Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/9nrkqBfEEEVb2ilynt5HJRxEGWw.roa
File: 9nrkqBfEEEVb2ilynt5HJRxEGWw.roa (raw, json)
Hash identifier: 9p3+VvNvFq4rrBtC/Z9UeyBNK7rF8lIsM8oxPtubKQs=
Subject key identifier: F6:7A:E4:A8:17:C4:10:45:5B:DA:29:72:9E:DE:47:25:1C:44:19:6C
Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial: 01942067BA005D477EFF8C56E66489758F51
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/9nrkqBfEEEVb2ilynt5HJRxEGWw.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31522
IP address blocks: 193.138.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ba:00:5d:47:7e:ff:8c:56:e6:64:89:75:8f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f67ae4a817c410455bda29729ede47251c44196c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:e6:b5:5f:81:39:e1:29:a5:94:19:ba:87:
2a:2b:f3:50:1e:b8:09:65:d1:8e:09:a5:d1:ef:29:
5a:ba:be:03:ae:59:56:b6:98:5c:7e:57:38:8c:72:
69:41:1d:bb:ae:7d:2a:b3:75:5b:cc:f1:2e:bc:c2:
e7:8e:fc:cd:bc:da:50:ae:3e:6b:5f:48:ae:f5:5d:
76:bc:e4:c5:9e:5e:00:47:32:1f:58:bf:ea:08:51:
58:ca:5d:6d:db:32:49:ac:57:b9:4a:da:c2:81:17:
87:c3:e7:0f:a1:e6:ce:12:eb:06:52:39:ab:11:b3:
3c:e2:b6:fd:7d:2f:73:52:d4:a3:1c:26:7a:d5:cc:
60:41:b3:61:8a:a2:6f:f3:9d:e2:ad:72:15:53:57:
88:74:57:c2:c5:51:31:40:d9:d5:6e:b8:6a:af:22:
fc:2f:8b:1b:d7:43:48:85:26:3a:38:53:ae:51:73:
7d:f1:da:ea:81:f0:89:31:72:3c:96:eb:92:e6:5c:
07:f8:b7:12:b6:23:f3:dc:a8:a2:80:75:a4:45:48:
79:e7:b8:06:74:5e:c5:52:4f:d1:73:19:8d:4c:92:
ff:76:c4:83:8f:90:15:7f:5c:18:24:a8:bc:af:72:
ec:5c:97:ad:7e:2e:09:a8:b8:60:36:f5:9b:d7:c3:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7A:E4:A8:17:C4:10:45:5B:DA:29:72:9E:DE:47:25:1C:44:19:6C
X509v3 Authority Key Identifier:
keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/9nrkqBfEEEVb2ilynt5HJRxEGWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.67.0/24
Signature Algorithm: sha256WithRSAEncryption
76:31:5b:f3:b8:57:f7:fa:56:7c:6d:12:a7:1d:57:77:4f:71:
75:74:da:af:3f:60:fa:da:9a:7b:47:5b:65:e1:cf:2e:10:b6:
44:f4:e6:3b:85:ab:07:9b:14:4a:f0:15:1d:81:de:81:50:16:
aa:6c:62:4f:5c:07:0b:a0:12:d8:b0:66:d5:ba:06:9c:a9:bf:
88:7d:a6:08:23:aa:cd:52:ab:a0:59:87:93:9e:eb:a7:cc:48:
35:56:13:2f:a7:e1:98:11:f9:4f:50:67:92:1d:6c:36:18:88:
26:ab:49:f6:eb:ae:5a:a2:ea:37:f6:0c:e3:2b:8e:d4:71:9d:
88:4c:83:7e:8c:bc:89:aa:ba:cc:5d:d2:bb:55:02:d2:bf:50:
39:69:95:83:ee:e1:0f:b9:7a:c0:fd:53:9f:a1:de:4a:2b:38:
53:de:8c:2a:94:24:b3:ca:a1:ed:c5:92:d9:3f:78:12:51:17:
9a:36:cc:34:31:5e:52:ea:74:5e:f6:09:aa:6c:45:6d:49:b3:
02:1f:5e:66:53:f7:ce:01:1e:e2:cc:e1:5f:35:2a:dc:9d:8c:
c3:95:fd:26:02:03:51:b5:ee:65:49:ee:43:c5:33:eb:fe:38:
57:6d:d3:2e:57:19:6a:b7:d2:04:d1:14:43:6f:16:d1:45:f0:
b9:28:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net