Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/512DLbsa292d0pATsDkombGkxH8.roa
File: 512DLbsa292d0pATsDkombGkxH8.roa (raw, json)
Hash identifier: JWicrWLYEH2+zaHPyMvxWQdTApMmKNVcHVNVNFGFGHg=
Subject key identifier: E7:5D:83:2D:BB:1A:DB:DD:9D:D2:90:13:B0:39:28:99:B1:A4:C4:7F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0196117CBF2755B08D2875A3762B4DD719B5
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/512DLbsa292d0pATsDkombGkxH8.roa
Signing time: Mon 07 Apr 2025 18:21:49 +0000
ROA not before: Mon 07 Apr 2025 18:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 88.214.50.0/24 maxlen: 24
193.176.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:7c:bf:27:55:b0:8d:28:75:a3:76:2b:4d:d7:19:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 7 18:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e75d832dbb1adbdd9dd29013b0392899b1a4c47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:58:d3:ad:89:15:b9:c3:3e:6f:c6:71:b2:
57:91:5c:77:10:5b:8f:ff:4f:f5:72:48:0d:64:84:
97:77:ca:be:c5:e9:cf:aa:c9:09:89:94:9b:3b:6e:
16:c8:60:1f:d5:48:64:9f:e1:8c:9d:09:89:4c:65:
42:51:3e:db:ae:62:0d:a9:2b:a7:bb:44:05:63:b2:
70:ae:ab:83:f5:25:10:58:8f:79:24:3a:f9:75:a6:
cf:87:67:16:f4:79:ea:ba:41:e9:ad:fb:15:a3:39:
9e:21:96:88:76:d2:de:f5:19:35:df:d5:15:f7:50:
1e:23:0d:2c:1b:67:ba:2a:f0:d8:7c:56:c0:9d:6c:
ed:ea:a4:a9:d6:53:84:4d:d8:d5:2f:9e:80:55:a2:
b8:bb:1a:5b:b5:6b:8e:9e:1c:18:bd:89:d4:85:26:
52:d3:ec:eb:71:d3:c6:36:ee:49:7b:ed:be:8f:65:
88:14:a1:ee:ff:67:e9:a5:e4:1a:5e:da:98:8e:3e:
fb:23:07:49:c8:d6:fd:22:e4:50:70:58:47:4d:5b:
73:c7:d7:79:5f:f6:e0:e1:8b:6f:42:0d:f4:0c:1c:
2d:45:0c:e0:89:18:bb:4e:d2:62:44:b0:29:56:bc:
ab:3f:f8:ec:4f:a2:94:a4:69:eb:49:27:b8:50:e0:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5D:83:2D:BB:1A:DB:DD:9D:D2:90:13:B0:39:28:99:B1:A4:C4:7F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/512DLbsa292d0pATsDkombGkxH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.50.0/24
193.176.22.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ac:4d:a8:34:60:e1:5a:88:0a:84:fe:25:95:74:1e:95:63:
e6:20:10:47:0c:a3:80:5c:1a:d6:44:72:d2:85:7c:24:1c:cf:
dc:a5:81:84:da:5b:8e:1a:9d:00:5d:3b:cc:72:69:bb:ca:54:
c2:05:72:13:33:02:bc:bb:14:7a:90:9b:91:e7:46:96:98:b8:
49:2e:bf:20:fe:a2:08:fc:49:47:c3:e6:51:a4:54:70:53:3c:
fd:cc:c9:40:54:54:ff:39:04:34:42:1b:f4:da:3c:48:73:48:
54:72:ed:55:e7:d9:bd:14:00:d1:35:ef:db:42:fa:01:89:c8:
15:36:15:cb:fd:27:f4:a4:ea:73:4a:74:29:c0:ef:b2:54:a6:
2e:94:2d:be:e7:90:d3:f5:4e:d6:e8:62:a5:95:77:b8:42:e1:
ab:ef:9d:e7:2c:a9:2a:39:e9:c7:76:0b:7a:56:69:41:11:4e:
74:0b:9f:c2:c0:39:cc:a2:a9:50:d3:2e:fc:ff:31:85:a3:4e:
ba:9a:14:13:fd:c9:b8:8e:02:1b:26:4e:ca:4d:21:7f:db:ae:
d8:ec:44:7d:52:b1:81:ea:ef:b3:ef:e6:ad:c5:20:91:93:fb:
1a:72:7d:70:7f:30:3d:25:24:bf:1d:a4:a0:42:69:5e:41:8b:
f7:dd:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net