Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/0uXZsIzOuGlbguIFz3Zkl5De9lU.roa
File: 0uXZsIzOuGlbguIFz3Zkl5De9lU.roa (raw, json)
Hash identifier: YNeeVSttuQ98olLv+5aLbTyXkKQvSMcGX+VvVs9cMAQ=
Subject key identifier: D2:E5:D9:B0:8C:CE:B8:69:5B:82:E2:05:CF:76:64:97:90:DE:F6:55
Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial: 01942144645FEDB0721F83A1275495443E9B
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/0uXZsIzOuGlbguIFz3Zkl5De9lU.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202392
IP address blocks: 194.62.148.0/24 maxlen: 24
194.62.149.0/24 maxlen: 24
194.62.150.0/24 maxlen: 24
194.62.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:64:5f:ed:b0:72:1f:83:a1:27:54:95:44:3e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2e5d9b08cceb8695b82e205cf76649790def655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:1e:4c:5c:19:4b:f1:10:8a:61:c1:b7:7f:
71:fb:40:7d:73:a1:ae:b8:01:7a:9d:a0:32:11:73:
de:2e:2a:af:09:d3:0d:02:f8:02:7a:27:44:a9:85:
41:36:72:e9:e6:ed:61:10:a8:92:d6:9b:c0:63:d7:
7d:fe:4c:e5:18:58:f8:96:42:57:76:c5:72:22:4b:
af:81:e5:67:8b:d9:75:32:ae:f6:e4:1d:26:00:e6:
7d:90:b8:ab:0b:cb:65:b4:d0:ef:ac:68:9a:d5:01:
f0:48:75:a1:a7:96:c8:4b:e8:43:c1:90:1e:99:47:
1b:66:c8:ed:b8:cc:a7:03:b1:1c:c1:51:41:5b:8a:
8a:33:95:aa:e3:2b:bc:42:a4:a4:c9:e8:c3:87:40:
d9:2c:56:fc:7f:22:27:21:69:73:be:3a:30:f6:41:
fd:63:bd:91:c4:1d:b7:2e:a8:b3:b2:d7:12:bd:6b:
18:fe:08:6b:35:87:a3:14:fd:7d:a0:35:0e:15:05:
8c:3e:e6:aa:e5:fc:44:24:0a:b0:81:c9:25:b4:ca:
4a:f1:6c:9c:fd:5d:04:e6:e9:50:d2:74:1e:29:b3:
37:69:ec:3d:86:81:88:c6:19:2a:9f:98:8f:83:7c:
65:b7:da:2b:59:4f:d1:3a:05:51:d9:95:70:c3:ff:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E5:D9:B0:8C:CE:B8:69:5B:82:E2:05:CF:76:64:97:90:DE:F6:55
X509v3 Authority Key Identifier:
keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/0uXZsIzOuGlbguIFz3Zkl5De9lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.148.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:3e:00:5e:c3:fd:25:0e:3a:82:8c:30:bd:0b:e3:a5:b7:f0:
0d:9c:ca:20:a0:89:90:e6:aa:78:da:12:74:76:b0:06:7b:72:
1f:f8:bc:1e:eb:69:10:83:68:e1:ae:ad:04:11:de:44:38:26:
a5:9d:95:0b:7d:02:60:1f:49:fb:b7:a9:cd:85:66:86:a5:cc:
ac:2a:94:77:e2:1a:95:18:12:83:a8:48:e3:b3:ea:3c:89:0c:
8f:de:1d:ce:f2:76:49:f5:2d:6c:22:a9:52:74:28:e7:e0:b7:
c6:2d:cb:6e:f6:d4:9f:7d:d8:83:87:95:11:f5:be:83:b9:f9:
f3:d3:cd:9e:94:d7:ad:75:98:e2:d0:3f:c5:39:f8:96:ba:f3:
9e:89:e4:60:e4:80:08:fe:76:56:eb:c5:3c:64:0a:52:df:02:
69:a1:52:f5:c2:db:7d:0f:37:12:c8:4a:0a:fc:d6:e3:9a:c6:
ac:15:e0:65:89:c8:35:55:17:2c:05:de:d4:66:8f:1a:85:f6:
71:74:a6:5f:32:33:15:63:7c:d8:85:1e:18:52:b0:26:dd:25:
80:5f:62:eb:a6:63:93:f1:2e:f4:68:f2:c7:7c:c6:55:eb:80:
12:13:ad:21:84:f5:72:c1:1b:35:e6:74:20:e5:c5:b0:4b:17:
2e:58:30:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net