Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EMlyrVaXyVnSK_8UWesn0XPwqU8.roa
File: EMlyrVaXyVnSK_8UWesn0XPwqU8.roa (raw, json)
Hash identifier: k2PWZ72fJuWNzd9hUzimusjP5CQ6PY6Yj/A8KHe8iaQ=
Subject key identifier: 10:C9:72:AD:56:97:C9:59:D2:2B:FF:14:59:EB:27:D1:73:F0:A9:4F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01946EA61993B0373CEF0FE85002B6201568
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EMlyrVaXyVnSK_8UWesn0XPwqU8.roa
Signing time: Thu 16 Jan 2025 10:26:06 +0000
ROA not before: Thu 16 Jan 2025 10:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 212.32.69.0/24 maxlen: 24
213.254.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:a6:19:93:b0:37:3c:ef:0f:e8:50:02:b6:20:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 16 10:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10c972ad5697c959d22bff1459eb27d173f0a94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:ca:3a:6c:18:20:50:94:36:60:ed:b3:0e:
65:38:44:6c:e5:91:94:2a:4a:28:0b:96:26:2f:12:
1d:4c:7b:54:ea:9e:4a:87:7f:34:15:bf:36:45:2e:
42:be:73:bc:0a:96:3d:7e:3f:32:1a:a5:9c:98:d0:
c8:9a:ca:c5:ab:c7:17:f5:e8:f1:4a:f8:f4:a9:85:
29:db:63:36:4e:05:61:a8:ad:c0:13:c1:26:8c:71:
b8:03:03:76:8a:78:ec:ba:80:35:83:4b:f8:51:0f:
c5:b5:fa:fb:15:c5:3a:e2:22:7b:dc:a4:d8:78:c3:
5e:02:ef:e4:63:99:0d:83:d4:98:cb:2d:40:25:7e:
77:9b:d2:5b:29:4f:b1:22:97:e2:28:14:c7:9b:35:
08:b8:92:f4:45:ad:b8:10:9b:74:c8:15:4a:96:04:
20:b3:49:34:f4:46:3c:25:39:a4:09:ec:6f:f9:04:
ce:b3:7a:29:8e:97:71:65:54:b4:ba:e5:c3:02:8e:
01:ce:1b:41:e9:4d:d8:5e:c3:df:34:0e:17:ee:5f:
dd:a6:9a:e8:b3:82:9e:c0:9c:86:44:71:94:82:51:
a8:ff:6e:e2:40:ae:e7:28:8a:b4:f4:dd:84:31:82:
dc:1f:aa:48:58:7f:b9:f9:10:66:31:7a:88:18:30:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C9:72:AD:56:97:C9:59:D2:2B:FF:14:59:EB:27:D1:73:F0:A9:4F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EMlyrVaXyVnSK_8UWesn0XPwqU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.69.0/24
213.254.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:95:3e:99:af:a7:0f:3d:cf:44:d4:8c:db:49:96:df:5c:1f:
48:2a:7c:c5:b5:72:f6:91:9d:4a:07:b5:9e:bb:66:56:d6:5a:
5a:03:5f:50:c8:e7:c2:9f:70:b0:de:a4:53:43:4c:7b:26:c7:
91:fe:cb:0e:a8:18:04:97:84:e2:21:25:ac:1d:eb:65:20:5f:
64:27:51:28:c3:d2:89:2b:cc:4e:24:ac:34:df:58:e8:22:45:
42:ce:28:92:5b:99:e0:1d:f5:03:29:35:87:e8:df:be:72:9e:
66:2a:ba:d7:12:06:e1:c3:9f:1b:3d:1a:6f:d6:b5:07:7f:1b:
4d:94:1f:2b:b5:b1:f4:d0:a9:cc:85:6a:e5:6b:7d:13:bf:d7:
76:45:6a:83:ef:c9:00:63:a7:36:5a:a5:ae:3c:12:01:21:a7:
12:e7:56:0b:d7:6d:20:fc:f0:34:95:e2:b1:23:0d:8e:03:9c:
20:5d:02:a1:a7:80:2d:3e:e8:ad:95:d4:c3:9c:a4:9a:47:14:
fb:53:47:34:db:b7:30:d8:7d:79:f0:18:2a:a6:74:5e:73:4b:
22:ec:86:2e:fb:1d:97:f0:d1:dc:37:d4:4c:ad:2b:c1:ea:27:
d3:92:09:a6:43:86:8f:12:fd:85:07:55:b5:90:a0:7d:63:49:
31:98:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:27 2025 by rpki-client on console.sobornost.net