Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/OmskgLTfs_yHaV8sxyBdNIbaPY0.roa
File: OmskgLTfs_yHaV8sxyBdNIbaPY0.roa (raw, json)
Hash identifier: +YVWkhb4gyvwjOmlRZNIrwJ0F1cssnxh9edgyxYPzgA=
Subject key identifier: 3A:6B:24:80:B4:DF:B3:FC:87:69:5F:2C:C7:20:5D:34:86:DA:3D:8D
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 0194236A1D98F60EE2A530BCBEA32BA07523
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/OmskgLTfs_yHaV8sxyBdNIbaPY0.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62201
IP address blocks: 93.159.183.0/24 maxlen: 24
93.159.188.0/24 maxlen: 24
93.159.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1d:98:f6:0e:e2:a5:30:bc:be:a3:2b:a0:75:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a6b2480b4dfb3fc87695f2cc7205d3486da3d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:f7:ed:48:a8:49:34:5f:84:7c:b2:2f:ce:
9c:7c:e4:19:70:0a:16:a1:97:19:7b:ff:a4:85:ca:
16:bd:cd:7e:24:7b:36:72:a0:d8:05:9b:7c:60:07:
05:03:81:e4:3f:8e:bc:6a:2f:21:76:9c:b2:7a:19:
3a:b4:c5:36:64:00:84:cf:45:a3:23:e0:24:63:c0:
35:94:c7:11:a7:a6:df:4e:48:ba:b2:64:17:19:38:
5e:50:d1:ed:94:55:6b:a1:98:35:2c:bd:2f:e9:ef:
ac:9b:ce:79:ab:45:f7:8e:dc:17:16:ac:55:e0:ee:
7f:96:01:ca:7a:9d:68:dc:f2:c2:bb:57:4d:d3:39:
3a:49:40:cb:8e:11:38:9a:1d:e3:0a:46:8e:10:f3:
28:b4:f0:81:0c:60:dd:9a:ea:c8:71:40:1e:57:50:
03:4f:d4:57:a2:4a:51:8d:d0:ff:7c:4a:f3:f1:09:
65:da:c1:db:59:bb:fa:1f:fd:4c:26:0a:76:91:23:
e5:14:f5:1b:39:6e:60:72:6a:ad:b5:11:7a:ef:5f:
70:13:48:07:db:83:3b:0f:0d:0b:0d:bb:41:76:b5:
fc:c2:a7:8e:be:3c:da:f5:c1:c3:85:9b:e6:60:42:
78:26:14:55:05:3a:32:85:d6:d3:12:8b:e2:4c:8c:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:24:80:B4:DF:B3:FC:87:69:5F:2C:C7:20:5D:34:86:DA:3D:8D
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/OmskgLTfs_yHaV8sxyBdNIbaPY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.183.0/24
93.159.188.0/23
Signature Algorithm: sha256WithRSAEncryption
57:56:5a:12:17:9f:4f:bf:e2:01:29:3a:f9:87:d1:63:66:93:
fa:46:c8:b5:7a:7e:b2:80:b8:cf:5d:7e:8f:15:af:01:a5:96:
37:87:f2:0e:cf:96:f6:cd:97:44:c4:8b:3f:30:bb:84:d0:bb:
dd:fb:fc:02:9a:44:51:97:1a:85:b9:67:2f:49:8a:21:d5:05:
89:e4:11:ef:b6:01:b5:e6:fa:81:18:45:58:6c:6c:9b:e5:84:
87:c8:f2:d2:75:dc:cc:1d:63:64:b3:bc:c6:a8:82:5d:f3:ba:
bd:86:85:4c:5b:a7:c8:be:47:c8:58:2f:f4:b5:d0:7c:f6:b0:
cb:c8:dc:41:15:97:2a:2c:a3:6a:7c:ae:e7:24:c9:f7:06:57:
91:d9:21:d0:99:9e:0e:c0:46:b0:eb:f7:b1:d1:83:6f:a5:08:
cf:71:80:e6:c7:4e:78:9d:98:6d:fa:25:d8:b5:0d:5e:64:ef:
1c:65:51:b8:c1:83:bc:2f:9f:a9:24:32:32:bd:db:c9:74:55:
98:94:3c:81:a1:25:13:cc:82:b4:8f:c6:f7:c3:16:2a:86:06:
78:83:46:08:d1:86:4a:13:d2:44:3e:b6:15:a1:b4:29:13:22:
ea:37:e0:a2:06:c2:d7:d0:dd:b4:0c:2a:47:90:5f:37:79:39:
cb:b0:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net