Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa
File: lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa (raw, json)
Hash identifier: Q5Tqe0EHcZZYvwuXt1YX2uqSKiJ+UhyPnyv5Ni+/PxY=
Subject key identifier: 94:62:31:FA:8F:76:8C:A1:47:C2:3C:EF:DD:62:CE:A3:65:BE:67:E3
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 01942521F90B1110C41FA6E16805EB49A6BA
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208746
IP address blocks: 193.56.233.0/24 maxlen: 24
193.56.235.0/24 maxlen: 24
193.56.236.0/24 maxlen: 24
193.56.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f9:0b:11:10:c4:1f:a6:e1:68:05:eb:49:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=946231fa8f768ca147c23cefdd62cea365be67e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:cd:3c:8f:13:3d:a1:47:4c:14:bc:02:cd:
25:ed:88:8c:c8:7c:ce:44:83:e4:78:2e:4e:b0:92:
0d:34:e5:f2:84:63:c8:88:d7:b2:b6:c3:c6:c4:85:
bf:45:52:f2:3b:ab:be:16:50:e5:66:7b:84:ac:46:
14:19:5e:40:9e:67:5a:9b:12:db:1d:e7:a8:81:ab:
e1:4e:58:de:17:8b:63:81:a1:79:1d:7e:7e:da:40:
04:5f:17:b6:b5:f9:eb:1d:7e:1a:5c:ae:68:53:02:
63:85:fd:d8:16:53:2b:9d:40:7f:35:d8:1d:90:a8:
8f:f7:b8:f9:58:72:85:4c:eb:cc:78:68:d6:3f:53:
2e:26:aa:98:ae:d1:5e:d3:88:95:6e:17:8f:97:fa:
df:ba:5b:44:04:f4:94:00:ef:61:1d:be:44:2b:12:
94:cf:69:ad:d2:69:19:4a:62:b8:59:f0:51:39:fe:
31:75:2a:e7:8f:78:a5:21:46:39:3e:0e:e0:ea:77:
af:e2:46:e3:85:a8:6b:32:6e:46:8b:05:b0:0d:9f:
b3:57:7e:4e:52:c4:dd:9a:2f:5d:54:dc:90:5d:80:
5e:56:95:14:fa:98:32:80:b6:67:c8:3e:cd:7f:ba:
cf:bf:cb:48:be:0c:1b:9b:53:a5:94:93:82:0c:6a:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:31:FA:8F:76:8C:A1:47:C2:3C:EF:DD:62:CE:A3:65:BE:67:E3
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.233.0/24
193.56.235.0-193.56.237.255
Signature Algorithm: sha256WithRSAEncryption
19:fe:ed:00:c8:15:56:df:e5:6d:80:fa:6b:9d:30:ed:48:3d:
52:a0:0e:a8:05:3d:17:7a:da:08:9d:c6:f5:18:f5:13:8c:e5:
bf:a2:5d:e9:d6:08:bd:ef:a3:e3:e6:62:56:e5:8b:ee:5d:28:
cc:64:26:79:dd:80:67:56:c7:82:b0:2a:1c:7d:e6:07:3b:98:
5a:94:a6:e7:07:a7:24:cd:f6:0d:1c:7e:7d:9e:a5:02:4e:90:
e4:01:1e:da:e4:89:b5:9c:f4:fb:d1:3f:8a:9a:97:30:35:d3:
96:20:11:0c:ab:cd:1a:62:11:a4:92:55:b4:79:10:70:8a:1b:
96:59:15:55:7a:11:cc:62:2c:d2:4b:41:a8:3e:6d:b6:9b:f4:
1d:0e:04:21:33:05:bc:e0:ec:3a:43:32:2a:0c:8f:f8:70:79:
28:fa:33:9c:62:83:5e:f9:d8:9c:2c:5f:17:91:59:62:9c:f5:
df:cf:cf:49:69:6f:db:e1:dc:eb:28:cc:f9:84:50:25:0b:4e:
26:34:88:c1:e3:51:fe:dd:6f:12:68:10:12:0e:78:f3:cd:95:
c6:1c:14:b1:22:5a:9d:ee:98:46:1b:49:54:10:83:ec:c8:b8:
01:fc:50:bf:18:c5:94:23:69:f1:fb:43:0a:f2:86:02:3c:e8:
b4:57:b8:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net