Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/hWosbOoApl7V_Bhpe5UlA20sERA.roa
File: hWosbOoApl7V_Bhpe5UlA20sERA.roa (raw, json)
Hash identifier: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=
Subject key identifier: 85:6A:2C:6C:EA:00:A6:5E:D5:FC:18:69:7B:95:25:03:6D:2C:11:10
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0194258E42A5AF4583EE54F350EB2AC79217
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/hWosbOoApl7V_Bhpe5UlA20sERA.roa
Signing time: Thu 02 Jan 2025 05:47:47 +0000
ROA not before: Thu 02 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20864
IP address blocks: 213.143.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:42:a5:af:45:83:ee:54:f3:50:eb:2a:c7:92:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 2 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=856a2c6cea00a65ed5fc18697b9525036d2c1110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:0e:9d:75:ba:25:f8:0f:ab:e1:b6:88:93:
04:8b:45:83:64:03:bc:20:56:e8:37:f3:a4:be:56:
a8:88:77:bc:39:4b:48:a9:51:50:32:1e:9f:45:28:
b5:1d:13:e7:e6:df:dd:58:94:92:58:4f:3f:88:d9:
b5:e1:67:2a:4d:22:99:1b:60:bb:3c:19:1a:98:48:
b4:b3:c2:34:ea:b6:3e:19:b2:8b:94:f0:df:11:23:
c5:70:16:0a:34:05:a1:df:6e:2d:d2:22:6d:d1:30:
62:dc:3d:8c:9c:b0:22:61:66:3a:4b:ed:b1:74:53:
38:2c:51:b9:3c:0c:87:85:5c:98:bd:fd:cd:93:81:
32:56:29:80:2f:69:ac:a9:d5:50:25:d8:db:9c:46:
51:8e:6a:92:db:5a:19:76:14:cc:8e:8e:f5:95:55:
78:14:5b:c7:7f:43:fc:b6:09:e8:dd:fc:89:3a:0e:
7e:9c:88:79:0c:c3:a3:84:14:80:30:4e:98:8c:b8:
6b:42:3f:a8:88:97:b8:44:97:83:96:7f:cb:c8:83:
42:de:ec:3b:d9:75:c3:bc:78:e6:89:b1:70:85:ae:
17:32:61:a9:7e:dd:79:c0:f5:d8:c8:52:49:a8:45:
6a:ae:56:59:74:f3:0f:f5:5d:42:b0:60:b5:56:62:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:2C:6C:EA:00:A6:5E:D5:FC:18:69:7B:95:25:03:6D:2C:11:10
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/hWosbOoApl7V_Bhpe5UlA20sERA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.143.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ae:b6:16:73:1b:2e:b4:24:83:53:f6:df:7a:40:bb:2c:e2:
b9:ab:1b:6c:a8:51:0c:c7:d1:dc:47:34:4f:eb:45:c7:e9:48:
77:e9:b5:74:ef:37:6a:92:bd:34:ab:e0:0f:f6:8f:17:70:e5:
b6:eb:2e:69:ee:ba:df:66:7c:65:ec:c0:e0:fd:b8:36:02:2e:
34:ff:a8:51:90:63:23:b5:cb:5c:91:e8:92:d2:d8:38:ce:bb:
da:dd:60:66:cb:fa:4d:21:3f:8c:f9:c7:f2:8f:cc:fa:1b:40:
a6:4d:26:0d:88:de:03:7a:6c:74:a2:a3:3d:9b:11:c1:a8:7b:
52:dc:a2:af:4c:ef:78:e2:49:02:46:c6:2c:ad:46:16:8b:7b:
1c:ac:3a:f3:3c:86:f3:9c:b6:98:c9:4e:e4:a0:84:5a:eb:25:
90:38:0f:e9:19:02:2d:8a:91:eb:f7:6e:f2:f5:fb:ab:b2:5d:
39:9f:4e:53:7d:a8:d4:05:cc:89:18:3b:9d:8b:11:fd:1e:1f:
c9:36:0c:13:2d:60:6e:b5:01:0c:e5:f8:39:f2:40:46:f9:c2:
0c:a2:e3:a6:8e:db:5d:6e:67:c9:51:97:e4:f6:89:c3:6e:a9:
4e:10:a9:fb:19:f7:58:e1:0d:d0:97:91:7f:e1:da:31:8e:69:
46:de:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:57 2025 by rpki-client on console.sobornost.net