Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa
File: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (raw, json)
Hash identifier: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=
Subject key identifier: 11:9C:2D:C3:A3:EA:FC:6D:6A:71:41:DB:98:8E:FE:81:79:EE:F4:97
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 019422FC4E183204C883B6162F2035E75A59
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15743
IP address blocks: 192.166.167.0/24 maxlen: 24
192.166.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4e:18:32:04:c8:83:b6:16:2f:20:35:e7:5a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=119c2dc3a3eafc6d6a7141db988efe8179eef497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:f7:04:71:95:65:9b:16:88:c1:40:b1:1c:
61:91:31:2c:83:f2:cd:89:44:3e:41:75:d8:e8:c2:
f4:f5:7a:82:4d:e2:ec:9f:61:c1:f0:12:ab:da:69:
cd:4f:e7:45:76:44:3d:ee:20:d0:53:b4:9b:fd:7e:
a5:4b:c4:86:52:63:29:9b:43:75:7e:61:90:59:a3:
ad:98:47:c6:be:f3:f3:20:47:f0:a7:d1:f5:c8:55:
60:d9:d5:7b:98:54:41:d8:84:d5:02:74:3c:2a:ed:
b2:b0:34:e7:90:b9:f7:cc:3a:9b:5f:47:98:a5:dc:
2f:f2:1c:7b:33:92:0a:d4:3b:e8:14:53:b8:af:51:
66:a6:c6:ad:85:21:7e:97:77:b9:49:dc:a3:58:0d:
e6:78:c7:4d:36:c9:13:ec:bb:bd:1b:7c:0c:e6:aa:
33:57:01:df:5f:df:5d:b2:01:16:ee:7b:c4:62:7a:
f2:22:10:0e:71:95:7f:4d:01:87:75:d9:ec:76:39:
f8:58:24:16:7d:a4:04:06:35:04:2f:1c:92:41:04:
dd:a0:c1:1d:c6:f8:c3:f8:6f:bb:e2:fb:ee:c2:ce:
c8:af:57:3c:e9:f3:e5:91:aa:63:f7:4f:11:83:eb:
15:9b:96:fe:27:2e:28:a5:3c:e4:f8:3c:8a:21:6e:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:2D:C3:A3:EA:FC:6D:6A:71:41:DB:98:8E:FE:81:79:EE:F4:97
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.167.0/24
192.166.176.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:66:6e:7b:8a:27:70:9a:76:6c:dd:5f:70:ff:95:87:bb:f9:
4a:db:92:8d:3b:bc:77:7e:9e:0f:50:0f:5b:e4:1c:17:c5:77:
dc:65:24:a2:74:93:aa:04:c5:67:b9:27:4c:29:50:fb:75:f8:
14:58:79:5c:b2:6b:13:5c:64:e6:fe:98:f6:aa:66:3f:84:6e:
1b:e6:61:47:a7:0e:27:79:8b:bc:86:b8:2b:02:f6:51:51:29:
a2:d5:d3:c8:53:60:ad:46:55:2d:e7:9b:b9:6e:e0:01:22:f9:
a8:c3:56:2c:45:e4:dd:39:d3:95:66:3f:1b:ff:5e:05:fc:58:
93:a0:a9:76:0d:00:a7:b7:15:d6:cc:18:69:91:d1:dc:aa:eb:
fd:dc:36:21:13:7c:47:48:6e:35:3b:89:b9:af:c8:b5:7d:13:
11:5a:5e:ea:f5:47:6d:35:32:39:5d:03:6e:cf:ea:1c:1e:a0:
98:ed:4c:62:7c:23:34:84:72:a0:54:61:28:15:f0:9e:44:84:
77:17:93:c0:1b:7f:6d:01:3f:36:01:0e:d7:7b:b8:93:4b:3c:
08:6f:df:12:4c:59:ec:33:fc:45:d3:ca:80:7a:cc:56:93:f1:
a9:9f:b8:18:b4:82:62:48:7e:bf:9b:5f:79:be:bf:a5:fb:6b:
54:d7:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net