Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/65Xlj195X-cGSev9DG8oGbd1-U4.roa
File: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (raw, json)
Hash identifier: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=
Subject key identifier: EB:95:E5:8F:5F:79:5F:E7:06:49:EB:FD:0C:6F:28:19:B7:75:F9:4E
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 0194258E1E3C17E697A9B3A1927D81DA75CA
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/65Xlj195X-cGSev9DG8oGbd1-U4.roa
Signing time: Thu 02 Jan 2025 05:47:38 +0000
ROA not before: Thu 02 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62319
IP address blocks: 193.104.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:1e:3c:17:e6:97:a9:b3:a1:92:7d:81:da:75:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Jan 2 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb95e58f5f795fe70649ebfd0c6f2819b775f94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:e6:31:f2:f1:af:0f:1f:17:83:3b:6e:af:
28:34:83:89:1a:b9:f7:c6:5e:d0:4c:c1:e5:b3:f5:
c0:ff:1d:20:39:25:12:7e:9c:eb:fe:76:60:95:e8:
34:9d:53:01:57:b7:bb:c6:67:83:00:8a:6c:79:ca:
d3:bb:2a:f9:3b:0b:6b:41:08:1b:b9:f4:2f:1e:94:
34:8d:16:16:61:79:6a:02:90:2f:4c:ac:6b:da:30:
0b:2b:46:06:a4:e2:e9:b1:e5:e1:fd:1c:d5:3c:1f:
5c:62:08:c1:cd:f3:65:61:1b:27:4e:05:ba:2f:0b:
a3:05:f7:05:44:65:2d:10:60:29:6d:b2:02:06:81:
23:83:6e:ff:87:b4:95:20:58:1c:51:54:e5:c2:64:
05:e0:63:0a:4a:80:24:37:dd:4b:e2:9d:ef:fe:4d:
bc:a7:7e:61:29:45:ea:4b:11:2b:2f:60:f9:39:d3:
80:c7:73:52:03:7d:70:f9:18:c9:7d:6b:7d:dd:90:
31:37:92:71:3b:51:6a:89:d8:67:6a:73:e3:67:39:
b7:71:3a:ec:ad:91:23:45:6f:cd:ea:46:bb:8c:dc:
be:d9:c6:e4:0d:50:a3:57:9e:f8:76:bc:7f:c7:84:
44:22:7d:13:cc:55:3a:86:ae:ab:55:38:0d:df:e7:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:95:E5:8F:5F:79:5F:E7:06:49:EB:FD:0C:6F:28:19:B7:75:F9:4E
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/65Xlj195X-cGSev9DG8oGbd1-U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.171.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2c:51:3f:0c:59:04:3a:04:32:55:ff:7f:fe:4d:31:15:48:
e5:19:76:83:bb:68:80:b7:e4:0c:d3:d4:00:28:5f:32:ec:23:
91:dd:b7:28:58:fd:8f:65:56:f4:2d:09:0b:bb:6e:8d:03:81:
45:95:36:a2:ef:f8:3c:41:69:58:ee:4f:f3:55:de:fc:83:75:
63:8a:e8:34:4b:72:37:81:c7:0c:9c:fa:c8:9f:68:f5:c7:d1:
4f:fb:41:7e:d1:e0:da:cc:70:7b:45:9c:3e:40:0f:e8:c2:e5:
75:22:1a:02:85:a1:f8:16:19:15:6c:c4:33:5c:29:54:0a:bb:
ec:0d:6b:10:d9:2f:cb:c7:05:79:3a:c4:94:bd:05:e4:5e:53:
15:f8:86:44:9f:2b:73:31:0f:e5:c9:65:d9:c9:53:18:f5:44:
f0:69:4c:4e:24:64:1c:1f:ad:a0:8a:43:b5:76:e5:27:e2:35:
b1:b4:59:cf:66:1d:07:cb:e0:e6:30:ff:8a:01:42:4a:e3:0a:
e6:db:2d:c6:02:0a:88:bc:28:23:a7:a5:17:c6:d6:31:08:08:
a6:f1:40:e7:79:4b:0b:4a:25:f5:24:da:88:47:3c:47:23:f5:
b3:4f:53:88:ca:46:87:46:de:57:6b:ff:1f:53:65:05:db:d7:
ea:f3:7b:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljh48F+aXqbOhkn2B2nXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll
OWQ0YzkwHhcNMjUwMTAyMDU0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjk1ZTU4ZjVmNzk1ZmU3MDY0OWViZmQwYzZmMjgxOWI3NzVmOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNzmMfLxrw8fF4M7bq8oNIOJGrn3
xl7QTMHls/XA/x0gOSUSfpzr/nZgleg0nVMBV7e7xmeDAIpsecrTuyr5OwtrQQgb
ufQvHpQ0jRYWYXlqApAvTKxr2jALK0YGpOLpseXh/RzVPB9cYgjBzfNlYRsnTgW6
LwujBfcFRGUtEGApbbICBoEjg27/h7SVIFgcUVTlwmQF4GMKSoAkN91L4p3v/k28
p35hKUXqSxErL2D5OdOAx3NSA31w+RjJfWt93ZAxN5JxO1FqidhnanPjZzm3cTrs
rZEjRW/N6ka7jNy+2cbkDVCjV574drx/x4REIn0TzFU6hq6rVTgN3+dMqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOuV5Y9feV/nBknr/QxvKBm3dflOMB8GA1UdIwQY
MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut
ODUyMTJiOWQxNTliLzEvNjVYbGoxOTVYLWNHU2V2OURHOG9HYmQxLVU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli
LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWirMA0G
CSqGSIb3DQEBCwUAA4IBAQAmLFE/DFkEOgQyVf9//k0xFUjlGXaDu2iAt+QM09QA
KF8y7COR3bcoWP2PZVb0LQkLu26NA4FFlTai7/g8QWlY7k/zVd78g3Vjiug0S3I3
gccMnPrIn2j1x9FP+0F+0eDazHB7RZw+QA/owuV1IhoChaH4FhkVbMQzXClUCrvs
DWsQ2S/LxwV5OsSUvQXkXlMV+IZEnytzMQ/lyWXZyVMY9UTwaUxOJGQcH62gikO1
duUn4jWxtFnPZh0Hy+DmMP+KAUJK4wrm2y3GAgqIvCgjp6UXxtYxCAim8UDneUsL
SiX1JNqIRzxHI/WzT1OIykaHRt5Xa/8fU2UF29fq83vz
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net