Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/jXorES_blK4nBNFm3R_EwLoZj0U.roa
File: jXorES_blK4nBNFm3R_EwLoZj0U.roa (raw, json)
Hash identifier: gZjunuqIq6U6ZGj5kWZ5wADLITCN/sbwJ1ZzoK8csEc=
Subject key identifier: 8D:7A:2B:11:2F:DB:94:AE:27:04:D1:66:DD:1F:C4:C0:BA:19:8F:45
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 01948850D610EF940BC759FB2FAC54641470
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/jXorES_blK4nBNFm3R_EwLoZj0U.roa
Signing time: Tue 21 Jan 2025 10:03:06 +0000
ROA not before: Tue 21 Jan 2025 10:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212784
IP address blocks: 193.108.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:50:d6:10:ef:94:0b:c7:59:fb:2f:ac:54:64:14:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jan 21 10:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d7a2b112fdb94ae2704d166dd1fc4c0ba198f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:09:43:a8:72:52:f4:90:81:e6:d6:52:4c:
03:82:27:fb:3c:a7:b0:6b:c7:f6:a3:a2:5f:fb:74:
5c:1f:3c:40:ce:3e:58:24:01:58:91:a3:27:e2:ba:
24:1d:b9:67:0f:3f:b5:6f:d2:3a:e3:16:f3:ee:3f:
87:b0:be:43:86:94:b5:b9:59:89:c2:1a:e9:6f:7d:
45:42:bc:e1:e1:9c:07:a1:09:72:6d:a0:b9:0f:82:
02:aa:82:d0:86:43:ad:d8:2c:0d:6a:48:b8:27:22:
d8:55:35:f1:0a:5e:b9:ad:63:d7:a9:55:13:01:ba:
4a:ac:59:bf:77:df:7e:d8:86:ce:87:3c:be:fa:34:
48:50:be:73:a0:81:65:55:61:09:8a:0b:1c:78:77:
13:98:2d:46:93:f2:d9:9a:1a:b5:f3:8d:d2:14:1f:
79:54:ee:cd:9a:c6:52:66:91:6c:3b:8d:da:48:09:
16:03:0d:e0:38:1b:41:a9:83:fd:0c:25:e9:25:b0:
19:ce:87:42:af:77:2f:b6:6d:16:f5:8f:d8:29:51:
6c:1a:a1:2e:0b:ee:3f:9b:d6:74:b1:c7:3c:5d:40:
cf:ee:6c:9e:e9:1c:43:02:a5:e6:d6:6c:68:d0:67:
77:72:f3:42:1c:64:d0:55:0d:b7:81:6d:34:7c:1d:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7A:2B:11:2F:DB:94:AE:27:04:D1:66:DD:1F:C4:C0:BA:19:8F:45
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/jXorES_blK4nBNFm3R_EwLoZj0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.80.0/22
Signature Algorithm: sha256WithRSAEncryption
39:a8:27:44:0e:00:7c:51:58:42:94:9a:40:82:24:00:00:27:
cc:87:23:63:65:02:ad:a0:e1:f3:f6:33:98:62:5b:c1:90:26:
98:84:e6:83:38:25:ce:26:c2:80:0a:74:76:fc:f2:61:93:34:
6b:ca:21:6a:80:75:89:91:1c:e9:e8:26:c5:96:58:72:c8:60:
d1:18:fc:d4:63:25:e4:6b:6d:34:1c:dc:63:bc:40:e5:d5:37:
90:0f:f4:a1:89:06:50:27:27:c1:18:fb:1d:c7:a7:37:9e:01:
ba:bd:e8:a3:46:98:68:77:95:95:37:b0:03:01:97:1c:54:9c:
a9:63:7d:68:fd:84:3a:85:c1:c8:a3:64:d1:87:70:35:35:7a:
09:30:1d:d7:f0:81:b5:6b:e8:3e:f7:3e:4d:42:45:b3:94:11:
be:64:50:c8:a1:2e:09:51:4a:23:73:62:85:3e:e7:f4:88:d2:
a9:2b:df:38:58:bd:c3:80:8a:4d:57:60:d5:bf:0d:8b:25:f0:
2d:c9:d9:b6:f7:95:01:1f:8f:b5:38:11:50:d5:45:ba:b8:23:
1c:1b:48:d1:65:67:82:ba:cb:b1:68:dc:50:85:1c:93:50:ff:
4d:b1:32:ee:e0:b0:56:42:68:dd:5b:bc:ef:02:e4:24:5a:35:
ec:6b:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net