Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa
File: t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa (raw, json)
Hash identifier: c5cNtbv2n0bwtPtYnHvGMxhfp9rjmRcTS2FRbov2ZW8=
Subject key identifier: B7:42:AF:D0:C6:36:DA:41:1D:EF:21:24:BE:EC:CA:54:FE:8D:C0:36
Certificate issuer: /CN=5725add2bff3e668ae18554beebf31a23a69dda5
Certificate serial: 0194221FCB7A4D2BBE84EE284F89772402C1
Authority key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12823
IP address blocks: 193.53.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cb:7a:4d:2b:be:84:ee:28:4f:89:77:24:02:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5725add2bff3e668ae18554beebf31a23a69dda5
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b742afd0c636da411def2124beecca54fe8dc036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:99:c1:73:17:42:17:96:f7:73:a7:16:5b:
58:75:c6:85:2d:ed:9c:02:3d:2f:98:ab:0d:c3:12:
46:f1:d1:95:a3:b2:d4:7c:19:ba:42:49:f6:34:76:
29:c2:21:bb:83:2e:9b:68:b7:fb:6b:7b:c3:c5:a1:
e9:50:1f:89:58:69:95:42:47:1f:15:a8:9a:c2:30:
cc:7b:77:a3:b5:1f:e6:ce:58:e1:d4:1c:cf:83:40:
7f:f3:ea:b9:5e:08:35:43:0a:0c:b5:3d:94:79:e8:
b1:f5:f2:22:75:b2:5a:2e:1e:4f:2a:17:a1:34:6e:
9e:66:66:ec:81:ac:2d:1f:0c:4c:54:cb:0c:34:18:
33:19:4d:40:71:66:9e:3a:1e:35:5a:e7:d4:31:27:
6b:58:63:32:4f:d1:07:ae:77:2a:99:83:ee:43:12:
3b:b1:ad:6a:7c:ff:31:d1:6c:e7:1b:dd:06:61:99:
34:a3:26:84:54:c6:d8:d8:9a:39:23:f9:f6:c4:16:
ad:43:38:aa:b0:e8:4f:ea:ae:34:6a:25:76:4b:45:
52:31:d5:e4:f2:17:4f:e5:62:88:73:e7:5f:0f:8c:
68:48:65:c4:fe:53:c7:a6:f4:e2:e0:f3:88:f0:ba:
63:b8:1e:8d:01:5b:b9:4a:01:6c:cb:ce:a9:12:a7:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:42:AF:D0:C6:36:DA:41:1D:EF:21:24:BE:EC:CA:54:FE:8D:C0:36
X509v3 Authority Key Identifier:
keyid:57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.106.0/24
Signature Algorithm: sha256WithRSAEncryption
58:68:db:07:76:0a:f2:e9:9c:73:77:e5:de:17:f2:3b:d4:ff:
65:bf:24:68:66:16:a7:c9:c1:6d:34:3f:6f:ac:c7:1d:b2:58:
d7:39:af:7b:70:6d:a9:0e:e7:d2:c5:9f:64:e7:c0:5e:64:22:
47:e0:59:94:17:d6:8b:e7:6b:ba:e0:86:32:02:90:c9:fa:a6:
e1:b4:53:02:2c:5d:cf:eb:c4:6f:bf:f6:1f:52:83:c1:c7:a3:
75:06:9a:c0:2a:c2:0d:b5:fd:fc:af:b3:ec:52:6b:ba:b3:80:
b7:6a:80:bc:60:d4:d7:d7:bc:e4:a7:01:52:9b:45:c0:ac:fe:
6b:06:5c:59:c9:67:af:f8:2e:e6:f5:ed:37:c0:67:bf:3f:c0:
17:51:1b:45:25:40:fb:70:5d:a7:ae:97:89:be:d8:4a:1d:93:
e7:6c:05:0e:49:12:3e:92:d6:b6:7e:16:07:2b:81:71:0c:1c:
8b:ee:7d:c0:e3:5e:8d:4e:81:2b:ca:75:54:28:b4:b5:0e:92:
7d:95:58:b2:db:19:4c:47:3f:3d:87:0c:a9:58:27:a3:6f:7d:
f7:5a:8b:6f:61:11:92:9e:6f:3e:31:08:94:39:60:8b:3c:78:
78:61:ed:7e:ae:92:84:73:b1:72:ba:56:66:04:e6:55:58:7b:
c0:5c:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net