Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/1-mw1OEx0dvp7zUclCr_o1Q0dwns.roa
File: 1-mw1OEx0dvp7zUclCr_o1Q0dwns.roa (raw, json)
Hash identifier: COL7IjH7e9neMmHoGoP4fwc6Hc0hHGABlnX6Y8ycXus=
Subject key identifier: FA:6C:35:38:4C:74:76:FA:7B:CD:47:25:0A:BF:E8:D5:0D:1D:C2:7B
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0194221F891B562FEABE2FA50AFCD5457198
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/1-mw1OEx0dvp7zUclCr_o1Q0dwns.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209272
IP address blocks: 81.19.136.0/24 maxlen: 32
81.19.138.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:89:1b:56:2f:ea:be:2f:a5:0a:fc:d5:45:71:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa6c35384c7476fa7bcd47250abfe8d50d1dc27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:8e:8a:3f:9c:2c:c3:51:e1:25:bf:e6:40:
f4:cb:e2:79:23:86:d5:27:1a:17:61:b0:71:bf:53:
8e:c2:b6:ae:06:20:d8:b4:9a:6c:ca:b7:0b:9e:f5:
23:c4:08:ee:27:62:cd:13:44:3c:f9:84:90:15:3a:
30:f1:70:2c:6f:9c:33:5e:f1:9f:36:9d:46:9c:e9:
2f:15:c9:cc:41:b6:7b:20:29:6b:10:14:53:2a:2a:
c1:e1:ac:de:83:d5:4b:d0:69:ce:f5:59:5f:36:40:
9d:f0:24:21:27:8d:00:db:2e:0b:b9:ff:e7:5e:df:
0c:db:e2:07:6d:c8:e7:0e:96:b2:13:e5:cb:95:9a:
4c:f8:d5:5c:1b:fe:5d:a6:b3:c5:bb:40:8d:37:47:
a7:31:89:6f:19:93:5a:65:61:ff:16:2b:b6:b4:a8:
de:03:25:82:ab:11:b0:3f:53:bc:2f:8a:19:68:ec:
41:c6:fa:fd:a8:ee:88:fc:da:2f:5c:05:9c:2b:61:
a1:d5:f5:11:a7:5b:f0:7f:ef:46:73:60:4c:09:40:
60:46:86:73:93:ea:d9:19:fd:ef:b0:93:a3:bc:7b:
43:ee:fa:44:6e:ce:a0:49:f6:7c:c6:0c:a2:ba:f4:
e0:e9:56:90:9d:80:22:5f:ba:cd:0a:5f:30:c0:e0:
b1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:35:38:4C:74:76:FA:7B:CD:47:25:0A:BF:E8:D5:0D:1D:C2:7B
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/1-mw1OEx0dvp7zUclCr_o1Q0dwns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.136.0/24
81.19.138.0/24
Signature Algorithm: sha256WithRSAEncryption
49:81:7a:1c:0f:ae:da:e1:67:86:b9:0a:86:50:aa:45:d8:b7:
78:73:2f:27:53:5f:9f:22:45:fa:36:1c:8c:b1:8d:dd:53:f8:
67:9d:4f:87:29:43:ad:ce:d5:bd:33:55:82:d7:7c:f2:e4:19:
79:32:35:90:e8:9c:3b:0d:db:b5:34:d9:44:b2:b5:50:d4:60:
06:fc:67:32:a3:7b:75:52:cc:50:ee:d6:76:89:e7:55:71:f8:
80:e9:5b:c8:51:28:b4:9c:e3:52:58:28:39:fd:01:28:dc:61:
e6:8a:35:90:d9:a0:60:b3:d7:7a:ce:32:51:f2:67:d9:e1:07:
34:5f:45:40:62:c4:60:0a:90:eb:22:9c:b6:08:bb:74:52:85:
4d:b0:b6:b8:63:59:76:bb:2f:ee:cd:41:a9:e2:ea:3f:26:cc:
a8:33:f5:47:6a:62:78:43:bd:f6:39:5c:a2:fb:ae:eb:cb:97:
6a:93:23:85:eb:30:23:01:15:0a:75:05:60:67:e3:9f:70:8d:
3f:35:6b:dc:78:69:42:4f:b6:22:9e:a9:0b:bc:5e:ca:fe:97:
72:a1:11:0a:a3:b5:8f:42:07:fa:0a:5a:de:44:8d:89:bf:70:
39:5d:6a:2c:33:72:cd:31:fc:aa:7a:ae:e4:f9:cf:13:d6:f2:
07:86:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:56 2025 by rpki-client on console.sobornost.net