Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/PfJvGEuaav1QrKJkIZkHA6XmHus.roa
File: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (raw, json)
Hash identifier: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=
Subject key identifier: 3D:F2:6F:18:4B:9A:6A:FD:50:AC:A2:64:21:99:07:03:A5:E6:1E:EB
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 01942522310D230C24D9A1B19E439740B3C5
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/PfJvGEuaav1QrKJkIZkHA6XmHus.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212236
IP address blocks: 193.162.139.0/24 maxlen: 24
193.238.45.0/24 maxlen: 24
193.238.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:31:0d:23:0c:24:d9:a1:b1:9e:43:97:40:b3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3df26f184b9a6afd50aca26421990703a5e61eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:cc:ef:1d:7e:a9:51:d9:de:ee:f7:09:f8:
be:0e:04:f0:af:d1:ef:04:95:5b:9a:6b:34:0d:a2:
99:10:7e:ab:a6:16:21:3a:81:98:bb:76:eb:7e:34:
bc:ca:75:3d:fc:8d:66:d0:42:86:f9:4d:1f:55:1d:
a5:ea:38:9c:1e:27:ce:51:ce:18:4d:19:9b:56:e4:
2c:6a:3d:17:e2:d7:a6:3d:78:2c:5d:1b:b3:28:47:
f9:bb:42:af:65:57:69:eb:27:c3:34:be:44:c6:b0:
36:e9:44:be:f6:b3:ff:af:d5:67:f7:92:5e:72:a2:
fb:32:b4:23:67:75:3c:57:1b:63:ab:40:21:7b:04:
1c:b4:42:2b:79:23:42:93:28:53:25:a4:a7:12:94:
b4:e2:02:cb:3e:e0:8c:fa:cf:9b:18:cd:90:08:e8:
fd:e8:13:8b:4b:2c:aa:d7:57:2d:5e:db:fd:c4:d6:
d8:de:ae:18:5e:9c:95:7d:41:88:19:4d:12:09:6d:
3c:3a:1a:6f:c7:a3:d4:fa:44:55:07:3e:30:41:6b:
41:47:c1:78:f3:13:65:86:d8:53:e0:e1:ab:3a:11:
a5:44:1a:f0:47:60:64:0d:ea:5c:32:e1:6f:61:da:
71:af:b8:bd:15:5c:7e:26:85:6e:4d:0e:51:8a:2f:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:6F:18:4B:9A:6A:FD:50:AC:A2:64:21:99:07:03:A5:E6:1E:EB
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/PfJvGEuaav1QrKJkIZkHA6XmHus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.139.0/24
193.238.45.0-193.238.47.255
Signature Algorithm: sha256WithRSAEncryption
c4:83:e4:5b:c8:2c:8e:b4:82:38:91:45:81:a2:18:1f:b0:68:
da:55:5a:6e:5b:8b:83:af:82:dd:4c:5a:17:b8:1d:40:29:67:
e7:37:e9:bf:30:ab:88:f2:48:c3:44:23:dc:d8:e2:2f:87:d6:
0e:0c:5c:49:a4:f4:ab:32:98:f9:29:7e:6c:3d:99:9c:f0:5c:
3a:54:9e:00:e2:84:c0:c3:3a:65:bf:6d:53:4d:20:ed:32:27:
20:7a:b0:b8:98:16:89:c7:a9:37:f8:34:5d:07:a1:33:34:1d:
8b:57:60:02:ac:18:25:52:ef:c1:47:1f:98:c6:cf:b0:2f:95:
06:ae:7e:92:1b:d6:8a:00:34:99:46:93:96:e9:d9:b5:b4:c4:
89:ba:05:5c:c0:76:f4:76:d9:f7:70:48:9c:8f:3b:90:e8:68:
c9:af:c7:20:74:e2:b5:c9:ee:90:83:1c:0c:45:50:82:2f:e9:
a3:8f:96:ef:69:21:16:4e:99:8a:97:c0:57:5e:00:df:8a:81:
c7:a8:1f:df:0e:cd:d1:56:23:5e:e8:f9:9e:84:05:b5:62:0e:
11:28:b6:e5:20:b3:b1:3d:94:85:b6:c7:2f:47:c1:f0:9f:ef:
9f:6a:8e:24:06:41:d0:88:c4:9e:dc:f8:00:31:5e:8c:ae:66:
b0:e8:c9:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net