Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/1-zwO4Bnz3Ual-zgnG201JvaWkY0.roa
File: 1-zwO4Bnz3Ual-zgnG201JvaWkY0.roa (raw, json)
Hash identifier: d0O7JzfUI0auiFcqxl2U8Q+1vT7/+BPs1dhy7hNLrrs=
Subject key identifier: FB:3C:0E:E0:19:F3:DD:46:A5:FB:38:27:1B:6D:35:26:F6:96:91:8D
Certificate issuer: /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Certificate serial: 0194258E5A1012FDC6A64AB06C0C1A637324
Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/1-zwO4Bnz3Ual-zgnG201JvaWkY0.roa
Signing time: Thu 02 Jan 2025 05:47:53 +0000
ROA not before: Thu 02 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212445
IP address blocks: 193.162.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:5a:10:12:fd:c6:a6:4a:b0:6c:0c:1a:63:73:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Validity
Not Before: Jan 2 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb3c0ee019f3dd46a5fb38271b6d3526f696918d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:dd:a1:b0:27:14:cf:62:0c:68:8c:70:59:
cb:09:cf:b2:6b:da:96:50:1c:65:2b:62:b1:4b:fd:
62:1f:a7:44:d0:37:53:47:00:71:1c:63:bf:76:7c:
a7:34:56:4c:19:c9:a1:a3:6e:8d:44:41:eb:d2:a9:
46:55:cb:8d:3a:49:73:38:2a:a1:4c:76:5c:1c:ec:
6d:4b:63:85:0d:60:ea:bb:5a:30:b5:91:1d:42:76:
d8:0c:3b:75:b9:a2:93:f7:8e:b1:10:60:95:09:9a:
62:84:e6:70:f7:d8:25:2a:26:98:b0:25:a5:4b:4b:
bd:29:65:92:bb:3a:37:39:73:98:ad:9f:b0:da:54:
a3:c8:11:d5:19:fc:63:f7:ec:b1:c7:ed:b6:18:e8:
e1:16:ea:fa:8d:dd:57:5a:2c:b2:79:73:74:98:50:
ce:0d:6b:2c:e5:d0:50:f6:7b:4d:57:d2:31:0a:33:
a9:fb:b0:33:e1:78:d6:c1:4c:50:2d:8c:1f:eb:42:
97:af:6d:bb:00:03:7d:81:d7:c0:83:a1:b5:16:40:
73:4e:ee:9f:8f:c6:cc:f1:c8:5d:4c:06:7a:62:49:
98:70:cf:76:91:96:57:40:05:6a:72:10:dc:95:0f:
21:38:b1:77:c3:0b:e0:aa:58:97:aa:ea:cb:b3:b9:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:0E:E0:19:F3:DD:46:A5:FB:38:27:1B:6D:35:26:F6:96:91:8D
X509v3 Authority Key Identifier:
keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/1-zwO4Bnz3Ual-zgnG201JvaWkY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.31.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8c:ec:3b:b2:05:ba:b0:40:99:0d:15:be:49:ff:e4:9f:d0:
b5:36:c4:f7:87:ce:59:8f:a5:fd:f1:f3:4a:c2:6c:3c:c4:80:
18:e3:47:7e:0e:9f:a5:09:a8:2e:df:7f:6a:06:2d:dd:0e:b0:
46:8a:33:e2:3b:31:cd:e9:1d:b5:a1:65:ba:ea:78:54:78:73:
21:82:01:37:b5:c3:c4:2f:4c:d6:29:9d:a8:15:da:1f:7f:79:
2c:48:29:d1:0b:5c:ac:28:5f:82:36:c9:f2:38:ac:8c:34:24:
43:1b:7a:de:45:47:dd:b9:dc:b8:51:d8:e2:9d:30:a4:a2:2c:
e9:fb:12:5b:47:df:d5:08:cc:5d:2b:61:f1:42:a5:ff:c9:ed:
e0:14:c8:ce:3e:36:94:a5:30:c9:55:bc:9a:8c:09:aa:92:d2:
55:58:5f:1d:04:26:10:2c:5e:91:16:b4:c3:5d:d5:9b:00:37:
59:49:73:83:5b:dc:a3:57:ee:d6:40:9a:3a:c5:bc:a3:96:be:
8e:95:3c:6d:b1:f3:e5:a9:39:5f:99:1c:4d:d7:81:e7:5f:f7:
bb:fe:ce:90:a7:2e:b0:e9:2c:4e:b1:80:05:cb:9a:81:b2:85:
0b:89:7f:c7:3d:6c:25:7a:7f:5c:98:20:7b:25:06:a8:1b:35:
ff:4a:12:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net