Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/BtHL3XHEieb1gWKcjsadU5qjZac.roa
File: BtHL3XHEieb1gWKcjsadU5qjZac.roa (raw, json)
Hash identifier: 1jFZs/t3ujMVEG8CZ4mhr6EfSszS7y3HVxTcxs6WBzE=
Subject key identifier: 06:D1:CB:DD:71:C4:89:E6:F5:81:62:9C:8E:C6:9D:53:9A:A3:65:A7
Certificate issuer: /CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
Certificate serial: 01953D9D6F3C3F58D9221049A4C14A0EAE9C
Authority key identifier: 20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/BtHL3XHEieb1gWKcjsadU5qjZac.roa
Signing time: Tue 25 Feb 2025 14:58:02 +0000
ROA not before: Tue 25 Feb 2025 14:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 945
IP address blocks: 195.246.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:9d:6f:3c:3f:58:d9:22:10:49:a4:c1:4a:0e:ae:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
Validity
Not Before: Feb 25 14:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06d1cbdd71c489e6f581629c8ec69d539aa365a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:5a:1d:77:c3:65:83:20:c0:66:63:63:fa:
c2:51:05:28:48:bc:88:8f:b5:cc:56:47:2b:4b:a7:
cc:ac:4b:bf:30:22:8b:ed:ed:cf:3c:46:d3:0a:60:
b8:12:7e:91:b3:d5:b8:28:78:c3:48:9b:aa:3e:f3:
ca:c8:a2:d2:65:39:8f:79:b6:d5:16:cc:1c:5a:6d:
2d:b1:de:53:6f:2b:ad:53:e5:cf:3c:77:28:4f:12:
46:5c:0e:46:66:a8:2b:b4:21:6b:d0:a5:47:ef:72:
42:d2:c0:dd:8e:6d:9e:20:72:ac:b6:72:79:e6:87:
c2:74:d4:c1:a1:82:e5:28:87:98:22:b9:09:d3:45:
a2:d6:b4:ba:a1:9c:20:7c:10:00:43:cb:9b:99:4c:
f6:0b:23:a3:0d:ea:a7:39:19:cd:42:3e:ad:86:31:
10:78:10:d1:12:af:a0:3a:06:88:97:cb:fc:49:8c:
e8:2a:b1:0a:e2:aa:60:81:0c:d4:6b:5d:bc:e4:91:
71:98:b4:84:a9:5e:b0:fc:33:d5:68:b3:47:82:03:
af:23:8b:19:21:96:28:0c:0b:17:6a:d2:3b:fb:f4:
d6:d5:46:25:bc:1f:0b:46:ee:57:9c:83:7f:08:07:
ea:41:74:79:9c:56:a7:f3:17:69:05:63:c0:1a:ab:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D1:CB:DD:71:C4:89:E6:F5:81:62:9C:8E:C6:9D:53:9A:A3:65:A7
X509v3 Authority Key Identifier:
keyid:20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/BtHL3XHEieb1gWKcjsadU5qjZac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6c:2c:f5:c5:58:f6:b0:8e:49:0c:f7:6c:9e:5b:12:5b:a1:
07:23:fb:55:54:0f:3c:af:2f:91:31:32:79:8f:2d:16:eb:6e:
e8:02:5a:d5:41:1c:b8:2d:02:6c:94:01:8e:80:40:36:e4:d2:
bf:f5:90:ad:95:10:3b:49:4f:26:6d:10:ae:8f:84:dc:7c:8c:
aa:af:f4:ab:dc:de:ea:cc:35:30:99:24:6b:56:bb:95:35:de:
f2:b4:a3:82:76:13:af:b7:d3:1f:fd:9a:1a:2b:c4:f9:32:c8:
a4:1d:b4:98:b4:bd:27:93:82:b8:68:2f:00:e5:f0:5b:41:90:
88:d7:08:f8:41:49:14:e0:5e:a5:3b:ba:84:43:fc:4b:70:29:
f0:01:b2:07:97:51:ed:3d:8e:e0:90:fd:0c:5e:48:8b:4d:9e:
4d:d2:e0:75:86:f6:f3:98:76:7d:b2:64:a6:f7:35:b4:5f:17:
2b:7a:c2:b8:f2:d9:ab:93:8b:13:59:4e:d2:8c:ba:73:4e:52:
62:1a:93:45:76:19:73:97:80:59:60:43:3d:a7:12:7c:26:15:
46:d9:ca:9f:27:1f:64:6c:e9:3c:90:95:85:90:25:78:ee:9e:
a0:36:3c:a2:fa:f7:a5:cc:d8:3c:b5:94:8f:29:73:f8:a6:8d:
22:f6:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net