Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/aM2Mmp7rYQ9Ds0NTfBSW1lSTHx4.roa
File: aM2Mmp7rYQ9Ds0NTfBSW1lSTHx4.roa (raw, json)
Hash identifier: MOXkGsTfJLVwHpeFy8hnMbfGHfgWVvoGY31VFj0P0FE=
Subject key identifier: 68:CD:8C:9A:9E:EB:61:0F:43:B3:43:53:7C:14:96:D6:54:93:1F:1E
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 019422FC27872DBC7EB7087577CAD707D633
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/aM2Mmp7rYQ9Ds0NTfBSW1lSTHx4.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31391
IP address blocks: 192.115.0.0/21 maxlen: 24
192.115.208.0/22 maxlen: 24
2a01:4280::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:27:87:2d:bc:7e:b7:08:75:77:ca:d7:07:d6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68cd8c9a9eeb610f43b343537c1496d654931f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:76:0c:97:27:f0:50:6c:cd:6e:c4:7a:0f:
65:f7:50:fd:1e:c5:7b:94:7f:8f:f2:eb:ad:1a:0a:
d2:9a:17:06:e7:bb:9d:f3:dc:42:c0:c1:86:2d:f3:
97:ed:f0:1a:6c:cc:8f:4a:8e:86:d2:9c:2b:e8:9a:
80:94:c8:9f:d7:15:61:27:81:10:48:dd:30:6b:b7:
a8:39:8b:af:75:38:7f:81:ea:78:df:b7:e4:ec:30:
e5:0b:c3:8e:54:e1:17:8c:a7:09:e7:0a:c1:fd:93:
b4:19:de:19:ae:34:ae:c5:c6:1f:23:76:e6:23:9a:
74:71:1b:e9:7c:75:6a:05:0e:fc:a4:d6:67:37:1b:
fa:a1:ea:36:b2:26:79:30:11:11:ec:1c:05:c8:e3:
64:38:45:d6:dd:7a:a4:40:e4:b5:ab:9f:71:4e:96:
42:01:c4:f2:9c:04:84:2f:18:4c:70:23:1b:e4:fc:
bd:c6:4e:0f:58:e3:12:eb:9e:1c:33:1f:40:cb:25:
f3:6b:a8:cd:60:0b:c8:16:53:cc:62:fe:40:f7:93:
09:2d:af:5c:b3:eb:7b:8c:cb:01:7d:a8:85:f4:ed:
04:18:f7:25:99:6a:b5:e5:fe:10:4f:9b:82:34:a9:
ec:00:a0:a6:65:e2:0b:08:18:06:05:1c:b0:e8:7f:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:8C:9A:9E:EB:61:0F:43:B3:43:53:7C:14:96:D6:54:93:1F:1E
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/aM2Mmp7rYQ9Ds0NTfBSW1lSTHx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.0.0/21
192.115.208.0/22
IPv6:
2a01:4280::/32
Signature Algorithm: sha256WithRSAEncryption
b0:19:5d:a9:4c:6d:87:b9:2a:55:da:76:e2:b5:8f:01:d6:63:
0b:6a:b7:8e:d4:e7:05:45:0b:e7:99:bd:ba:fa:0e:c1:a3:e2:
51:8d:89:42:1c:fa:56:6a:3c:07:2f:65:b0:a3:63:cb:8b:32:
38:81:4f:cf:4f:07:df:2e:a4:ee:90:76:80:c8:5a:bf:a9:5d:
26:96:59:92:4a:b8:65:92:ac:9e:ab:44:9b:07:4c:fb:cb:ed:
bb:bd:66:7e:15:99:f4:a1:b3:6f:f8:a7:9d:75:de:44:eb:80:
5f:45:91:7a:a2:a2:2b:eb:8b:ff:76:94:fb:6b:1f:db:a8:a1:
42:4b:84:7e:c7:f6:e8:c3:52:13:48:3c:68:d9:6e:81:8d:ba:
bf:7a:69:3b:79:ac:ff:88:84:6a:27:81:21:9a:51:4c:44:8b:
b5:37:83:48:1c:e4:7b:9b:e0:e1:28:ca:79:15:ed:8d:ed:ec:
85:96:85:95:d0:41:44:d5:9a:4d:c4:9a:c8:ca:33:70:c5:7a:
28:d1:8e:b6:2f:89:02:de:a6:13:34:92:70:0d:eb:20:99:a6:
b6:51:85:9e:e1:fd:e6:ac:4a:dc:76:93:b0:bf:85:50:30:38:
0f:7f:77:ac:3a:de:bc:d8:3e:da:cd:9a:ee:f0:94:62:dd:6d:
c3:6d:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net