f:de:39:
15:5e:a4:8a:0a:65:8a:d3:33:8b:4e:2f:08:d6:a0:97:11:79:
a7:57:54:ad:2f:29:1c:c9:24:71:0e:b8:0f:1f:19:44:71:0e:
a1:9d:28:c7:bb:60:f6:ab:7d:f2:48:34:7e:82:f1:d2:12:61:
57:b1:4c:b0:de:57:81:e7:85:d4:fc:d0:02:0a:41:7c:96:4e:
f6:3f:74:65:64:79:00:b3:a3:e8:d4:69:5a:00:a8:c8:01:47:
e3:ea:fd:96:67:28:4e:b9:58:d7:de:2c:06:80:e9:1a:3c:6e:
a3:89:f5:5b:0a:83:a8:ae:af:b5:31:41:10:2c:ff:3c:82:3c:
08:34:2d:cb:f4:9d:7b:01:24:5e:d9:50:f7:c2:82:6c:0e:4d:
b3:ec:08:fa:27:d1:a9:1d:ce:f6:44:59:45:1a:48:da:7e:12:
a8:4a:88:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net