Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/JToXLwiaabPWVn7k7SmF-YWU5ro.roa
File: JToXLwiaabPWVn7k7SmF-YWU5ro.roa (raw, json)
Hash identifier: hpuL90O+mIKhj3+Wy1oe3zyrYzzVPJTbG5oDK4Ya1es=
Subject key identifier: 25:3A:17:2F:08:9A:69:B3:D6:56:7E:E4:ED:29:85:F9:85:94:E6:BA
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01943F7328B55DCF9DA75FB6473308FB8747
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/JToXLwiaabPWVn7k7SmF-YWU5ro.roa
Signing time: Tue 07 Jan 2025 06:28:19 +0000
ROA not before: Tue 07 Jan 2025 06:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206783
IP address blocks: 217.113.26.0/23 maxlen: 24
217.113.26.0/24 maxlen: 24
217.113.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:73:28:b5:5d:cf:9d:a7:5f:b6:47:33:08:fb:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 7 06:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=253a172f089a69b3d6567ee4ed2985f98594e6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:8a:42:a0:d9:03:92:e7:be:b5:e1:91:b2:
25:f6:54:d1:97:b4:90:7e:2b:51:28:8b:d0:16:ca:
87:62:2e:b0:b5:5e:fb:a7:39:5c:61:97:50:fe:11:
51:1b:b8:5e:7e:fe:e7:45:06:8c:ba:4c:c3:7b:c7:
71:07:25:cc:aa:f2:00:1a:f1:ee:ec:96:f7:db:e7:
67:c5:52:53:5b:e4:4a:79:2e:37:28:4f:69:da:b9:
1e:c3:d7:73:08:6c:92:ba:99:df:51:17:95:8c:c2:
db:b1:6f:81:78:a9:26:df:8c:1e:b7:e3:61:cf:b4:
09:e1:2c:20:fb:3c:ec:ef:81:6e:ca:9b:f1:bf:47:
93:50:f8:a0:93:34:9c:31:f1:e6:3c:91:ee:fb:9c:
d9:5a:17:bb:c6:00:87:61:c5:c6:db:49:b2:7f:b5:
2a:31:09:76:03:bc:6b:04:c1:ab:a6:43:dd:94:e1:
a0:6a:4f:dd:94:43:47:c1:61:af:24:c1:41:92:07:
0d:14:16:07:a2:02:bb:cc:37:3a:c7:37:08:4c:f3:
a5:c4:ef:71:d0:2a:3a:43:e3:36:4f:23:5f:4f:58:
79:3d:b0:05:4a:d6:96:fb:f5:c2:f0:77:3c:e7:b9:
1b:68:50:b1:9c:dc:c2:d7:19:c5:47:4e:6f:8c:ed:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:17:2F:08:9A:69:B3:D6:56:7E:E4:ED:29:85:F9:85:94:E6:BA
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/JToXLwiaabPWVn7k7SmF-YWU5ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.26.0/23
Signature Algorithm: sha256WithRSAEncryption
45:ce:31:f4:7f:b9:f8:9e:b2:bf:29:0b:60:6e:5e:5d:f0:df:
9c:be:65:19:db:f1:2d:59:02:68:f1:c5:de:5c:79:85:9d:de:
65:f9:af:ea:a3:84:4c:ba:27:ff:8e:43:80:ff:20:69:9c:1e:
07:c9:ca:48:01:fa:60:73:b7:23:ef:66:1b:be:87:cc:95:09:
b3:49:ad:5b:be:30:d5:72:a9:de:91:35:66:5f:59:ec:8b:6b:
ff:63:35:37:d0:7c:c6:11:7c:be:d9:9d:37:86:d9:c7:16:28:
45:fa:19:bd:7f:1d:2a:04:e4:e0:3d:b6:73:8e:37:7e:40:52:
0a:2d:41:e4:73:47:7e:c0:96:a3:94:0a:3a:f6:57:6c:c8:b9:
d4:56:4e:8a:e8:bc:36:c4:e5:af:cf:a3:63:74:a6:2f:b7:e6:
be:00:bb:1b:5b:9c:10:95:68:a3:57:5b:9a:f4:53:36:bd:07:
32:88:51:63:74:9a:a0:2a:6f:10:65:62:51:62:f0:a7:ae:32:
6a:32:ee:5e:6b:4f:6e:ef:a7:c1:00:df:83:b6:76:6f:6d:93:
e1:d2:11:7b:7f:82:49:a4:b4:64:b1:6f:e5:e2:58:84:b9:51:
2c:28:9b:37:ea:92:29:95:dd:4c:52:04:6e:ba:52:02:94:f5:
33:16:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net