Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa
File: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (raw, json)
Hash identifier: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=
Subject key identifier: 2B:E7:E7:4A:5A:82:9E:C3:2E:07:E3:65:59:A5:81:25:49:82:E0:53
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 019424450D62203BCDF25DC1101D32CEA596
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa
Signing time: Wed 01 Jan 2025 23:48:12 +0000
ROA not before: Wed 01 Jan 2025 23:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33850
IP address blocks: 194.6.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:0d:62:20:3b:cd:f2:5d:c1:10:1d:32:ce:a5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Jan 1 23:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2be7e74a5a829ec32e07e36559a581254982e053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:34:79:1d:5c:84:fb:b9:c8:d2:9d:7e:bf:
63:a7:35:36:db:17:5f:6d:85:2a:fc:a1:de:dc:85:
e0:57:f4:f3:96:68:f0:ee:77:af:22:a4:24:b6:7c:
22:18:82:22:f7:3b:24:ba:cd:e8:cb:4b:69:80:38:
4c:85:67:29:be:32:69:d3:5d:b4:6e:86:f6:29:8b:
56:5d:89:ba:85:f4:43:bb:c8:d3:b7:ad:64:88:de:
09:7b:f2:c3:d6:7a:40:21:4f:d4:ce:00:5c:af:7a:
a8:5f:2c:4a:c8:5c:cc:80:01:9a:89:eb:f0:23:b2:
66:ed:d8:92:a7:62:02:7a:f2:b2:a4:6b:b9:a2:df:
de:db:1b:ab:7b:e7:ac:e0:f3:3d:5e:d2:9e:1e:00:
b9:ba:6e:a4:9a:7f:9a:0b:4b:a3:d5:58:e7:d9:c3:
0c:de:36:e9:5b:40:de:66:93:f1:1e:d3:93:c2:b4:
7e:6f:3b:f6:7b:26:e0:b4:85:1a:28:5d:7e:7e:4d:
a2:50:d5:f2:7b:5a:8c:a4:81:2b:8f:82:d1:c1:fe:
2e:d7:7e:3f:3a:3d:a3:1e:0d:fb:b6:e5:91:00:66:
43:3d:7b:15:49:06:55:92:4f:85:a4:3e:dc:4b:0a:
4f:15:48:43:5d:46:e3:49:ad:f6:a9:f4:c7:79:87:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E7:E7:4A:5A:82:9E:C3:2E:07:E3:65:59:A5:81:25:49:82:E0:53
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.237.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:47:08:31:73:ce:fe:c0:4b:3e:f4:fc:c4:6f:d1:18:b0:cb:
5b:bd:f2:22:6a:6e:22:9f:3f:49:cb:1b:83:a5:c8:02:55:ac:
a6:3e:9e:03:93:1b:fb:2b:62:b9:95:7b:43:9c:5b:40:c9:3b:
95:65:f5:73:03:bd:c4:5f:4e:a1:78:7c:28:ec:dc:00:48:32:
05:78:c0:c7:b6:e5:ec:36:b4:d9:33:17:b9:3b:2d:9c:63:eb:
56:c3:7b:8f:7f:6f:f1:a7:3b:eb:4c:cc:c9:4d:5d:90:73:96:
2c:0c:30:21:08:8d:d7:94:1b:37:81:8f:09:e4:14:38:c9:f6:
d0:ba:8d:ed:55:21:8f:c0:88:6a:6b:1d:da:47:3d:d8:0c:db:
65:bd:7a:6d:73:d9:4d:7d:7f:b0:53:fa:20:0b:70:11:4b:e5:
a6:8d:ce:45:f0:49:5d:fd:22:e6:7d:ed:9f:13:df:e2:b8:4f:
37:06:2c:bc:e4:05:01:a2:74:3d:fe:23:3e:27:b2:48:ae:15:
63:1d:cb:c5:40:79:6a:95:a9:a1:63:ca:55:f8:0d:54:85:38:
c0:28:c7:5a:15:62:67:72:8b:37:7e:49:a0:6f:28:bd:f3:7d:
cd:6e:87:a4:40:51:c2:d8:1f:88:9d:0a:b0:a8:fc:df:bc:e1:
fb:45:11:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net