Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa
File: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (raw, json)
Hash identifier: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=
Subject key identifier: C4:F5:33:60:72:76:A7:AB:01:5C:E8:CA:52:E9:44:80:BA:A5:70:17
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 01942068556163CB84BD4855396EDCC59E58
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31369
IP address blocks: 193.25.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:55:61:63:cb:84:bd:48:55:39:6e:dc:c5:9e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4f533607276a7ab015ce8ca52e94480baa57017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:db:07:b1:c9:a3:ab:4e:9c:00:61:ac:a9:
9e:b1:87:ef:25:b3:31:33:1d:f8:31:04:df:8f:ac:
04:b8:99:e9:86:1f:84:88:da:19:d2:92:0e:53:2b:
d6:69:c2:56:cb:4e:bf:59:99:97:bc:ce:b8:ed:d7:
84:63:84:c3:36:38:f9:39:46:8a:56:9f:ac:d1:77:
02:07:96:db:9c:b4:bb:5f:19:76:5b:8f:36:6a:34:
ea:e1:a7:5f:b4:62:37:77:16:13:75:c1:04:d9:66:
c7:1e:0b:6f:71:45:0d:92:b4:5f:7b:29:5b:25:b0:
e3:7d:b8:e2:4b:59:83:d4:8d:b7:9a:ad:b9:61:a7:
1f:3e:f0:dd:f3:65:aa:39:7d:0a:35:9c:3b:a4:00:
bc:35:a8:10:a3:01:7a:31:f0:66:3a:a8:5b:fa:35:
e4:68:74:7e:3a:2b:97:7d:20:54:6e:71:89:a2:e4:
d4:78:24:be:5b:97:12:54:3d:9d:8f:d6:ca:64:a8:
7b:67:b4:4c:07:cd:41:f2:ca:91:f9:71:41:3b:f3:
77:c2:1c:29:8f:8f:c1:83:c8:42:9f:36:49:2c:7e:
1f:62:c3:17:68:6a:ed:aa:7d:b0:e1:60:39:cc:76:
d8:57:03:58:25:e6:40:d2:6f:fe:dc:a2:21:45:11:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F5:33:60:72:76:A7:AB:01:5C:E8:CA:52:E9:44:80:BA:A5:70:17
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.162.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:85:82:07:c8:20:06:e6:04:5e:70:36:d9:f6:59:16:28:e9:
d0:2e:b3:63:8c:ac:50:91:ed:ea:e8:0b:6f:82:11:26:c3:f5:
16:3f:af:3b:50:c9:14:2b:84:bd:20:38:a5:c7:05:35:88:a2:
2e:48:26:ef:75:96:52:86:13:fe:20:31:38:d9:2f:3e:19:44:
c7:8d:6b:7e:a9:11:e4:bb:fe:cd:79:0f:2c:cc:9b:c8:62:57:
21:d0:4b:dc:7d:54:6e:dd:4f:7b:f6:18:66:25:5e:1a:74:b8:
e1:c7:e7:ca:f5:c4:28:91:56:1e:43:93:df:b5:09:f7:cf:d7:
3e:73:13:65:5e:0c:27:5a:73:7c:7b:4c:be:49:1a:15:9f:20:
b2:63:fb:92:64:c0:a5:59:0d:f5:fe:93:8f:3f:f3:60:1a:ad:
e5:2e:5a:4b:42:63:c5:97:c1:9f:fa:f1:a9:61:2a:d6:ef:d8:
ce:b8:63:e1:3d:f5:81:eb:8a:3d:3f:d1:ce:e5:29:96:03:85:
d8:f7:a4:c3:21:2b:2d:7f:8d:4c:96:24:c2:f2:10:c4:f4:a9:
43:19:6a:c3:a2:84:4b:96:82:e4:ca:30:c2:ed:8e:d1:a7:54:
90:47:85:51:f1:1b:ce:d3:bd:31:da:f0:03:04:33:5c:e9:a4:
f4:fc:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net