Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/35NCpv0Oz6uQPI44W6WG3M5yYs4.roa
File: 35NCpv0Oz6uQPI44W6WG3M5yYs4.roa (raw, json)
Hash identifier: JBTWGmE2iSKylKwI1WUPUhWSA2P7T3aiR9SueNbm1BQ=
Subject key identifier: DF:93:42:A6:FD:0E:CF:AB:90:3C:8E:38:5B:A5:86:DC:CE:72:62:CE
Certificate issuer: /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial: 0194252206802114C41C4AB9195025736FDE
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/35NCpv0Oz6uQPI44W6WG3M5yYs4.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34950
IP address blocks: 193.242.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:06:80:21:14:c4:1c:4a:b9:19:50:25:73:6f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df9342a6fd0ecfab903c8e385ba586dcce7262ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:c0:f9:1f:74:26:4f:de:a1:57:ce:2b:a5:
98:ce:3e:0d:cd:33:25:11:19:57:fe:a9:f9:01:d7:
e5:df:95:1b:b6:c4:df:2d:3c:34:09:ce:a2:70:a7:
4a:ce:d9:58:a8:a6:27:26:db:5e:da:3e:bb:1e:12:
f6:8d:cf:4c:00:75:83:03:25:2d:ef:34:48:40:bc:
b1:38:b8:8a:9e:0d:35:f0:f4:0c:09:26:02:82:4a:
02:ce:4e:a1:5e:e3:92:ed:53:53:62:49:c6:17:78:
35:eb:bf:60:bd:35:6d:d0:cd:d9:d1:f3:93:07:97:
a8:15:27:2d:75:4d:85:f8:e0:01:ed:27:94:4f:db:
64:71:ac:ef:e3:4f:c0:c5:f0:7d:df:36:91:92:f6:
38:fa:89:bb:61:f6:d4:c9:d0:1b:7b:ba:5c:c4:9f:
49:20:56:18:05:67:c3:e9:e1:27:77:42:be:ca:d3:
f3:b9:de:a5:1a:e6:85:0f:52:9a:6a:5f:a2:90:e7:
34:7d:46:2b:00:76:c3:3a:e8:e7:7e:87:36:8b:9b:
44:3e:6f:93:fd:5f:c0:1c:f4:ec:26:03:98:6f:cb:
cf:54:80:42:38:32:8d:c7:c3:cf:9a:74:0d:0c:58:
69:19:b5:80:81:84:f2:45:01:ff:5b:7b:37:7e:d2:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:93:42:A6:FD:0E:CF:AB:90:3C:8E:38:5B:A5:86:DC:CE:72:62:CE
X509v3 Authority Key Identifier:
keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/35NCpv0Oz6uQPI44W6WG3M5yYs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.103.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2e:40:52:31:38:22:8d:ec:d1:60:ef:38:1c:c8:9f:4c:de:
40:0e:75:37:f9:4f:57:49:6c:66:60:61:a4:17:07:a3:1e:69:
ad:99:f3:c3:5b:94:0e:db:7a:5c:bb:f0:21:4b:a7:07:7b:d6:
ad:54:cf:23:30:ca:14:80:6a:0b:6e:b3:59:32:65:3b:e6:d4:
01:61:35:c6:fb:21:0f:18:5a:81:b1:24:fe:57:e1:51:36:51:
5e:7b:98:1c:46:5e:7d:23:ff:61:92:61:54:d2:73:21:c8:59:
65:50:77:fd:2f:02:c7:39:5f:d1:e7:f1:7b:59:58:b1:fa:24:
83:0a:7d:77:2e:77:2d:46:68:2f:61:b6:ca:02:b5:35:1b:35:
e0:7a:25:b2:de:d5:3c:0b:84:b4:e4:c3:65:f5:db:3b:9f:70:
9f:35:04:2a:aa:95:aa:fd:76:6e:22:57:30:fc:5f:7b:88:76:
04:88:39:b5:76:08:9d:08:0c:10:98:48:64:b6:34:9d:01:84:
55:af:5e:cb:03:7a:84:9d:01:35:5e:e6:09:bd:dc:a3:4f:43:
44:8f:b1:03:c8:9f:7a:75:9b:0f:b3:40:b7:01:b1:38:80:a2:
48:4c:fc:1c:ef:88:92:02:b1:23:27:e3:29:91:2a:41:28:60:
60:2c:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net