Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/45eXxJu6xURO3jmHH_sr82ETXJ0.roa
File: 45eXxJu6xURO3jmHH_sr82ETXJ0.roa (raw, json)
Hash identifier: 06fBrGTkGREvoEfC3pMk8VcZ5AuI0qqaRZOfsMwGOFA=
Subject key identifier: E3:97:97:C4:9B:BA:C5:44:4E:DE:39:87:1F:FB:2B:F3:61:13:5C:9D
Certificate issuer: /CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Certificate serial: 0194228DD9FEC74B9B4263BA0268EA06C741
Authority key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/45eXxJu6xURO3jmHH_sr82ETXJ0.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29434
IP address blocks: 93.94.192.0/21 maxlen: 24
93.94.194.0/24 maxlen: 24
93.94.199.0/24 maxlen: 24
193.200.170.0/24 maxlen: 24
195.85.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d9:fe:c7:4b:9b:42:63:ba:02:68:ea:06:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39797c49bbac5444ede39871ffb2bf361135c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:79:04:62:d1:5b:42:1d:ef:c1:6e:2c:f6:
43:7e:2a:29:dc:d3:34:96:ae:a7:15:e6:ec:80:27:
c2:b9:5f:96:3a:8b:38:eb:4d:fd:97:19:68:07:83:
a7:fd:48:6b:5d:05:c8:57:17:03:15:c7:b7:6c:3d:
e9:ed:2e:92:e6:28:5c:24:22:1d:38:dc:fb:9e:0f:
02:f5:83:74:3b:75:a9:1e:20:25:da:e0:1c:ae:c4:
4e:18:7b:45:08:f9:ae:e5:1c:70:b2:42:bf:aa:be:
2c:10:85:53:a2:01:36:a1:3d:cd:a9:58:b1:3d:7f:
fd:32:cf:f1:74:67:18:73:06:ce:0a:4a:7f:97:72:
f1:fa:d2:13:7c:f0:e1:13:4a:27:c1:07:3d:74:44:
db:1f:51:74:ed:ee:4e:8f:32:6c:67:1b:1c:cc:30:
fb:22:45:fd:6c:96:25:e9:b5:99:04:de:71:f1:3e:
cf:43:1c:1e:ed:ce:b3:9d:19:e6:25:56:a3:bb:d9:
e0:b2:32:71:46:eb:f6:76:77:94:e4:fb:f0:1b:70:
a7:65:6d:85:0b:83:74:db:dc:40:0c:f7:ce:2b:d4:
4b:51:d9:c5:ae:1f:7f:2c:af:48:03:88:17:4e:e4:
c6:9f:5d:c2:47:9c:07:44:22:9e:17:fb:06:e5:94:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:97:97:C4:9B:BA:C5:44:4E:DE:39:87:1F:FB:2B:F3:61:13:5C:9D
X509v3 Authority Key Identifier:
keyid:8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/45eXxJu6xURO3jmHH_sr82ETXJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.192.0/21
193.200.170.0/24
195.85.255.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bb:0d:79:ff:22:34:24:b5:ed:84:d0:25:e3:4b:9f:06:f1:
27:02:e7:c8:bb:f7:a8:2e:a1:06:a3:b9:00:36:bb:ac:67:9d:
82:d9:fd:39:51:a0:74:e4:5e:05:37:11:b6:e4:b4:6e:86:04:
02:3f:28:b9:79:b2:7c:dd:67:03:c5:b6:2d:76:16:5f:14:2c:
42:e8:30:c0:e6:59:f9:99:1c:dc:7b:d8:e3:f7:81:2c:38:b2:
8a:1a:75:b9:a9:da:1d:76:19:28:dd:75:84:b2:ae:e3:42:5e:
ca:d2:e1:32:fb:76:82:cc:2d:1d:b0:34:d6:1f:e1:6b:61:4f:
43:47:0e:50:d6:39:3d:8a:6d:ad:a1:71:9b:f4:85:d7:76:83:
93:e5:69:d7:52:5e:94:c8:2b:c1:10:84:9d:ff:72:ba:ec:9d:
a6:05:a5:87:a8:bc:5f:c0:51:f7:c4:90:75:26:65:71:d0:5b:
ee:18:5c:02:2c:34:11:da:f3:d5:ac:f4:f8:ee:6f:9e:5b:b3:
e4:a2:eb:44:1c:64:5c:68:91:77:e3:57:54:77:e4:66:2e:39:
dd:ec:50:0b:ce:73:5a:4d:2d:84:a1:94:d2:23:61:2d:08:24:
64:ed:10:b9:8b:0e:ee:32:c8:73:8b:0e:11:84:10:d5:60:24:
a4:ea:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net