Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/9R7qE2JixKC-vbV8JeqORUi7upg.roa
File: 9R7qE2JixKC-vbV8JeqORUi7upg.roa (raw, json)
Hash identifier: qMwpouu0cneK+WPX+gDmDCVwU3yx/zaa1DbEZEykJcU=
Subject key identifier: F5:1E:EA:13:62:62:C4:A0:BE:BD:B5:7C:25:EA:8E:45:48:BB:BA:98
Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial: 01941FFA707E39765AA02CFB0C8488B9B618
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/9R7qE2JixKC-vbV8JeqORUi7upg.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28725
IP address blocks: 194.50.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:70:7e:39:76:5a:a0:2c:fb:0c:84:88:b9:b6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f51eea136262c4a0bebdb57c25ea8e4548bbba98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:71:43:9c:5e:ab:4b:67:11:69:fb:7f:42:
38:3a:87:be:bf:b3:ce:7a:bf:31:d0:a8:6c:0d:d6:
14:bb:2d:31:57:b1:5d:f1:57:a2:8e:60:48:98:9e:
8b:bc:57:e1:89:f9:f2:9e:33:07:0b:bb:33:4b:a2:
38:f4:c8:17:3b:5e:5f:ed:56:98:15:cb:47:e4:90:
7e:89:8e:a0:1c:bc:c5:3f:be:92:bd:01:0d:8a:15:
22:7d:22:eb:f7:b0:79:c0:4b:17:38:14:3a:9a:f6:
d2:99:f1:c6:ab:ab:88:29:98:20:97:6d:db:77:9a:
d8:aa:73:39:f8:31:d2:63:b8:2c:26:a3:20:3d:37:
f9:5f:7d:4f:ca:d9:7d:0f:8e:24:0b:85:56:29:50:
e6:e9:d9:b9:50:f9:b3:32:f3:90:25:9b:e0:48:e3:
79:b9:47:47:77:fb:b1:3d:e4:b0:ab:b3:5d:60:24:
d5:51:1c:7d:17:d0:bd:c1:81:bb:40:c1:65:0c:58:
aa:eb:d7:2c:da:59:36:16:e9:59:b3:b8:b4:73:4b:
8d:3f:3d:11:f5:a2:b8:45:52:05:72:39:92:df:33:
22:d4:00:c7:92:17:0d:21:30:fd:bb:b6:f1:0b:fd:
42:53:cb:41:d0:c9:89:b4:55:ab:3b:6d:41:68:73:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:EA:13:62:62:C4:A0:BE:BD:B5:7C:25:EA:8E:45:48:BB:BA:98
X509v3 Authority Key Identifier:
keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/9R7qE2JixKC-vbV8JeqORUi7upg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:40:a6:5e:8f:65:24:78:34:3b:76:29:99:d9:15:37:ac:c4:
5a:77:03:1e:58:87:a4:25:54:6e:ff:02:20:3e:a7:75:fe:27:
33:7f:e2:3e:44:ab:fe:cc:c7:28:69:50:5e:4e:72:de:e0:b3:
1f:b2:e6:a8:e8:c4:9e:c2:40:34:a4:88:f0:53:07:f8:6c:55:
5e:a0:88:05:9a:ff:d7:be:94:e8:56:45:13:77:e5:5e:be:0c:
61:e1:4e:7d:3f:42:0e:a3:af:e8:e5:e2:d9:63:80:17:2e:9f:
c2:fc:91:ed:d5:f4:04:ce:9b:ed:e8:f1:7c:7d:88:52:dd:7a:
87:5f:0d:b2:92:fd:65:4a:5f:73:13:f4:50:81:8a:9f:e3:ce:
49:7c:a4:87:91:f7:f8:87:aa:59:5c:73:ab:7b:53:8d:f4:7c:
79:0a:c9:a1:f6:cb:72:2c:01:c9:e7:28:60:f9:5c:55:f6:9f:
71:c7:b5:8f:8a:83:26:45:75:a7:0f:05:4b:7f:69:67:9b:dd:
21:bc:b9:a8:a2:d0:49:81:5a:d6:6c:f2:26:94:44:32:dd:38:
e9:ef:d7:61:e1:1e:77:f7:05:ce:d4:84:53:30:62:65:08:c1:
b4:11:9d:16:8e:5d:cc:79:cb:d4:2e:68:f0:fc:cb:18:73:74:
8b:36:3f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net