Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/mC5LwElUmLRuYfhtRytHc9ZpqR0.roa
File: mC5LwElUmLRuYfhtRytHc9ZpqR0.roa (raw, json)
Hash identifier: ThX2BNk8xeMGUBx8nMXao6T14FMQBl6CvbjOYDIbLcQ=
Subject key identifier: 98:2E:4B:C0:49:54:98:B4:6E:61:F8:6D:47:2B:47:73:D6:69:A9:1D
Certificate issuer: /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial: 01942444C69E182907C258B8322D89F19750
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/mC5LwElUmLRuYfhtRytHc9ZpqR0.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31627
IP address blocks: 193.16.243.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c6:9e:18:29:07:c2:58:b8:32:2d:89:f1:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=982e4bc0495498b46e61f86d472b4773d669a91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:8f:59:20:0c:08:42:13:c4:ca:74:89:17:
31:da:f2:9d:93:1d:1d:56:3a:d7:c5:4d:d5:b2:d4:
d2:2d:e5:da:c0:5c:f1:70:6a:65:43:c2:fd:ca:ee:
bd:75:e0:2a:a2:7f:f0:4b:45:52:60:ad:c4:3c:7a:
36:a0:be:71:3e:f3:c8:46:23:10:27:5a:a2:5c:37:
65:78:0e:92:ad:86:4a:f3:c2:1f:4a:08:ca:b1:44:
6d:76:19:02:e8:65:a7:6d:0b:f9:88:03:d5:b9:78:
bf:d4:44:9c:e9:13:89:24:82:a1:df:a2:d9:44:e8:
47:3e:7d:46:1c:dc:a9:35:9a:c3:98:fe:82:a3:97:
ba:9d:24:28:94:6f:60:76:7f:a6:de:e6:d5:90:91:
63:a3:61:27:72:60:fc:e8:b6:17:80:ff:ee:31:a0:
4e:ee:a4:e7:ce:79:e2:b0:b5:a4:e1:84:5b:68:bc:
8a:c8:e5:88:a3:83:21:cc:d0:86:74:70:3c:60:d7:
6c:c1:17:c4:99:c7:dc:c7:a7:26:60:29:80:54:9e:
c3:25:35:5c:06:5e:56:51:54:bd:37:e6:f8:eb:6b:
37:3f:66:bf:4b:fe:e5:df:1e:63:b4:4f:1d:3f:23:
da:6b:94:f0:59:f0:cb:d9:cc:3c:fa:38:31:31:b0:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2E:4B:C0:49:54:98:B4:6E:61:F8:6D:47:2B:47:73:D6:69:A9:1D
X509v3 Authority Key Identifier:
keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/mC5LwElUmLRuYfhtRytHc9ZpqR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:24:38:06:a8:55:c0:50:7a:9c:35:03:16:ad:74:8b:ea:ec:
a3:db:07:ff:e2:2b:5a:65:83:2a:29:5c:fe:5e:19:2d:be:65:
d6:b8:15:6b:a9:b7:fd:1c:fa:6b:bf:67:30:74:27:71:53:e1:
5d:ff:aa:fb:80:ca:c1:ec:73:c8:29:e4:a8:c0:0a:32:e5:f0:
20:8f:1c:18:f3:e0:f3:96:36:3a:d7:76:65:8d:6b:78:a7:fa:
55:f6:83:80:94:43:11:15:19:d3:19:84:a3:cf:72:a0:4a:d6:
6d:06:5f:93:e1:66:f5:0f:fd:f6:fd:01:30:e4:d8:34:3d:78:
fc:94:ce:76:0c:55:8d:7d:3c:52:c6:d1:7d:f5:01:fe:03:45:
42:40:fb:04:31:94:3c:45:45:4c:bc:33:fa:ac:34:ba:d8:e0:
36:dc:1d:45:87:4e:b9:1c:03:52:ce:f2:22:20:60:c6:1b:5e:
10:a7:31:c9:cb:35:ec:45:bc:cf:f2:03:7b:c2:de:59:4e:66:
29:1e:d8:4b:39:97:8c:b1:71:b3:24:8b:ce:e9:3b:14:29:26:
0a:1e:a3:75:87:f0:0d:08:07:bf:27:43:5b:e1:d5:7b:6d:eb:
78:e0:e2:2b:37:2d:e3:72:19:d4:8c:ad:1e:21:8e:8c:e2:6d:
f5:c0:9f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net