Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/mA3rys3eEYCw0R5GwYAKoJlEh2w.roa
File: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (raw, json)
Hash identifier: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=
Subject key identifier: 98:0D:EB:CA:CD:DE:11:80:B0:D1:1E:46:C1:80:0A:A0:99:44:87:6C
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 019424B39B0FC3B854D158121D5F74B8F425
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/mA3rys3eEYCw0R5GwYAKoJlEh2w.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12502
IP address blocks: 193.105.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9b:0f:c3:b8:54:d1:58:12:1d:5f:74:b8:f4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=980debcacdde1180b0d11e46c1800aa09944876c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:eb:f9:37:ba:a3:02:ea:d6:70:fe:8f:74:
d7:1c:23:ba:e1:de:d1:5b:89:96:c5:52:65:79:3c:
4e:4b:74:51:5c:22:41:e6:67:96:9a:ad:d8:c3:96:
14:60:f3:fd:27:80:37:d8:1e:0c:d8:a0:56:d1:93:
8f:5d:35:16:87:b0:5a:e4:d5:d7:17:b6:ba:08:36:
36:0c:e4:f1:aa:ce:4e:48:b7:52:4d:1f:f8:77:63:
74:f1:b7:86:22:2a:f8:c8:8d:e2:15:74:6a:a3:24:
7f:f4:87:71:aa:91:79:46:7b:f6:49:86:a3:81:fe:
3a:1a:7e:46:ba:bd:a8:50:f1:f2:33:be:4c:03:24:
a9:cb:7c:49:c4:54:77:9b:a7:2c:21:06:be:af:fa:
fa:d4:07:a0:91:7d:63:bb:97:1e:d9:d0:f0:a2:8e:
7d:c1:8e:5a:af:2d:4e:97:5c:65:a4:97:a9:3a:0d:
83:39:dc:d7:e4:82:e1:f0:64:ab:5c:d3:05:4a:4c:
f5:da:c2:77:00:8c:9d:db:f7:99:38:7b:3c:25:41:
26:f7:c5:aa:80:0d:82:46:ba:40:aa:d0:a9:c0:c0:
bd:59:f5:6d:96:58:2d:c0:2d:9d:2c:28:fb:d0:97:
d3:68:70:08:d6:81:aa:43:6a:b5:0e:95:12:4a:a1:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:EB:CA:CD:DE:11:80:B0:D1:1E:46:C1:80:0A:A0:99:44:87:6C
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/mA3rys3eEYCw0R5GwYAKoJlEh2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:78:fc:9f:a2:e2:01:b7:18:35:dd:a4:a6:ac:dd:16:1a:41:
97:7b:80:ac:fd:b6:21:3b:87:0f:04:ea:ca:0a:fe:71:bb:f1:
ea:b5:c6:dd:f6:6b:c1:3b:73:78:cd:e4:a8:da:05:97:a3:e7:
bb:58:0d:bb:a0:4c:a8:52:dd:4d:b8:eb:bf:ca:bb:b0:01:70:
38:3b:a6:05:7d:27:7a:80:05:af:9f:c1:fe:b9:b4:b0:79:82:
fb:db:e0:ca:29:66:da:e8:b9:dc:18:30:e6:e2:e0:8c:39:a1:
48:fd:ec:12:66:8f:0b:9d:a8:26:2e:76:ad:23:23:8b:d3:e6:
1b:7b:66:41:5a:57:7e:28:16:89:16:a5:33:36:cc:1b:6d:ce:
d8:99:eb:0e:9b:cc:a7:00:ab:7d:c9:cf:ce:7a:8e:08:8f:35:
63:74:51:72:e8:dc:07:3c:85:0e:4d:6a:92:ea:2d:5b:35:cd:
e6:46:76:c0:81:e6:3a:7a:4e:0e:71:4a:85:e2:6d:01:f7:3a:
26:fa:5b:9b:92:36:69:ef:18:a4:3d:d7:90:a4:57:25:e8:21:
3a:bb:69:df:e2:cc:bb:8e:89:3d:66:a4:3f:66:d2:47:9f:64:
14:28:bf:55:ac:10:3e:a0:18:1a:6d:0e:a4:56:03:ce:b6:21:
ca:94:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net