Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/dKjh9OyM_cot3UzX7jW4QBDob5U.roa
File: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (raw, json)
Hash identifier: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=
Subject key identifier: 74:A8:E1:F4:EC:8C:FD:CA:2D:DD:4C:D7:EE:35:B8:40:10:E8:6F:95
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 019424B3B140A6E05BF24F367DB2A32D264E
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/dKjh9OyM_cot3UzX7jW4QBDob5U.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6851
IP address blocks: 195.246.226.0/23 maxlen: 23
195.246.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b1:40:a6:e0:5b:f2:4f:36:7d:b2:a3:2d:26:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74a8e1f4ec8cfdca2ddd4cd7ee35b84010e86f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:3d:0f:58:97:60:8d:b3:ef:25:62:a4:82:
f7:95:99:df:2e:fe:4e:e0:da:37:c3:21:88:56:4a:
83:f2:65:89:2f:e8:71:9c:7f:c3:b7:13:9e:13:5c:
16:e7:e9:4f:bc:ca:74:7a:62:b4:52:24:8a:64:b5:
aa:d5:3b:09:e7:ed:07:4a:3b:92:94:a2:6b:21:8c:
a1:17:69:6f:44:52:c9:90:54:c5:39:e6:bb:98:06:
f2:67:3c:8f:c3:33:1b:05:ea:9b:64:82:81:7f:3f:
eb:34:58:b3:b3:4a:19:ee:42:43:46:1b:1a:db:ca:
e3:33:57:af:82:41:b3:62:7e:16:46:09:3e:74:26:
37:6c:7e:e9:1a:45:b6:02:e0:e8:88:e4:05:0d:64:
1e:81:7b:8f:2a:c6:c3:52:e7:2f:71:52:7e:73:47:
a8:d2:f3:67:c9:0e:55:c6:41:dc:7e:f6:7d:44:be:
5f:27:cd:45:cd:d8:36:a9:61:42:fa:f4:b9:3b:94:
01:16:fd:38:c4:51:7c:89:58:03:4e:7f:a8:46:f2:
f9:89:64:14:97:63:df:d3:08:8e:2b:64:df:84:cd:
23:a8:57:f9:1d:3c:79:6d:0d:b5:71:b2:83:3c:23:
c1:72:76:6d:5f:bd:16:98:91:9c:2b:eb:b9:43:01:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A8:E1:F4:EC:8C:FD:CA:2D:DD:4C:D7:EE:35:B8:40:10:E8:6F:95
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/dKjh9OyM_cot3UzX7jW4QBDob5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.226.0/23
Signature Algorithm: sha256WithRSAEncryption
21:84:23:70:ef:04:a2:07:6e:20:cd:ba:5c:93:19:6f:ca:09:
99:65:83:1d:48:64:be:c1:1f:30:5a:c0:6e:de:b9:b0:4c:3c:
cc:4f:02:3d:74:d6:77:84:da:22:30:c5:65:5b:3d:b8:9d:20:
84:da:f9:f6:7b:85:c1:2b:85:a8:6f:9b:29:c0:b7:30:8a:ec:
a0:cd:de:f9:79:f2:ee:82:f6:64:02:34:3f:f4:ce:2e:57:d6:
39:56:02:d4:7d:4c:07:f8:e7:9f:70:a4:cd:8b:da:9a:28:b9:
7a:29:8f:58:68:dc:6f:3e:a6:97:21:af:09:cf:67:5f:65:d3:
73:65:33:51:45:75:74:46:42:c9:ea:84:a6:bf:ba:81:62:8e:
51:94:fd:f8:c6:8f:e4:0e:6e:10:e3:c2:40:5d:e9:4b:58:84:
01:9a:6b:d3:07:77:5c:61:ab:a4:e9:4e:09:53:30:80:4a:7f:
2f:8c:3e:c8:30:2b:4a:07:4c:71:22:cc:00:59:f3:35:98:0d:
6e:d7:b4:c3:39:56:cd:84:cd:89:56:90:fb:8b:45:1a:5a:09:
13:f9:94:c3:87:41:f2:33:c0:e4:d6:6e:db:09:46:2f:ae:33:
b9:79:c4:6c:35:8b:c7:bf:72:9e:39:3e:7a:38:ff:f8:38:14:
7b:83:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net