Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/6zgBCVzd-5kdX0sgGe0YDglrk04.roa
File: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (raw, json)
Hash identifier: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=
Subject key identifier: EB:38:01:09:5C:DD:FB:99:1D:5F:4B:20:19:ED:18:0E:09:6B:93:4E
Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial: 019426D9AC4BFC0244FA51CC8B20C691B0EC
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/6zgBCVzd-5kdX0sgGe0YDglrk04.roa
Signing time: Thu 02 Jan 2025 11:49:47 +0000
ROA not before: Thu 02 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210649
IP address blocks: 193.38.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ac:4b:fc:02:44:fa:51:cc:8b:20:c6:91:b0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb3801095cddfb991d5f4b2019ed180e096b934e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:37:30:52:b7:0a:e6:b9:e6:f5:4a:f4:d5:
ea:76:92:cf:95:38:19:c4:09:b9:f5:ef:44:2f:36:
12:3c:92:5f:9a:84:18:a6:97:ce:8f:79:eb:70:72:
81:13:27:97:84:e0:62:9d:8b:ab:72:1a:49:5b:8e:
53:e0:56:eb:af:d1:29:e2:e1:7e:c8:c7:34:f9:9d:
5e:18:78:5a:2d:d6:74:61:85:d5:c4:3a:29:e4:92:
ed:02:18:d1:40:15:46:ea:1f:a9:33:39:65:50:14:
56:d2:21:ee:97:74:b2:55:b1:37:61:b7:ce:84:24:
6b:63:5e:34:28:72:d2:c9:b5:b1:10:e1:86:8f:6c:
d2:61:2b:9e:1a:f3:43:57:9b:f6:f4:b7:12:85:44:
0c:66:bd:72:47:f2:b0:37:64:f6:ee:04:0a:ac:4c:
e4:72:6d:c6:af:bd:f2:2f:d8:b4:cd:19:e8:78:8b:
e8:b4:d4:37:ef:fd:40:24:21:ea:b2:c8:8c:73:c1:
3f:8e:00:be:4d:cc:b7:49:0e:76:d2:40:3b:d7:91:
71:9d:d9:b0:48:80:dc:c7:37:7e:e0:54:c3:b9:fe:
e0:cc:b3:54:72:65:d0:a2:3e:04:8d:9a:0c:89:7d:
ef:db:1b:74:fb:5b:52:8e:90:83:e1:f6:99:6f:c0:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:38:01:09:5C:DD:FB:99:1D:5F:4B:20:19:ED:18:0E:09:6B:93:4E
X509v3 Authority Key Identifier:
keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/6zgBCVzd-5kdX0sgGe0YDglrk04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.153.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:94:e0:ca:0e:30:f1:ca:6c:00:1f:c5:89:94:54:90:8e:10:
b5:7b:31:3a:aa:bc:78:13:49:2d:fe:62:0d:d9:24:d3:0c:bd:
66:42:63:8b:aa:02:67:b7:66:6a:82:e7:37:8a:95:53:83:99:
ea:93:63:da:a7:10:45:d4:e9:93:db:66:8d:03:da:b8:ca:67:
5a:54:bd:35:24:bf:de:ce:fe:69:e2:d4:0e:9e:97:78:5f:74:
2f:4c:d1:f7:ae:98:f1:1b:f2:55:0b:0c:9d:72:73:a1:14:d9:
e4:0a:95:c2:b8:7f:1b:48:b3:6a:06:23:91:17:82:67:de:6f:
56:a7:21:6b:0d:82:72:17:6b:a9:e1:04:f5:dc:bc:c4:cf:b9:
6e:ad:31:ae:aa:d7:a2:9b:62:99:86:89:21:6b:60:4d:51:cd:
0d:11:82:79:cc:f1:55:99:c6:61:55:3e:e0:b2:db:43:a2:29:
c8:a8:f2:96:3e:66:94:67:d3:0a:0e:f1:5b:71:31:d0:56:46:
46:b3:d3:5d:20:24:73:35:2f:f7:7a:3e:7a:45:24:9c:41:91:
76:c7:69:0a:b8:d2:b4:25:ad:c7:8f:fe:42:8b:29:c0:a4:ed:
ab:0d:d9:69:6d:e4:d1:8e:cc:00:60:d4:f4:5d:0f:fe:a9:a9:
41:8a:a9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net