Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/cg9vAN0so6RVwR7-dl1qakm7GSg.roa
File: cg9vAN0so6RVwR7-dl1qakm7GSg.roa (raw, json)
Hash identifier: LWonZXTxxx8N9GGW8RVI8f+urakLOSBngPnNd8+m61s=
Subject key identifier: 72:0F:6F:00:DD:2C:A3:A4:55:C1:1E:FE:76:5D:6A:6A:49:BB:19:28
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 01957193654ACB3D88378F3E790367CC4F4E
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/cg9vAN0so6RVwR7-dl1qakm7GSg.roa
Signing time: Fri 07 Mar 2025 17:07:19 +0000
ROA not before: Fri 07 Mar 2025 17:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207638
IP address blocks: 194.116.104.0/24 maxlen: 24
194.116.105.0/24 maxlen: 24
2001:848:1::/48 maxlen: 48
2001:848:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:93:65:4a:cb:3d:88:37:8f:3e:79:03:67:cc:4f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Mar 7 17:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=720f6f00dd2ca3a455c11efe765d6a6a49bb1928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:e3:bf:5f:12:ba:9b:81:7b:dd:1e:7b:ca:
76:cf:af:5e:1e:b9:39:98:35:13:b2:6b:9a:df:50:
2e:75:a0:cd:85:6e:78:d9:af:bc:a7:fe:b4:40:31:
b6:23:16:d5:33:a8:41:cd:ac:bf:04:00:79:53:4b:
f1:de:a9:90:a8:d9:f3:dd:3b:16:5c:b2:08:a1:7f:
35:e5:39:b5:ba:e3:c5:4a:ef:c3:a3:01:fc:8c:04:
e6:88:6c:9c:9b:b9:5f:16:87:8c:5e:d1:c0:27:93:
33:59:cb:61:35:89:55:f7:72:c4:33:7a:a4:b9:5e:
81:e0:76:a3:63:e7:b1:00:8c:3e:3c:92:3d:ba:31:
11:68:15:44:ea:50:46:31:b8:aa:ae:cf:d1:4a:a6:
9d:d3:c7:b0:65:9c:75:e6:10:d5:d5:40:5e:82:79:
29:aa:7e:23:78:3c:b6:af:00:6b:2e:a0:82:e9:06:
86:50:21:0a:c0:d6:2d:66:42:34:f1:15:fe:6a:94:
cc:7b:66:15:71:bd:28:0b:70:3a:e1:ec:0f:a6:75:
4d:85:d8:15:39:78:ec:bc:ab:82:2f:a6:3b:f0:0b:
45:66:8c:e4:65:ca:13:66:80:91:98:9f:8c:f2:1d:
ad:69:9a:5a:b4:40:85:24:87:d6:c0:d7:93:9e:6c:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0F:6F:00:DD:2C:A3:A4:55:C1:1E:FE:76:5D:6A:6A:49:BB:19:28
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/cg9vAN0so6RVwR7-dl1qakm7GSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.104.0/23
IPv6:
2001:848:1::-2001:848:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
62:fc:2f:38:9b:3b:20:15:f4:42:2e:f8:95:00:9c:cd:6b:69:
a8:19:3d:45:5a:51:75:1e:f1:0a:6d:a9:48:04:dd:ff:3c:1f:
de:57:e5:6a:7b:21:cc:b9:d4:5c:bd:d3:d8:e1:db:5f:fd:3c:
19:24:a4:31:14:49:29:1b:9b:aa:a4:cb:fb:0f:bb:4b:9d:fa:
14:73:40:e1:d2:63:27:c1:59:07:c7:1a:c9:c8:4e:33:5e:f5:
94:40:db:ae:ee:f1:93:86:35:3c:cc:68:e4:e7:cd:4f:dc:b5:
e1:1e:e2:63:3a:8d:ef:93:1f:62:cf:95:2b:7b:4a:18:dd:04:
e0:cc:dc:f5:e1:70:24:95:ad:43:d5:c7:68:b0:cf:11:db:ba:
af:f5:d5:07:2a:ec:f4:bf:fe:22:0b:ee:4e:86:fc:22:93:94:
c2:7b:2c:7c:2f:b5:be:e9:86:41:86:36:3a:3d:9b:97:b7:f2:
d5:41:3e:77:13:d6:78:59:aa:f2:16:72:9f:63:1d:77:ba:e6:
7a:5c:ee:f0:a5:f9:ec:39:ba:14:af:6a:20:6c:94:88:79:a0:
10:7c:45:06:ca:8a:b7:19:36:3d:53:75:40:c3:20:fe:da:b3:
d1:a4:33:17:48:d4:36:b4:4d:c8:d9:6f:8e:2a:97:1a:e8:a1:
fc:a1:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net