Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/AGH_4XKMoJQXMUQcmRNvaim4IeY.roa
File: AGH_4XKMoJQXMUQcmRNvaim4IeY.roa (raw, json)
Hash identifier: u19XXYRrm4hyR4kTBNQvGZ68bk7v1EjkrEyikPrEGqo=
Subject key identifier: 00:61:FF:E1:72:8C:A0:94:17:31:44:1C:99:13:6F:6A:29:B8:21:E6
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3C85CC4C645232611509097BD74A9
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/AGH_4XKMoJQXMUQcmRNvaim4IeY.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42991
IP address blocks: 195.28.188.0/24 maxlen: 24
217.113.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c8:5c:c4:c6:45:23:26:11:50:90:97:bd:74:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0061ffe1728ca0941731441c99136f6a29b821e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:7d:06:f8:0e:97:95:f4:8c:db:17:91:ea:
d7:f9:ba:64:a7:85:eb:b3:17:94:f4:d2:98:09:54:
31:38:b7:99:9b:e3:60:73:d9:8a:f8:ed:74:75:fa:
8b:db:85:ce:d1:a0:a1:6d:01:e7:34:42:a5:84:c3:
3a:68:9d:45:c7:fb:55:99:01:02:c3:f8:f2:e8:75:
12:cb:25:19:6d:9c:4a:b4:f6:27:57:66:0a:f6:7c:
b9:08:a8:87:af:ed:a9:e5:c2:e4:53:ab:8b:7d:8f:
34:d0:24:f8:9a:e1:6f:51:35:f4:6b:fe:81:df:2b:
f0:5b:9c:22:4c:5f:99:7c:e0:e9:e0:9d:bd:d3:ed:
07:4a:2f:aa:e7:f3:4b:f3:80:a1:40:9e:93:49:4a:
be:9b:58:1e:56:03:07:9d:8d:53:af:7a:09:32:bf:
30:7c:c7:5b:2e:82:4d:c6:e0:b4:e2:e2:d5:63:a6:
16:75:ac:53:d5:08:1b:8f:97:49:d3:fc:26:8b:c4:
05:27:6f:93:25:4e:1f:b7:70:be:66:7d:ec:2e:e9:
07:73:64:6f:00:d0:ae:c1:ab:37:d4:94:74:86:be:
ee:64:3e:4d:36:46:52:de:cc:3d:82:05:33:81:21:
57:79:5d:8a:0d:4a:95:fe:42:83:db:28:3c:1d:a9:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:FF:E1:72:8C:A0:94:17:31:44:1C:99:13:6F:6A:29:B8:21:E6
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/AGH_4XKMoJQXMUQcmRNvaim4IeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.188.0/24
217.113.30.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d5:e0:64:bc:c9:0c:2b:c3:e1:50:4b:94:8a:59:12:b1:1b:
d6:eb:97:38:6f:7e:30:66:0d:7a:89:cd:ae:51:b8:90:03:d6:
77:f0:b4:e1:dc:81:4d:fb:29:30:52:80:a9:b2:a4:72:96:fe:
e1:8d:9a:43:53:6e:fe:f5:78:45:aa:1c:20:56:3c:a9:54:d6:
1c:43:bb:ac:bf:0f:b2:45:8d:fc:65:a6:61:63:e8:9b:29:74:
5e:84:72:5f:96:3a:21:6a:67:d6:80:d3:ee:f1:a8:11:bd:94:
9c:e4:20:43:1b:25:a4:2a:51:15:96:4f:dd:73:df:04:00:99:
de:70:7d:d8:08:a0:41:9d:fd:f1:03:d7:05:2e:d2:dd:b4:e7:
2c:63:56:4c:2e:bf:c8:3f:73:2b:c0:00:18:1e:da:33:a6:3a:
8d:c1:9c:26:82:9e:27:b8:15:13:6e:84:b9:17:76:e8:0e:c9:
0f:52:fb:2b:f5:56:04:a6:f5:61:de:a2:ba:34:8b:01:4c:e2:
78:02:06:f7:f4:d1:d0:f0:be:ed:3c:2e:a5:6c:46:6d:f8:71:
90:0a:53:9c:2d:96:31:a7:7d:99:53:4a:69:7e:7b:4c:1e:33:
a8:c6:c4:fd:9e:db:3d:1c:18:1e:e2:fc:34:f9:31:2d:4c:80:
3c:69:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net