Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa
File: iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa (raw, json)
Hash identifier: OmyZElmTyUIEG2ZREHiXH2AlS1iD28yqU8/ztnh+Rho=
Subject key identifier: 89:A0:AA:2B:48:CB:6F:1C:57:F1:67:5A:C2:70:3B:54:6C:F3:67:FC
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01942369847EE9844CD9DD95F9DA0AD70D8B
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60557
IP address blocks: 176.119.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:84:7e:e9:84:4c:d9:dd:95:f9:da:0a:d7:0d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a0aa2b48cb6f1c57f1675ac2703b546cf367fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:8c:dc:99:1b:80:5a:30:af:06:39:e3:1a:
fb:4b:86:67:ce:e4:c1:9b:7e:57:da:63:9d:e7:83:
d2:41:dc:6e:27:07:10:ca:cb:2e:ed:43:9f:fc:bf:
d2:5b:ec:b0:2a:09:65:f8:03:16:f7:a5:e5:87:44:
65:ca:8e:ed:d1:ea:b5:a2:4c:2f:0c:c2:9b:cc:00:
3c:fc:9b:41:3e:d9:0a:32:8c:35:b5:c6:1b:fb:3a:
d3:7a:ca:ac:9d:6e:c1:d4:04:41:99:d6:3b:74:4c:
51:35:f0:e3:4a:a8:6c:1a:3e:d8:87:33:66:b7:bf:
cb:c2:33:88:23:ab:86:16:07:27:6c:f0:17:f1:70:
22:b9:14:fc:71:79:31:d3:5b:1e:7f:ac:4a:25:44:
c6:17:86:4a:06:16:6a:4d:6b:80:8d:db:1e:25:d7:
ac:6b:10:a0:ec:ec:08:ee:ad:28:d9:69:6e:1c:12:
81:2a:d1:db:b7:7c:a0:78:5d:83:e3:6d:45:5d:b0:
03:55:54:0a:3c:78:83:8a:db:5b:ff:23:c0:23:50:
e6:f5:51:75:c8:72:6d:4c:30:44:ec:4c:e6:d5:92:
b6:7f:d7:97:6e:49:5f:31:90:16:df:41:80:0c:de:
cc:83:ae:6a:88:a7:f4:24:13:c6:0b:cd:49:a6:ca:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:AA:2B:48:CB:6F:1C:57:F1:67:5A:C2:70:3B:54:6C:F3:67:FC
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/iaCqK0jLbxxX8WdawnA7VGzzZ_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:0e:1c:14:fd:18:4d:41:56:88:ca:6f:d1:72:81:f7:5e:5c:
22:3d:0a:ce:a2:2e:dc:a0:2f:3f:9b:8f:4c:b8:4b:9c:57:b7:
0b:4a:63:db:72:2b:b7:ce:7e:b1:b0:e9:97:b8:dc:a7:b3:7e:
1b:d0:9e:53:ea:ff:82:f0:be:b8:af:35:32:8f:9e:55:0d:1b:
e3:5f:2d:d5:86:ce:25:a6:3b:49:a6:eb:13:24:95:8a:85:b8:
c1:e6:7d:d9:01:34:d9:5c:11:89:4d:06:60:4a:44:28:56:7a:
97:bd:ee:f9:ce:47:0b:ba:de:8d:d2:11:df:0e:1e:53:cf:b7:
e0:00:f2:31:bb:a9:11:32:eb:b9:5b:4a:b9:7d:64:ef:65:76:
be:c4:15:c2:24:c2:90:75:ba:e4:7c:b6:c3:ec:98:20:f0:e8:
d3:1c:d0:19:27:75:7f:18:92:ec:a7:6c:46:cd:21:7a:36:b2:
75:87:74:77:5d:f1:75:b8:f8:f9:6c:36:b8:2d:e2:b4:28:83:
d5:77:81:43:92:a1:03:64:19:3b:e7:95:0a:e2:3c:e4:36:69:
d2:79:e1:5e:43:f3:28:9a:e4:95:3c:1a:ba:07:21:0c:f2:91:
e9:96:ab:e7:4e:32:fb:eb:08:df:76:1f:45:c5:c0:87:8b:46:
e3:e4:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net