Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/466YAs6d9cdjAoG1VqV9G_HtvQg.roa
File: 466YAs6d9cdjAoG1VqV9G_HtvQg.roa (raw, json)
Hash identifier: wVtqE+qIa2JsmDebXlhf45xn2AahdoB1no9v6MIhuuw=
Subject key identifier: E3:AE:98:02:CE:9D:F5:C7:63:02:81:B5:56:A5:7D:1B:F1:ED:BD:08
Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial: 019420D5C877EA98B24BE762DBCB4A07FF30
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/466YAs6d9cdjAoG1VqV9G_HtvQg.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33813
IP address blocks: 193.242.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c8:77:ea:98:b2:4b:e7:62:db:cb:4a:07:ff:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ae9802ce9df5c7630281b556a57d1bf1edbd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:e6:6b:36:f3:41:60:23:49:91:96:86:af:
0a:71:71:c4:33:72:bb:b8:82:b6:f2:16:c5:44:14:
11:04:cf:60:e1:bf:8e:81:7c:0a:02:5d:eb:7d:4e:
d0:66:a3:03:1a:0a:14:12:51:c9:04:88:2e:fc:8b:
71:5d:f1:4e:b1:f6:80:9b:b7:7c:ef:f9:fc:be:8a:
73:2f:bd:f1:92:0d:37:9c:b4:d1:14:1c:c7:2f:e3:
d1:90:f1:a6:10:3d:08:cd:fd:79:29:8e:84:f8:13:
d4:cf:03:ba:3a:3c:a9:53:22:25:5b:62:22:87:12:
fe:b3:f8:52:fd:47:da:ef:73:f2:5e:1d:09:5e:79:
85:a6:30:4d:a3:5a:fe:8a:28:8c:40:3c:0b:86:22:
24:95:e6:40:81:6e:55:19:1b:e1:d0:73:7d:8f:73:
c4:78:c6:27:ef:2b:a6:2e:2b:f4:a9:95:33:7d:10:
53:4b:c2:4f:6b:b2:76:8f:f7:07:a4:ea:19:a3:25:
be:6e:6e:60:13:60:3b:9f:f0:f8:87:5c:26:ad:fb:
e2:d2:bb:ab:5c:47:7a:0d:65:35:94:20:6b:85:60:
53:92:83:07:2f:f1:f7:cd:01:35:dd:bf:dd:0f:33:
b7:b0:6c:7d:18:9a:05:1d:ed:08:56:28:09:91:9a:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AE:98:02:CE:9D:F5:C7:63:02:81:B5:56:A5:7D:1B:F1:ED:BD:08
X509v3 Authority Key Identifier:
keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/466YAs6d9cdjAoG1VqV9G_HtvQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d3:5c:cf:8f:c3:d0:4d:34:d9:d0:9e:cf:73:4b:64:f4:30:
1c:f4:d7:16:2c:18:4d:ce:8c:f1:2b:5f:9a:67:f3:1a:35:a1:
66:cf:75:a6:b4:21:6b:31:ab:e4:66:80:45:e0:ad:26:81:bb:
2f:d8:84:4a:47:8e:fe:3f:dc:39:15:51:e6:13:49:35:37:c2:
2f:83:a3:1d:c6:44:f1:2e:e1:5f:4c:6a:f6:ac:7c:6b:cd:b2:
11:79:d9:fc:bf:f9:c2:4a:93:64:44:19:a7:66:92:9a:0c:1f:
72:35:fd:f6:91:a1:27:9d:7b:e2:dc:a4:c5:80:5c:61:03:9e:
45:f9:e3:c1:a0:42:3f:57:a9:f6:3a:56:03:dd:9f:54:de:b3:
c7:78:4b:4a:c1:34:77:8e:68:46:80:da:ac:97:69:fa:98:be:
4b:61:3f:a4:a0:a0:64:5d:bc:b4:3e:e4:79:12:77:20:a5:71:
25:d7:88:24:17:53:f0:d5:d2:ad:f2:f9:c6:5c:a8:95:92:f0:
15:b6:32:68:0e:f7:23:62:2a:f1:6f:22:5c:4d:6b:27:fd:80:
fb:28:7f:96:a9:58:1e:b0:bc:2a:07:3e:8c:4b:b3:59:b9:c9:
8a:6a:85:01:7b:bf:b0:86:25:48:4a:31:97:c9:a9:67:9d:78:
46:fb:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net