Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa
File: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (raw, json)
Hash identifier: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=
Subject key identifier: D9:ED:0A:75:DD:FC:CA:4F:8E:4A:BC:D7:6D:EC:1F:F1:FD:2E:EC:7B
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 019425FD0E04323BF8BFCFFF7B8D895AD3A1
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa
Signing time: Thu 02 Jan 2025 07:48:48 +0000
ROA not before: Thu 02 Jan 2025 07:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48173
IP address blocks: 193.101.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:0e:04:32:3b:f8:bf:cf:ff:7b:8d:89:5a:d3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: Jan 2 07:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9ed0a75ddfcca4f8e4abcd76dec1ff1fd2eec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:3d:40:71:3c:c3:2e:20:ca:4f:d4:bd:2d:
60:c6:be:a5:8d:e3:23:c9:d1:20:88:f6:4a:a3:f3:
f8:82:1d:2c:7c:ed:28:61:6f:86:80:fd:bb:79:c8:
7c:ef:41:24:e0:a3:78:5b:e5:63:53:57:5a:99:82:
b8:d4:90:ba:f3:aa:5c:cd:d5:24:75:1a:bb:93:fd:
2a:60:41:63:2d:a8:b5:fe:83:8e:5a:8f:03:14:ae:
a0:a5:48:3a:c2:f2:ee:19:68:2b:c1:bd:74:b1:e2:
4f:72:ca:0a:09:b4:3c:0f:9d:08:ca:10:7f:15:d5:
94:e5:f7:1c:90:d0:75:b8:36:7d:c1:cf:5e:48:04:
98:c9:6a:4d:ca:25:f3:70:b8:3f:1d:24:f5:57:b7:
52:7e:7d:61:41:86:88:bc:b7:f4:03:27:71:9f:ad:
77:17:cd:71:63:e0:06:6b:c1:fa:6b:90:cd:57:06:
d8:10:2b:a7:8d:f1:8e:7e:35:88:65:3e:85:f9:d4:
b7:81:bc:18:5a:87:6c:10:49:66:98:d2:e2:48:79:
03:cf:3d:bc:66:c5:9b:21:49:70:ce:a8:ac:96:3f:
b9:7d:20:97:30:cb:de:ec:fc:fc:22:5a:9b:67:49:
ca:b0:de:1f:22:8c:aa:3f:ac:2d:f1:78:5e:8e:f6:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:0A:75:DD:FC:CA:4F:8E:4A:BC:D7:6D:EC:1F:F1:FD:2E:EC:7B
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.179.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b5:b8:d1:7b:2d:a0:ae:60:66:85:46:a2:91:0f:b2:4a:73:
b8:e8:8f:77:8e:c1:77:6f:0d:01:9d:bd:88:1c:75:20:aa:5a:
9f:31:92:6d:67:77:0f:2e:ca:00:61:a3:a8:47:fb:1d:1a:10:
f2:aa:f6:d5:ed:55:ce:c6:3c:46:ef:06:f5:7e:cc:6f:2d:ec:
bc:51:e7:d5:80:05:b7:07:24:a5:20:65:f1:04:26:62:ab:32:
31:04:55:e9:49:1f:c1:f5:21:49:00:26:b6:db:6f:5c:19:83:
08:7f:ed:5f:05:67:bd:57:6e:65:1d:81:7b:3c:e0:b8:54:92:
42:5e:2c:db:48:9d:a4:ed:ee:48:ce:33:0e:ee:09:1d:06:70:
f1:37:83:20:6b:72:b0:40:19:f7:c6:a4:67:02:88:4b:13:7b:
8d:5c:df:e3:8c:aa:e4:c6:6a:5b:70:8d:33:5e:14:ee:f4:7e:
02:cf:84:5d:82:fd:43:d0:90:54:b3:e8:36:fd:82:8c:17:7b:
a8:09:3e:ad:e4:f1:42:d1:48:81:57:c6:b6:13:e8:05:a2:1c:
67:51:25:ca:07:13:d5:24:61:d3:bc:43:c1:2d:fe:38:87:13:
e3:9e:26:df:93:de:c5:ad:66:9e:de:1a:0e:ca:2e:64:19:4d:
d6:8d:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net