Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/IakaUVIwolxABf_iFG6RX8yq8dc.roa
File: IakaUVIwolxABf_iFG6RX8yq8dc.roa (raw, json)
Hash identifier: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=
Subject key identifier: 21:A9:1A:51:52:30:A2:5C:40:05:FF:E2:14:6E:91:5F:CC:AA:F1:D7
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 01942143E4A368A197A652D6224AC69E277A
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/IakaUVIwolxABf_iFG6RX8yq8dc.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24728
IP address blocks: 193.105.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e4:a3:68:a1:97:a6:52:d6:22:4a:c6:9e:27:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21a91a515230a25c4005ffe2146e915fccaaf1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:b7:29:10:41:b5:74:b1:f0:70:55:41:e3:
d0:a1:0f:93:19:3d:0c:1e:ab:23:44:bc:86:fc:f1:
b7:65:c0:10:4b:01:13:1a:48:60:a5:da:c6:11:0b:
d7:bc:d4:1d:ed:05:ab:77:b9:8b:a6:5f:8c:8f:18:
97:1c:6d:50:b9:f9:13:96:3c:78:3a:d9:e3:14:58:
74:e4:48:81:cc:b2:65:c4:20:06:dd:48:a6:97:0d:
6c:e7:b3:5c:32:d2:53:68:e8:56:98:64:e3:1d:4e:
18:fa:5c:14:e4:b3:5d:8c:28:cf:f8:2d:70:a9:3d:
19:8b:71:f2:37:74:36:9e:fd:ac:ae:d6:76:d4:77:
67:17:95:40:ed:1f:f1:a3:a2:af:30:c1:11:07:ef:
66:74:65:38:89:d1:8b:5e:3b:99:cf:83:e3:4a:b8:
08:3e:85:17:eb:ca:7c:48:68:3a:5e:75:cf:da:ce:
16:78:68:19:b6:a4:de:ff:ab:e1:5c:6e:ac:7c:1a:
ae:4c:bd:b5:f9:c8:23:36:4b:1c:ac:1a:4d:4f:44:
13:24:10:27:3b:2b:c6:50:22:0e:dd:6d:3e:2c:5e:
c3:6a:7d:32:43:fc:c4:bf:41:9c:82:3f:8c:c7:6a:
6f:c4:57:62:d6:b1:d4:1a:74:94:a9:de:3c:24:dc:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A9:1A:51:52:30:A2:5C:40:05:FF:E2:14:6E:91:5F:CC:AA:F1:D7
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/IakaUVIwolxABf_iFG6RX8yq8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ab:90:df:cc:22:b7:95:df:4f:81:01:39:09:d0:e5:bd:a4:
29:c2:ab:10:5f:c4:f2:c3:3f:9b:a5:e1:2a:e7:16:bc:63:c7:
de:77:82:a3:0f:ae:8f:8b:d2:d1:2f:06:4d:d1:9e:0a:f0:74:
e5:57:af:36:52:22:47:7b:96:56:35:d4:75:48:cd:16:58:6e:
89:fd:b4:58:cf:40:75:48:de:59:b7:91:ba:dd:ae:5d:8c:fb:
86:61:03:bb:34:aa:d7:29:39:f3:ba:90:e6:00:94:c8:ac:53:
b5:9e:dd:f9:40:bd:81:a1:b0:d5:03:ca:46:23:d5:08:22:0b:
40:b1:fe:09:ec:ee:8b:6d:30:91:e1:c9:4a:24:a6:69:89:50:
c5:ac:3d:45:88:02:dd:f6:fc:b9:d0:6c:23:ec:2a:c5:c9:6c:
e8:92:6e:5d:ef:90:52:9a:d3:5e:f1:d3:c3:da:14:b9:29:78:
e7:1d:e9:20:05:d3:78:e1:d0:f5:3f:64:33:18:39:54:44:8f:
bb:ff:d5:ee:25:63:13:ee:df:38:e8:c7:71:6c:a0:73:ad:36:
eb:82:44:1b:78:2e:d6:fa:d3:8c:50:d3:27:6a:55:06:e2:dc:
28:22:59:98:25:d1:a4:30:74:03:0c:d2:4e:1e:fa:6c:2d:7d:
6f:aa:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net