Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/OO3HInjQE4V4nLX5G6Vefr6iPdA.roa
File: OO3HInjQE4V4nLX5G6Vefr6iPdA.roa (raw, json)
Hash identifier: mSjEnkNAFz3QeKqAoiXZ5g2rlJocA3yHCPraXIzbyWs=
Subject key identifier: 38:ED:C7:22:78:D0:13:85:78:9C:B5:F9:1B:A5:5E:7E:BE:A2:3D:D0
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 0194236A1E2896803B97ED4E3FCCD6A02065
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/OO3HInjQE4V4nLX5G6Vefr6iPdA.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198187
IP address blocks: 93.159.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1e:28:96:80:3b:97:ed:4e:3f:cc:d6:a0:20:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38edc72278d01385789cb5f91ba55e7ebea23dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:6a:e3:66:9a:8e:11:90:0d:19:49:8f:97:
9e:ea:27:a7:16:9c:04:bc:39:74:5e:41:07:f9:f1:
f3:1a:bf:38:f8:c0:43:3c:eb:92:73:0b:4c:b8:29:
04:b1:c7:e3:fe:cf:ea:83:ac:62:c7:dd:d5:b3:f8:
6f:e0:23:c2:1d:ae:0a:4b:c1:73:7a:e8:23:e6:33:
30:56:6b:97:6b:ba:63:68:b6:d2:d6:64:28:d1:d2:
9b:5d:9d:05:ee:54:4b:d9:47:e8:06:c9:9e:91:50:
2c:eb:e3:cc:d1:d7:c9:73:87:c6:c6:8e:22:34:a9:
3d:71:79:a1:f6:59:16:4f:3a:2f:4d:0a:b2:fa:52:
ea:00:30:a5:7a:52:5d:87:f9:15:8b:1d:dc:85:12:
cc:e1:ef:33:cf:1b:08:1c:0c:9b:94:c4:13:78:ad:
bc:83:db:07:52:81:08:38:4a:bd:99:e6:dc:ec:1a:
b1:5f:f7:1b:0e:af:98:40:42:e5:51:d7:85:3e:56:
c3:20:a2:cb:41:d4:d3:cc:a6:19:8f:3d:51:e4:e2:
af:22:21:9b:d5:c8:24:af:0f:05:0f:71:00:25:ab:
1a:38:0f:80:f4:04:62:47:30:c3:f3:54:33:a4:be:
73:23:00:ac:6c:b5:57:8d:f4:9c:ad:65:c6:72:30:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:ED:C7:22:78:D0:13:85:78:9C:B5:F9:1B:A5:5E:7E:BE:A2:3D:D0
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/OO3HInjQE4V4nLX5G6Vefr6iPdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.186.0/24
Signature Algorithm: sha256WithRSAEncryption
36:df:bf:d5:25:a6:0c:5f:0b:9b:db:da:68:45:7e:18:f9:6a:
8a:37:77:17:52:b8:c3:91:78:a0:69:95:55:d9:3d:54:75:23:
db:eb:e7:04:9d:77:15:bd:83:15:55:5a:53:8b:d0:cc:2e:6f:
6d:f5:71:b5:56:e1:67:22:1b:c0:2d:f7:08:38:bd:15:37:cf:
82:22:a5:3b:cd:25:0d:c1:ed:42:75:bc:b9:f4:d4:ca:73:b0:
68:df:e7:52:b2:7f:59:69:3b:80:9e:50:9a:13:4e:07:f8:24:
66:44:71:9c:1f:c7:c3:7d:18:d0:38:db:0b:b5:be:af:49:6d:
39:00:8f:e0:2f:3f:3f:5b:83:d0:0b:81:17:1d:68:ab:10:d1:
63:ed:86:60:37:d6:65:83:49:65:dc:8f:c6:64:ac:3b:2a:9b:
d6:02:2d:d5:0e:fe:3f:9c:46:82:d3:3b:cf:a4:26:9e:90:76:
3c:4d:e2:cd:a5:8f:e6:fd:af:38:cf:27:d4:a3:5c:b8:5e:86:
2a:61:6b:ee:43:b3:04:a7:f7:30:ac:1b:a7:38:6c:fc:92:fb:
ce:02:5b:5b:09:99:ae:0e:7f:ba:c4:9f:90:4a:be:88:b6:bb:
71:3e:f7:fd:1f:48:8c:b7:d3:35:58:80:09:26:a8:55:19:46:
ed:9e:c5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net