Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/cutf0Yk4GqOLANVUSKcxrSdUxug.roa
File: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (raw, json)
Hash identifier: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=
Subject key identifier: 72:EB:5F:D1:89:38:1A:A3:8B:00:D5:54:48:A7:31:AD:27:54:C6:E8
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019422203491FA0929196A38237DA1320D41
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/cutf0Yk4GqOLANVUSKcxrSdUxug.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25400
IP address blocks: 193.23.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:34:91:fa:09:29:19:6a:38:23:7d:a1:32:0d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72eb5fd189381aa38b00d55448a731ad2754c6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:33:95:07:77:bf:8a:8d:86:57:8d:00:12:
df:04:5f:d6:6d:d2:a4:ef:4c:98:1f:dc:fb:5c:dc:
d3:2d:17:eb:81:0b:79:e5:87:ef:91:62:35:ad:9e:
d8:61:c4:02:c7:b2:c3:45:34:10:0a:21:da:2c:60:
e1:e9:9e:11:d2:a7:9d:73:ed:63:b0:e7:dc:1e:a1:
79:74:8a:87:9f:b1:00:57:a5:13:18:18:1f:6a:81:
b2:41:ce:cb:ee:c1:73:04:de:df:63:55:e8:8d:c4:
8e:35:b4:7f:da:3e:17:ae:cf:0e:35:a4:3f:cf:b3:
24:11:58:30:2e:28:96:c7:a9:83:11:b1:f2:85:5a:
fc:fa:a8:64:90:80:a0:f9:6e:b6:f3:bd:d5:e0:e4:
ee:17:a1:13:e6:37:c2:2f:be:f3:59:6c:fd:03:1f:
70:79:58:c1:ab:e6:82:03:bf:ac:3a:ee:cd:f5:67:
53:b1:12:43:e3:51:ea:36:8f:39:3a:d9:88:0e:23:
12:11:0d:c5:92:22:35:15:7c:43:0a:e6:16:d4:6b:
92:92:3a:8a:29:bd:dc:d7:82:c9:7b:14:5f:ed:ec:
44:84:bc:b3:65:1e:0d:c4:8d:e6:3e:71:fc:64:1a:
ee:43:59:b1:bb:78:67:60:f5:fd:d8:56:7b:67:95:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:5F:D1:89:38:1A:A3:8B:00:D5:54:48:A7:31:AD:27:54:C6:E8
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/cutf0Yk4GqOLANVUSKcxrSdUxug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.229.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a5:99:3d:e2:ea:01:f3:08:8c:5d:d0:9b:3a:a2:18:49:f7:
3d:78:96:3e:92:25:72:35:12:94:e7:21:9a:55:2a:88:15:f5:
9e:11:f0:85:f3:a4:bf:64:78:83:98:18:ab:d1:a7:43:59:61:
54:7b:5d:05:27:5f:ae:b8:bd:3b:38:fd:d0:d2:7c:4a:69:58:
3d:3d:9c:ec:db:46:59:79:74:e1:49:c9:cc:c8:50:2e:a8:03:
56:cc:6e:3e:a4:e2:a8:cd:d7:66:f4:24:b9:c2:cf:7e:47:a1:
22:a8:c0:42:ae:8e:2b:4a:98:83:93:30:49:d9:97:e9:36:fc:
8a:06:13:fd:7a:05:13:8d:95:de:ab:5e:96:9c:18:82:b5:17:
64:f8:00:2b:82:25:a6:9f:d8:82:be:d0:f7:36:86:cc:3a:95:
40:20:01:48:39:77:25:54:e4:35:1f:b7:80:08:f8:1a:59:63:
48:ad:c8:90:c3:98:db:c6:71:7f:40:0f:8d:da:c0:1a:08:a4:
12:83:3e:db:e8:51:c9:ae:76:8a:cb:e7:c3:ba:99:be:25:af:
3d:eb:90:db:41:c1:c3:5a:20:27:b4:77:39:ed:88:aa:a8:1f:
23:c7:e3:e9:fb:1b:dd:6d:e2:04:04:6d:54:af:c9:6d:34:01:
23:3a:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net