Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/03YOknvLzuLtecipQHEM9oUgfnY.roa
File: 03YOknvLzuLtecipQHEM9oUgfnY.roa (raw, json)
Hash identifier: Y9pc0KjN0jtXN7PMd6pV/+HMwsV4kn+UyMORZ9TrI7A=
Subject key identifier: D3:76:0E:92:7B:CB:CE:E2:ED:79:C8:A9:40:71:0C:F6:85:20:7E:76
Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial: 019420D5D9476CFCBCB3D29D3D11DB7FEB63
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/03YOknvLzuLtecipQHEM9oUgfnY.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210423
IP address blocks: 93.157.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d9:47:6c:fc:bc:b3:d2:9d:3d:11:db:7f:eb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3760e927bcbcee2ed79c8a940710cf685207e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f7:a7:aa:c5:63:92:19:ff:fd:f1:d5:d1:fe:
a7:fe:16:e8:66:7c:62:5c:45:7c:86:75:e2:df:b8:
db:6c:84:f3:e9:9e:ee:c7:60:85:0f:7f:b6:9e:bb:
5a:39:53:98:24:ee:c8:dd:af:36:dc:fb:9a:33:97:
93:58:07:5b:be:6d:89:c8:2f:7c:bb:29:b2:7a:17:
5f:dc:58:78:40:97:6a:1b:12:5e:29:d5:a5:de:8a:
57:bc:5e:75:e2:58:68:88:e2:2b:41:47:0b:79:5b:
0f:48:b8:69:fe:5b:68:7d:32:4a:a6:b5:6b:1c:11:
25:8f:3e:0d:50:e4:51:d5:c7:0d:6b:e3:19:33:2a:
a6:83:15:92:55:51:3a:b0:bb:8b:37:9e:da:0e:94:
68:a1:82:63:28:06:0a:5a:13:f6:51:6c:99:e4:54:
0a:e5:72:fd:25:f2:51:23:a0:7b:83:45:90:6e:1b:
5a:57:11:f9:2a:9a:60:33:cf:f2:2c:4c:36:f0:92:
46:ed:b1:68:d2:0a:b7:67:81:5c:60:5e:b4:fd:f7:
5e:e2:90:59:26:1a:f6:28:72:f8:8f:cd:83:37:d5:
5a:1f:db:7d:99:75:30:fc:58:f4:6b:b2:4a:2a:61:
0c:9c:94:bc:66:34:6d:46:79:97:0a:a8:15:11:b2:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:76:0E:92:7B:CB:CE:E2:ED:79:C8:A9:40:71:0C:F6:85:20:7E:76
X509v3 Authority Key Identifier:
keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/03YOknvLzuLtecipQHEM9oUgfnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1b:bf:30:ee:3c:b0:65:df:e9:27:98:fc:a2:44:cf:c0:9e:
7f:f2:68:1e:80:ae:2c:61:9a:ec:34:94:2b:de:37:40:ea:e8:
43:6a:bd:19:d2:90:3c:79:0b:7b:99:69:64:6a:a1:6b:0d:62:
08:e3:1f:f4:7b:67:6a:77:2b:5c:76:98:69:45:99:77:40:cc:
17:86:af:d6:53:f1:32:35:97:15:91:35:16:20:13:0b:3b:34:
21:58:fa:a7:38:81:ea:c5:74:d5:ed:93:06:db:5b:00:06:18:
54:0c:b8:72:49:c9:74:c1:f8:09:21:ca:77:25:7c:28:54:8e:
4e:7e:43:62:52:97:09:d1:f8:41:df:e4:16:88:0a:71:7b:50:
81:64:bf:b7:a8:aa:95:f8:03:72:2c:04:97:9b:b4:65:06:88:
06:c8:53:ec:67:d2:18:91:21:12:56:4a:0c:09:aa:60:d3:0a:
7a:c1:0f:57:c8:27:41:87:47:17:f5:d9:58:52:93:fa:31:27:
ee:00:7c:88:ae:51:70:f6:0d:39:a4:27:39:d8:8d:32:30:13:
1a:19:f0:3c:9f:2f:aa:d1:cd:cb:7b:3b:7c:7f:8a:4e:1f:06:
af:3d:71:52:30:e2:e7:8b:f8:9b:70:18:a8:04:c2:3e:68:3b:
84:7e:c3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net