Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/iI96ltGCU8Eh-fXmAqschYb7j1E.roa
File: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (raw, json)
Hash identifier: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=
Subject key identifier: 88:8F:7A:96:D1:82:53:C1:21:F9:F5:E6:02:AB:1C:85:86:FB:8F:51
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 019425215908BDA8A91DF5FE0140C7B2D306
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/iI96ltGCU8Eh-fXmAqschYb7j1E.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203130
IP address blocks: 194.62.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:59:08:bd:a8:a9:1d:f5:fe:01:40:c7:b2:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=888f7a96d18253c121f9f5e602ab1c8586fb8f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:3a:15:37:6f:58:a4:bc:2c:e8:73:76:b8:
a1:de:73:99:10:3b:ea:d5:ed:45:be:81:d7:38:bc:
c6:59:d6:03:66:8a:2e:1c:e0:dc:58:fe:af:eb:10:
ea:65:09:1f:01:5a:f4:ae:0a:27:2a:f8:a1:c9:34:
c6:fe:b3:77:60:e6:0e:a8:72:db:5a:5a:b7:22:25:
04:26:01:c2:0a:e9:16:5f:68:c1:14:d3:93:ff:52:
1a:84:ae:a9:c6:36:a2:7f:3b:fb:e8:04:76:7a:9b:
b2:ca:6b:36:58:20:51:05:d7:af:df:ec:6c:d2:24:
2d:8e:87:76:6e:a7:f1:56:a4:d1:ac:79:4c:88:5c:
f0:79:f8:24:d6:ba:d5:b6:4e:93:29:ef:43:28:2d:
61:e0:e1:56:e5:17:df:0a:4e:4b:53:1b:c0:d2:09:
8d:e1:b9:3d:ce:d2:89:e9:e7:0b:44:e6:39:d7:91:
94:72:36:78:50:04:13:3c:94:30:28:97:ec:4f:a8:
ef:04:58:48:01:3e:92:4e:8b:b6:99:12:09:be:50:
29:e6:a8:b7:55:a3:e9:bf:5a:0d:9d:8f:cc:c3:c5:
a3:3a:df:3f:3a:17:dc:fd:fa:65:c5:ad:01:4b:36:
d9:2a:36:a2:bf:85:8c:14:bc:68:59:cb:16:06:5d:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8F:7A:96:D1:82:53:C1:21:F9:F5:E6:02:AB:1C:85:86:FB:8F:51
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/iI96ltGCU8Eh-fXmAqschYb7j1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d7:42:70:4e:25:be:a9:0f:eb:3c:e4:aa:e1:17:f2:7a:c7:
0e:c3:5d:c8:6c:62:24:27:47:52:ed:dc:b8:ef:cb:f1:ad:a4:
99:d1:f5:5d:b4:2b:64:27:fc:52:34:fd:ed:04:72:93:88:60:
4d:17:60:c6:cb:cb:ba:df:b3:44:53:6e:5f:43:8c:2d:0e:6c:
17:e7:c4:5c:98:1e:9a:d0:f4:08:46:70:8b:a0:a8:c9:89:d3:
14:be:6a:48:b0:a2:8c:0e:f8:1a:3d:c6:30:ae:e4:06:92:72:
1c:a8:93:ba:c5:55:c4:e2:53:a8:23:24:0c:9d:07:7b:c7:6c:
45:54:33:cc:a3:da:37:94:17:03:55:d2:e7:04:35:6b:3e:db:
f6:ad:ba:06:17:09:2b:e1:ee:8f:09:7b:2b:82:d3:f9:1f:51:
e3:9e:6b:b4:20:6f:8e:4a:85:26:ed:34:82:6a:ae:91:a8:a0:
55:c0:60:48:50:2b:32:2a:2f:cb:e7:c9:85:9a:d1:2f:cb:80:
8e:34:9a:c9:8a:83:bf:90:cf:9e:bb:5c:16:d8:a2:1f:3d:47:
4b:74:ce:50:8b:d4:33:03:90:b6:b9:89:c6:af:9c:e1:ae:6c:
fe:d4:06:4e:ff:53:65:ef:40:4b:2f:29:0a:76:3a:9d:37:fc:
8e:f3:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net