Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/shquK-USeN_EkxoNGdS2ZgkNKE0.roa
File: shquK-USeN_EkxoNGdS2ZgkNKE0.roa (raw, json)
Hash identifier: BzVyA8GUWdfG25Lls/AIfXgaXvL4LtidvyHSI6ihPwo=
Subject key identifier: B2:1A:AE:2B:E5:12:78:DF:C4:93:1A:0D:19:D4:B6:66:09:0D:28:4D
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 019426D9629108B0470BC2EFB1A77417885F
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/shquK-USeN_EkxoNGdS2ZgkNKE0.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21050
IP address blocks: 94.187.192.0/21 maxlen: 24
94.187.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:62:91:08:b0:47:0b:c2:ef:b1:a7:74:17:88:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b21aae2be51278dfc4931a0d19d4b666090d284d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:4f:cc:46:46:42:d8:8e:d7:d4:d8:c4:ba:
00:2b:06:01:c0:7f:23:52:bc:75:c4:b0:41:64:37:
18:64:df:58:f1:6d:24:43:56:f0:8d:ed:eb:76:e0:
5d:66:1c:b7:79:84:0d:a8:e6:b5:06:a5:5e:d7:05:
b2:89:92:11:e7:cb:4b:30:47:98:d9:ae:5b:6b:55:
8d:09:04:d8:57:1b:18:9b:c6:fa:e7:41:4e:84:4b:
1f:77:af:0f:87:e8:57:0c:4e:64:22:4b:19:24:3d:
6f:b6:5c:02:df:ba:3f:e3:80:17:50:c7:c3:fb:31:
f7:90:23:01:1b:c7:29:be:c9:61:53:69:2f:ab:0d:
e8:13:8f:76:e3:18:ea:6c:67:c2:22:f7:f4:f5:c4:
89:76:4f:36:20:99:3c:ae:9d:bd:ec:e6:4d:80:75:
6f:68:5e:9b:b3:dc:d1:f6:85:01:fb:df:91:59:a9:
80:a6:c2:d8:6c:f6:32:c6:6a:40:f9:5c:01:0c:7f:
38:58:82:ea:c2:51:48:df:c9:26:9b:5b:55:f9:19:
50:d9:42:3f:13:a4:a5:74:99:55:ee:18:96:87:16:
9b:3a:61:f6:93:4d:ac:a7:56:48:c5:e1:e2:59:05:
75:3c:96:37:19:4c:c4:ad:cf:ef:b0:90:5a:91:55:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1A:AE:2B:E5:12:78:DF:C4:93:1A:0D:19:D4:B6:66:09:0D:28:4D
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/shquK-USeN_EkxoNGdS2ZgkNKE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.187.192.0-94.187.203.255
Signature Algorithm: sha256WithRSAEncryption
84:95:ef:0c:35:1a:c9:ef:f1:67:69:57:37:f0:6b:87:b4:94:
fb:6b:19:4d:a4:48:f7:ef:80:72:bc:43:9e:8e:fe:bd:cd:33:
0f:1d:f7:bf:6f:5d:5a:9f:57:30:cc:cd:b7:e2:e5:a6:1f:6a:
64:a0:93:b0:68:c4:d9:e8:fc:f7:64:3a:09:37:ab:bf:87:51:
df:da:b4:e6:df:7f:3a:32:90:8c:d5:cc:2f:a1:b9:15:45:f2:
ed:90:5d:a6:d0:ba:8d:b5:6d:d8:ae:9e:30:8b:fd:44:e6:bc:
47:e1:28:08:41:b1:41:c7:33:a0:18:3d:19:73:9e:a4:23:38:
52:f4:c4:a1:68:14:c6:e5:9e:59:89:ea:c8:d8:c1:bd:c0:81:
4f:6e:de:2e:ef:05:05:ff:3c:01:86:92:64:5e:83:0c:88:96:
2c:d8:e9:54:fc:06:9f:c5:38:cd:17:b3:1d:c7:0c:40:bc:ff:
fe:a7:39:1c:56:cc:91:93:82:e2:12:35:2c:45:9c:74:62:4e:
6b:4c:8d:b3:94:85:7b:70:be:5e:d2:af:d0:cd:44:d3:aa:55:
2a:bb:a4:f3:fb:6e:17:5c:a2:aa:e7:33:f2:06:ae:6f:5f:71:
04:49:42:fb:ed:a4:1d:50:88:90:d4:8d:27:47:11:b8:ea:4d:
be:0c:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net