Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa
File: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (raw, json)
Hash identifier: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=
Subject key identifier: 72:54:D3:31:85:27:84:8C:57:FB:D4:36:01:54:E8:D6:0A:79:9C:E4
Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial: 0195039AAC58311416159968C07EED2BB6F1
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa
Signing time: Fri 14 Feb 2025 08:37:03 +0000
ROA not before: Fri 14 Feb 2025 08:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207308
IP address blocks: 194.38.224.0/19 maxlen: 19
194.38.224.0/20 maxlen: 20
194.38.240.0/20 maxlen: 20
2a06:d581:2000::/36 maxlen: 36
2a06:d581:2000::/37 maxlen: 37
2a06:d581:2800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:9a:ac:58:31:14:16:15:99:68:c0:7e:ed:2b:b6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Validity
Not Before: Feb 14 08:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7254d3318527848c57fbd4360154e8d60a799ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:94:a4:5d:01:09:db:60:6c:32:cd:55:f1:
74:f7:15:f4:80:fa:ae:50:0a:a5:7a:15:f4:6b:2b:
5f:f4:75:07:a0:7a:3c:54:31:d3:d9:ce:93:53:54:
b6:57:ed:45:b5:70:df:7d:f6:26:aa:db:05:21:3e:
cb:cd:80:b2:c0:71:02:6b:34:c1:65:08:00:df:63:
da:b1:cc:bd:5d:1a:66:b1:ec:1d:ca:ee:7b:a5:21:
4e:d7:98:2f:f0:87:94:c1:00:d9:cc:f9:b8:00:19:
fb:6e:5d:2e:07:51:9d:37:99:4f:8f:34:04:a8:24:
1f:b0:5c:29:f8:cf:d7:d7:d2:fc:83:a1:0c:19:dd:
5b:6f:b8:6f:6e:4e:76:c4:43:67:db:ad:15:31:a4:
dc:57:a5:05:73:fc:5c:49:34:ac:c2:1d:e2:6a:7e:
39:c2:e5:a7:03:f2:e4:18:23:e7:74:71:93:53:8d:
5b:bd:d5:7e:be:6f:c7:7b:c9:14:68:f6:25:fa:1c:
9b:ef:6e:36:ee:11:78:93:84:8f:14:41:4e:37:76:
fe:17:be:ac:10:38:08:32:7f:6b:62:ef:72:46:9c:
55:dc:71:f8:05:47:fd:6a:1e:99:2e:f5:97:94:26:
0f:2b:b1:d1:da:d7:35:f0:36:7d:5a:7a:8c:0a:c1:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:54:D3:31:85:27:84:8C:57:FB:D4:36:01:54:E8:D6:0A:79:9C:E4
X509v3 Authority Key Identifier:
keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.224.0/19
IPv6:
2a06:d581:2000::/36
Signature Algorithm: sha256WithRSAEncryption
48:e5:39:73:b8:47:8a:9e:a9:55:3b:f2:6a:a9:df:be:10:33:
60:29:0c:14:6e:0b:66:09:42:ed:6d:f7:75:bc:f3:4f:08:17:
36:08:f8:d7:ea:e3:ac:1d:22:8d:35:8f:de:d4:df:58:03:d4:
2b:ee:e8:86:57:ae:cd:de:b5:62:e0:bf:f9:9e:94:44:8d:62:
0d:42:a8:f1:66:9d:a1:ed:31:55:08:99:40:cd:49:c1:3b:a4:
0c:1d:e4:22:3b:35:1c:85:f4:3c:82:dc:9f:a4:e9:96:92:96:
8b:24:f4:6a:0b:15:a9:62:ce:ef:2e:b3:20:dd:ed:5f:d5:33:
8e:36:34:88:79:59:8c:93:67:9c:b1:d0:dc:e7:89:94:13:5c:
83:4a:44:a7:3d:fe:fe:86:7c:91:73:22:bb:05:a0:79:f8:78:
33:78:d1:01:7e:c0:aa:ea:06:ea:b2:b1:da:4a:a2:b9:eb:24:
77:7e:73:67:4e:46:6b:bf:7e:19:c4:a0:b8:ad:24:f4:56:41:
31:43:02:d0:2a:56:7a:41:7f:98:98:f6:af:58:fc:5c:a9:8a:
50:bd:7d:6c:87:d9:61:9d:bc:54:ca:34:c9:90:67:28:c7:71:
a6:5f:f0:12:fd:08:2e:91:a1:1f:d2:e1:0d:20:40:44:1d:65:
23:74:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net