Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/pK-j5yshh0oWZpvGt4P0ScMumdE.roa
File: pK-j5yshh0oWZpvGt4P0ScMumdE.roa (raw, json)
Hash identifier: mnyHWgzU3xisUAQNhTt84VgPqHifggdlwwma4Rga83M=
Subject key identifier: A4:AF:A3:E7:2B:21:87:4A:16:66:9B:C6:B7:83:F4:49:C3:2E:99:D1
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 0194236A1ECD8F317D6622F64D8941476D29
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/pK-j5yshh0oWZpvGt4P0ScMumdE.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199774
IP address blocks: 93.159.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1e:cd:8f:31:7d:66:22:f6:4d:89:41:47:6d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4afa3e72b21874a16669bc6b783f449c32e99d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:b1:eb:2e:85:a4:c0:f8:35:b6:f3:4b:80:
bd:eb:25:5b:4b:6e:73:3d:a9:dd:cd:b3:26:40:80:
44:4c:57:15:88:11:20:ca:87:8c:d1:02:5b:f9:2b:
ca:1a:df:cb:1b:d8:6a:64:ef:89:7d:b1:35:04:dc:
9a:d1:2b:32:5a:8c:8c:97:af:5b:8c:46:67:ad:19:
b4:0b:0f:42:4f:91:1c:e2:18:2d:3f:11:4d:84:de:
63:64:c2:fc:61:7f:1e:1c:dd:46:f5:0a:29:80:00:
f2:f5:03:cc:0f:1c:15:76:10:24:db:80:94:e2:55:
a0:b4:76:36:4b:06:5f:ea:a3:3e:26:b8:a9:d9:0e:
96:9a:f6:e6:14:67:f6:2a:95:b8:d3:a0:c1:df:71:
b8:62:33:9b:15:61:d1:b6:53:51:90:76:93:1e:98:
e4:68:4a:21:65:92:5b:d2:4e:5a:ad:ed:cb:44:3e:
14:df:72:ca:78:67:88:f7:04:54:fa:53:54:25:24:
86:8a:85:61:cb:3c:e7:39:a6:a3:0b:9c:c4:04:14:
fb:da:2d:0a:7a:f9:bc:c7:78:8d:b5:46:6f:18:07:
68:9f:02:24:9b:c0:0c:04:2e:80:f0:da:50:ce:33:
7d:ed:a6:05:90:17:b9:86:61:69:ac:2e:66:34:04:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AF:A3:E7:2B:21:87:4A:16:66:9B:C6:B7:83:F4:49:C3:2E:99:D1
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/pK-j5yshh0oWZpvGt4P0ScMumdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:d8:cb:25:f2:11:7f:dd:d3:f5:f5:83:3a:97:de:93:e2:17:
76:8d:0a:6e:d7:31:ad:a3:a1:f0:9c:aa:82:b4:4f:78:e9:11:
c0:46:bd:01:2b:c4:56:67:2d:5b:e2:39:15:6f:30:bc:66:43:
bd:b8:f6:ed:a7:84:cd:a3:51:c3:6a:92:95:25:c8:fa:8c:9f:
e4:94:f3:04:08:40:81:3d:b8:a9:4f:94:fb:69:a1:c3:80:47:
23:37:ad:e0:5d:56:13:2c:16:fb:87:26:55:43:86:6a:15:b7:
57:24:28:1a:ee:92:16:1a:eb:69:df:ec:fa:9e:0b:9c:ea:e7:
13:d6:cc:67:61:21:67:b8:98:83:9a:a9:5e:94:8a:a2:23:75:
7a:d2:36:1a:aa:d4:dc:8e:64:69:43:ce:ff:19:64:5d:b9:c8:
73:cb:54:5e:01:ed:42:2e:a4:e3:c3:c2:a6:a5:68:0a:4c:8d:
41:41:97:1b:98:f8:e1:a3:aa:49:25:d5:5b:3c:c4:d7:17:66:
fd:74:a0:68:07:5f:b3:35:35:92:ef:a9:7e:5b:c9:bb:49:55:
34:e5:70:d2:2f:3e:e4:cd:89:2e:06:67:09:8d:58:7f:8e:ff:
90:89:3a:11:de:69:54:8f:1f:70:34:06:1d:10:e0:0a:d1:73:
ad:9d:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net