Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/DBBkmAjtiZvJk178YbVOfqGzI3Y.roa
File: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (raw, json)
Hash identifier: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=
Subject key identifier: 0C:10:64:98:08:ED:89:9B:C9:93:5E:FC:61:B5:4E:7E:A1:B3:23:76
Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial: 019426D9448D06B1DE5872456E962E7F17A0
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/DBBkmAjtiZvJk178YbVOfqGzI3Y.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208040
IP address blocks: 193.161.24.0/23 maxlen: 23
193.161.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:44:8d:06:b1:de:58:72:45:6e:96:2e:7f:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c10649808ed899bc9935efc61b54e7ea1b32376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:e5:d8:4f:0a:94:ee:82:e0:9a:ef:36:c4:
ce:58:bf:ff:20:c5:4e:eb:05:51:e3:48:d4:6f:5c:
79:73:26:d3:0f:d1:f4:ba:19:ad:e9:21:67:4d:2b:
2d:ec:74:33:bb:67:6c:44:e8:8c:c1:3c:53:94:e5:
3b:b0:0b:ea:63:55:93:a5:e0:2c:f5:84:b7:15:50:
57:d1:3f:59:7a:03:71:48:2e:6a:1f:10:24:ff:18:
66:ba:cb:5f:d5:b7:38:0f:a2:b7:32:d1:3e:eb:ac:
fd:ca:f7:52:66:d7:02:c6:fb:a7:44:56:0c:0a:0c:
97:a3:ea:ae:ae:a6:b5:01:d3:b2:9e:e8:05:77:8a:
03:35:9b:63:fc:13:68:d6:f4:4a:7b:13:f7:6f:da:
8f:f6:84:d2:ae:6d:6d:52:6f:9f:e3:d4:1f:93:8b:
41:0a:15:30:2d:f3:03:ba:66:68:c2:eb:3c:25:c0:
4f:cf:48:ce:06:f8:af:87:e2:5f:a4:e5:b0:44:97:
5b:73:56:40:1a:30:96:1e:ca:1d:2e:47:54:b3:02:
20:34:25:cd:9d:5d:ab:e8:9b:07:1b:12:b0:6a:61:
c9:d4:5c:05:a6:87:1f:40:2c:ec:06:3d:b1:8f:a3:
e8:ed:1d:10:66:4c:76:91:23:29:28:f5:03:56:ca:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:64:98:08:ED:89:9B:C9:93:5E:FC:61:B5:4E:7E:A1:B3:23:76
X509v3 Authority Key Identifier:
keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/DBBkmAjtiZvJk178YbVOfqGzI3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.24.0/23
193.161.28.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:6a:aa:4d:86:33:0b:28:f6:01:7b:64:c8:31:d7:b5:d4:f8:
22:62:70:60:85:e2:a6:cc:54:7e:4a:c8:5a:59:d1:68:75:58:
89:6f:05:d3:19:a0:22:01:df:f1:0c:93:67:e5:17:a1:22:ce:
e5:13:ab:3b:b7:8d:e0:1a:64:6a:f8:0c:7c:d4:cb:fc:1c:fe:
cd:cd:c7:ed:e8:8e:0f:0f:01:95:6c:d8:16:4b:03:8f:24:18:
fb:f4:ef:74:a2:9b:72:8e:80:07:49:b9:e5:e6:f0:2f:3a:64:
86:cb:d0:77:55:75:da:dd:8f:50:36:c3:61:a1:e4:40:46:a3:
e4:0b:7a:ca:11:10:60:6b:53:78:a3:cc:c3:27:1a:96:98:7f:
32:59:79:77:a9:9d:50:0e:ff:69:99:30:43:f0:23:a0:e1:db:
a4:ca:59:79:32:c5:2c:0e:dc:af:5e:94:ff:3d:bc:07:29:cb:
2e:73:8c:76:a5:57:33:6a:42:58:7f:02:7f:18:3f:50:ee:ce:
67:b8:78:dd:38:ce:0d:cc:ae:7d:d3:dc:d9:bb:25:e9:87:46:
9c:cf:e5:5f:2e:d3:68:95:ec:02:c4:e2:c1:3a:2f:c9:27:4b:
96:83:62:00:d8:74:3c:e8:e1:0d:c3:a9:47:24:3c:1a:f5:00:
5b:75:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net