Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/8A_vFBgMpFWglBEQF7o4I6LIqZI.roa
File: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (raw, json)
Hash identifier: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=
Subject key identifier: F0:0F:EF:14:18:0C:A4:55:A0:94:11:10:17:BA:38:23:A2:C8:A9:92
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019424456FA2BBD2EB2C36B941B0F396E10E
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/8A_vFBgMpFWglBEQF7o4I6LIqZI.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49491
IP address blocks: 193.169.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6f:a2:bb:d2:eb:2c:36:b9:41:b0:f3:96:e1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f00fef14180ca455a094111017ba3823a2c8a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:73:cd:04:66:3e:f2:f2:29:8b:e5:b0:c4:
3d:ea:b7:8a:9a:76:89:b6:0b:77:35:40:cc:a7:e1:
51:6e:2b:7b:52:0a:b5:5e:fc:19:17:df:11:d1:32:
14:6d:0b:e1:88:b3:8e:f8:a2:cd:16:ec:7d:ab:c7:
e2:0e:0f:8e:18:24:99:68:45:5d:c3:a2:31:a4:32:
8b:c1:a3:69:b3:1b:2b:8f:35:b8:b1:b8:2e:ff:9c:
3e:a2:db:87:70:0e:05:21:93:fc:b2:19:27:6f:87:
25:77:c9:88:f7:98:05:2a:d7:73:e6:8d:f2:6b:36:
de:8c:7a:5a:da:71:3f:44:e0:7c:bd:20:6c:d9:00:
e8:f1:e1:6d:96:6b:80:d7:75:22:c4:98:be:97:76:
7a:56:8e:27:5b:42:b1:ef:b5:77:4a:5f:f6:f5:74:
c7:61:cf:e9:ef:ba:f1:b7:ec:c3:fd:6e:32:0a:67:
50:e8:83:08:06:2f:59:58:3b:c3:e2:47:0d:d3:c6:
b0:4c:d9:24:34:95:be:81:30:81:70:c9:64:81:b4:
4d:2b:c8:ae:3b:d8:9d:06:0d:81:4f:5b:42:fb:6f:
90:e4:29:f1:34:7c:11:b4:b4:1c:af:9a:95:8e:ce:
dd:c8:a4:ac:cb:96:29:55:81:cd:65:b9:8b:b7:6b:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0F:EF:14:18:0C:A4:55:A0:94:11:10:17:BA:38:23:A2:C8:A9:92
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/8A_vFBgMpFWglBEQF7o4I6LIqZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.80.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:10:52:72:98:50:54:ba:a2:57:ef:cc:cf:a0:3b:b4:9f:81:
3d:48:75:ba:01:c0:ea:69:21:e4:ee:7f:01:76:e1:61:1e:f0:
f0:d2:1b:a3:3c:e5:11:3e:37:c2:33:44:c9:63:0e:2a:ae:fd:
ff:91:25:ca:f7:fd:26:e8:cc:0f:17:2b:e6:82:29:40:f7:a2:
7b:ae:66:f5:1a:63:0c:f2:a9:51:cf:f3:de:9e:02:04:08:32:
dc:70:16:13:7d:80:5c:3e:15:44:b9:35:dc:97:bc:cd:d3:86:
d4:c2:fc:ab:bc:be:a6:e9:79:b3:9d:88:31:41:58:d4:a2:41:
e6:d8:0a:3a:c6:83:6f:ac:e6:36:ee:c7:f8:44:96:86:9b:a8:
55:49:16:2e:34:fb:b8:09:17:d4:25:85:6f:cc:1a:9c:48:f8:
76:eb:c0:04:4d:07:0f:94:60:ff:63:cf:02:0a:62:8a:30:37:
af:55:ef:72:8c:be:bf:86:0c:85:f6:65:f2:27:24:45:a7:4c:
3d:41:f7:68:8e:a4:f6:1b:bf:60:46:c7:f9:94:d7:67:20:33:
d2:98:31:e9:66:0d:95:0e:37:bd:05:f2:9f:3f:19:41:32:7d:
21:a2:e3:85:25:57:35:6b:cb:02:56:9b:1b:2d:eb:8d:f8:5e:
9a:e4:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net