Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/0G2sdhjp5lZnzYHlHNnybNAXWaA.roa
File: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (raw, json)
Hash identifier: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=
Subject key identifier: D0:6D:AC:76:18:E9:E6:56:67:CD:81:E5:1C:D9:F2:6C:D0:17:59:A0
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 01942747A3D62798184D10776265ECFBA362
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/0G2sdhjp5lZnzYHlHNnybNAXWaA.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49801
IP address blocks: 193.29.18.0/24 maxlen: 24
193.29.26.0/24 maxlen: 24
2a10:f980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a3:d6:27:98:18:4d:10:77:62:65:ec:fb:a3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d06dac7618e9e65667cd81e51cd9f26cd01759a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:35:e2:52:41:32:7e:2a:39:c9:2c:37:81:
b2:55:4b:b6:fc:d5:cb:21:92:6d:b2:41:b9:dc:50:
e1:b9:4f:d1:37:05:41:7d:fe:04:53:3c:bd:99:32:
4f:bb:af:40:10:6e:74:7c:95:0b:b6:0b:26:e2:fd:
04:5e:c7:69:26:d8:85:e5:4d:c2:46:91:34:03:87:
e3:32:bc:93:52:2a:48:c9:96:5e:f8:b1:8d:5f:bd:
f4:fa:83:c7:9b:73:ba:8d:98:bb:e4:3a:7e:3a:48:
80:8c:24:5c:e1:7b:b9:2c:8a:3d:98:96:50:8b:2c:
e8:e1:7f:ee:01:54:3e:e6:28:e6:54:78:00:5e:c2:
f2:3e:fe:e0:67:09:f1:e3:d6:98:e9:94:fc:aa:e5:
b3:39:e5:23:9b:95:44:8b:f8:3c:08:ff:d2:49:1d:
f8:55:aa:fd:5a:52:e5:e7:e4:d3:d3:e8:30:ac:ea:
a0:3f:26:45:38:e6:95:ac:6f:d1:a0:a8:27:27:c9:
af:b3:9a:da:ab:fc:d3:7a:9a:f6:15:d8:a8:59:2a:
a5:08:b7:e7:b1:d4:86:2f:e2:95:9b:3e:fb:2c:c4:
34:be:1c:5d:da:23:e2:4c:7c:2e:bc:52:7c:39:ab:
14:d9:c7:1e:c7:e2:a3:c6:7b:c0:47:44:f3:77:26:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:AC:76:18:E9:E6:56:67:CD:81:E5:1C:D9:F2:6C:D0:17:59:A0
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/0G2sdhjp5lZnzYHlHNnybNAXWaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.18.0/24
193.29.26.0/24
IPv6:
2a10:f980::/29
Signature Algorithm: sha256WithRSAEncryption
b1:ff:0c:6b:c1:01:c3:7d:5f:d6:b5:34:a8:07:78:97:4e:aa:
bb:9a:83:f5:12:d2:c7:53:fc:80:a1:e1:d8:54:86:d2:3a:da:
e8:0f:17:e0:cf:99:dd:b7:c0:74:43:e0:a1:33:8e:59:d8:a4:
9c:cb:ec:47:a7:b6:d7:a0:dc:9f:a8:64:2b:fb:72:39:54:5b:
2b:74:08:6a:e2:36:85:d8:f2:35:d7:ee:96:30:a7:09:1f:b4:
1b:40:b3:05:db:04:c8:f0:d2:e9:73:e5:6a:56:2a:9e:ea:33:
0e:fd:19:eb:b2:51:17:8a:a0:ea:98:49:0d:ea:aa:4d:27:f8:
e1:24:7d:89:d8:74:be:f9:f3:5e:68:dd:60:94:1d:78:83:4e:
7e:6f:e5:e9:4c:80:c9:5f:5b:bf:bc:08:2c:f9:12:1e:0f:bf:
e9:ed:0d:57:52:2b:c9:c7:b6:ad:b3:07:5d:d3:97:61:ab:7c:
20:5d:13:4b:71:47:5f:93:08:40:83:10:31:32:ed:c7:1f:e5:
ff:40:f3:a0:d5:c6:f9:d7:0d:cd:50:5d:60:69:99:84:42:d7:
fc:7e:52:78:38:b2:ab:4c:3e:1a:6f:bd:8f:f4:91:04:5b:85:
bc:ed:00:97:98:c0:37:2a:7f:9e:cb:17:be:af:60:f4:09:85:
f6:6f:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net