Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/GSrzoMsqdrffXvz8XfRbb06cdoU.roa
File: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (raw, json)
Hash identifier: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=
Subject key identifier: 19:2A:F3:A0:CB:2A:76:B7:DF:5E:FC:FC:5D:F4:5B:6F:4E:9C:76:85
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 01942825492636EF5C5AE8215E3E6079A81B
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/GSrzoMsqdrffXvz8XfRbb06cdoU.roa
Signing time: Thu 02 Jan 2025 17:51:59 +0000
ROA not before: Thu 02 Jan 2025 17:51:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35007
IP address blocks: 93.105.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:49:26:36:ef:5c:5a:e8:21:5e:3e:60:79:a8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 17:51:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=192af3a0cb2a76b7df5efcfc5df45b6f4e9c7685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:c6:dd:71:ab:63:a0:2b:8c:d4:63:35:a5:
f8:44:30:4c:52:8a:38:6e:c2:bb:56:a2:c8:4b:44:
4e:f5:8c:1a:aa:00:81:a7:33:63:b9:ef:bc:a8:e8:
03:10:a8:3a:de:a3:b6:c7:d1:31:e1:90:85:59:ec:
3a:ff:10:f3:b7:33:ec:80:d1:cb:55:cd:58:72:89:
f6:8d:ea:b9:ca:82:2a:1f:b3:29:3e:02:73:f3:f5:
d0:ff:56:5d:a7:ee:c6:4a:ab:d8:c3:c9:46:b3:ca:
22:5a:3c:ff:b6:d9:b1:93:0c:9a:0b:02:d2:b4:20:
cd:a8:d4:ff:f9:fa:35:2d:8e:86:f3:88:14:30:e1:
51:8e:68:ee:b1:31:b0:aa:d3:7b:ca:28:6d:fe:5c:
32:5e:f9:62:aa:7a:5c:8b:81:11:67:e6:e4:66:43:
4b:a0:c8:65:77:e5:dd:ad:80:d9:8f:f4:41:4d:12:
ac:89:fe:09:fa:ee:23:f1:1d:1f:0c:94:ff:44:b3:
17:20:d7:21:34:ca:f3:a1:1c:72:60:b0:43:8e:5c:
e9:f3:0f:51:95:d9:07:92:47:21:24:2b:e2:27:fc:
ee:01:91:40:47:6a:06:0b:03:9a:6a:c6:97:43:b9:
02:68:a5:02:db:63:d0:25:28:53:4f:4e:00:aa:d0:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:F3:A0:CB:2A:76:B7:DF:5E:FC:FC:5D:F4:5B:6F:4E:9C:76:85
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/GSrzoMsqdrffXvz8XfRbb06cdoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:fc:00:2b:cf:39:35:30:6e:25:77:5b:aa:85:1e:62:4a:49:
16:4a:67:11:bc:97:35:b1:77:a8:c9:5e:78:46:a3:a6:0f:c9:
75:88:27:8f:80:2a:2f:87:f5:9b:46:b7:92:b9:d2:fe:63:e3:
aa:e7:d6:d5:96:59:f0:ca:e1:4c:87:93:37:e6:76:bf:56:d6:
67:d3:ee:a7:58:0d:5f:cd:ec:62:fb:37:4c:29:b0:65:93:d5:
0c:00:c5:eb:38:41:7b:da:00:fe:3e:1e:8b:0c:c7:e4:9b:f1:
7c:d4:f1:52:98:73:06:66:16:92:24:d8:9d:44:43:d8:d5:52:
3f:ef:e4:16:71:58:fa:6d:dc:30:5e:e5:ab:70:ea:4a:3d:ca:
41:cb:f0:e4:db:ce:de:fa:ed:2e:b6:19:6f:52:43:aa:c5:d3:
29:a7:e3:07:94:76:40:8a:f5:e3:ef:8b:30:6f:d5:27:ea:dd:
f6:a7:43:e4:35:d9:62:b4:e9:07:ea:c0:34:34:35:2c:58:7e:
37:61:cc:af:21:6d:41:bb:16:c1:23:72:c3:d9:21:ca:8f:5c:
28:a3:a3:07:21:d9:1c:30:71:3f:16:6d:4c:4d:fa:17:8f:5b:
84:b5:72:eb:d2:5e:29:fa:ec:d4:6e:f1:29:cb:94:5b:5e:ee:
fc:25:77:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net