Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa
File: F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa (raw, json)
Hash identifier: YycRdDyGTbaVD3BQBXWfEPp9cD6S80QfheVTwZQO9zE=
Subject key identifier: 17:E5:8C:E9:5D:29:0D:2F:E7:83:12:20:A4:D8:0C:FD:23:8A:CD:7B
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 019426D99FF2793E430EB2952AC4F953C693
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa
Signing time: Thu 02 Jan 2025 11:49:43 +0000
ROA not before: Thu 02 Jan 2025 11:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56791
IP address blocks: 94.243.224.0/21 maxlen: 22
94.243.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9f:f2:79:3e:43:0e:b2:95:2a:c4:f9:53:c6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e58ce95d290d2fe7831220a4d80cfd238acd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:4c:13:c4:05:43:71:2a:3b:76:bb:d8:f8:
4f:ea:16:ab:e4:95:61:2b:58:19:59:53:f0:02:0a:
09:22:20:fe:93:47:45:6c:2b:fe:e2:c3:d9:94:c3:
77:fd:27:12:dc:ee:6d:94:bd:26:5c:5a:34:91:f3:
db:19:98:86:15:d5:b0:c3:09:91:98:5b:fe:fc:04:
a8:2f:a9:e1:f3:77:7a:58:16:62:5a:47:c8:30:e7:
6f:44:10:dd:db:7f:ce:d3:74:c3:32:af:ca:08:85:
48:6a:c7:fd:63:e8:1b:5f:34:7c:e0:f4:85:08:ab:
35:60:40:96:5e:1f:63:30:24:8a:c5:f0:bd:2e:de:
d5:93:cc:e9:ef:f4:e5:5d:c3:04:9a:25:24:3e:5e:
3f:31:db:e1:dc:fd:15:22:0b:80:7e:a5:56:7e:e5:
4f:fc:e4:66:44:cd:f5:e5:af:3f:da:89:0a:ab:7c:
23:5a:d4:e9:68:d2:36:49:d5:3a:cc:5c:9f:f8:0c:
db:77:d3:32:a0:a1:f2:8a:ec:76:fe:9e:85:d0:f7:
dc:1c:2d:55:ff:f4:02:00:fe:54:57:4a:3c:c5:7f:
7b:0a:4d:ce:5c:2d:95:44:fb:f4:dd:0f:f5:bb:bb:
71:fa:28:e8:85:70:72:d9:7b:70:00:d1:11:67:91:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:8C:E9:5D:29:0D:2F:E7:83:12:20:A4:D8:0C:FD:23:8A:CD:7B
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.243.224.0-94.243.235.255
Signature Algorithm: sha256WithRSAEncryption
58:71:2c:66:ec:f1:76:28:30:18:db:db:3c:69:aa:d8:b8:9d:
5b:da:06:e4:ec:ff:c4:e4:4d:95:ea:dd:b0:52:6d:74:7f:d3:
56:cf:84:12:81:82:4b:de:61:dc:90:4a:01:4b:db:cd:dd:c0:
a9:f5:29:af:77:fa:0e:21:a0:80:28:9a:3c:f7:20:f1:fd:de:
e4:9b:0c:5b:ec:eb:26:f2:05:10:84:79:1f:75:e6:50:22:95:
45:6e:09:fc:60:f6:0e:9f:57:d3:d4:8a:1f:b5:59:f1:d0:35:
cf:a8:c6:e7:d5:ce:56:7f:8d:09:8e:35:9c:40:05:13:84:88:
ea:fb:65:0e:ef:08:b5:65:a7:d2:e6:da:d9:4d:46:c7:33:4e:
54:65:d1:1e:be:cc:01:d5:40:18:7c:9c:8f:b3:50:a8:2b:9d:
ce:ee:04:fc:59:91:8b:95:d1:0b:13:37:e9:20:82:de:18:c7:
51:1e:a6:be:03:6c:48:1a:7f:41:2c:5d:31:d2:5e:37:4d:a2:
df:a7:0c:a4:5f:e8:23:fe:cf:59:27:de:ac:bf:e3:ac:04:6c:
24:a7:fb:2e:ec:b3:45:b4:85:4b:a6:27:b4:41:42:31:d4:67:
21:fb:da:53:62:c9:24:4f:b2:70:5d:4e:d0:7b:af:03:6c:06:
cd:f0:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net