Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/7AICHMFq1kSjCOJXzQDO4zRvMc8.roa
File: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (raw, json)
Hash identifier: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=
Subject key identifier: EC:02:02:1C:C1:6A:D6:44:A3:08:E2:57:CD:00:CE:E3:34:6F:31:CF
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 0194244485BA408D4009249B72AAD2C9D218
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/7AICHMFq1kSjCOJXzQDO4zRvMc8.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202666
IP address blocks: 89.40.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:85:ba:40:8d:40:09:24:9b:72:aa:d2:c9:d2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec02021cc16ad644a308e257cd00cee3346f31cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:c8:e1:d5:28:bd:fa:2f:4a:23:e1:8e:d3:
a8:57:31:f8:d0:c7:b7:53:c0:6a:78:b5:ac:99:f2:
9e:a0:fa:d2:05:29:2e:ee:65:36:6d:c1:5e:d3:12:
74:96:9b:5f:11:02:c3:1c:c5:d3:c5:12:43:34:16:
fa:16:0e:f0:22:3e:d1:ec:60:19:ec:77:00:4a:bb:
14:e2:a4:7d:1a:ae:ff:87:d7:17:86:3f:bb:da:8f:
4a:cd:db:10:f4:ff:4f:6a:a6:ab:42:69:ce:b1:1d:
53:fb:80:35:a4:65:7f:34:6c:89:d1:41:99:c0:aa:
b0:8a:de:2f:2c:16:6f:d4:b5:17:8d:7f:38:26:f4:
f3:70:e0:a4:96:6c:9a:a2:46:d8:e1:ee:9a:34:ce:
f6:ec:59:54:45:0f:df:bf:c0:11:70:45:42:fe:df:
7e:eb:f0:e0:d0:14:ca:a4:74:35:19:93:1e:d0:aa:
36:06:c0:5d:69:19:d3:44:c2:3e:8c:1d:7f:17:79:
4f:30:70:14:86:03:69:5c:62:d1:8e:54:93:ef:b7:
b3:21:d8:d4:39:c4:2c:5f:b8:db:42:9c:bd:3a:d9:
b9:1a:51:13:94:ef:54:e5:1d:7f:a2:43:78:4f:ba:
8a:49:7f:9b:11:c2:45:0c:c5:37:8b:c9:86:9b:53:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:02:02:1C:C1:6A:D6:44:A3:08:E2:57:CD:00:CE:E3:34:6F:31:CF
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/7AICHMFq1kSjCOJXzQDO4zRvMc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.168.0/24
Signature Algorithm: sha256WithRSAEncryption
63:47:d0:80:69:06:9b:5f:bd:96:7e:31:23:f3:d3:3a:67:01:
4a:67:7b:96:9a:23:33:b5:78:ed:b7:d8:9e:9d:1b:bd:79:5a:
61:4e:d5:fb:de:c1:14:be:8b:c4:1c:c2:96:44:b1:63:01:c7:
42:01:a3:b7:78:9a:7b:6e:ea:0e:eb:5c:e2:5d:ce:35:59:e0:
03:50:54:82:6e:74:31:fc:88:8f:bf:52:38:d9:bf:6b:dd:89:
9a:ac:d8:8b:36:3b:f1:ed:2d:bf:54:c7:99:66:b3:0d:f6:2e:
4d:a4:ae:4a:65:20:25:8e:a5:24:e4:54:59:02:e0:d5:79:6d:
2e:54:58:87:25:c8:79:2b:de:7b:b8:84:9e:26:de:5a:d3:81:
05:cc:87:6e:18:20:33:3e:bd:3f:90:2e:23:94:6c:04:aa:18:
97:94:93:f3:87:19:9b:ae:31:3d:b7:fd:b1:d8:e4:68:ff:c3:
cd:bf:0a:c9:3d:d4:e7:ea:62:ff:78:b8:5e:c7:40:62:c9:00:
f7:40:21:56:59:69:c0:dc:1e:55:97:70:5b:7d:10:62:33:52:
e3:ec:07:bd:2c:9c:08:b6:70:2a:9c:6b:12:73:53:65:90:7e:
5f:7e:99:4f:47:ba:ef:c0:e2:b6:7b:d7:dc:1b:bb:a1:a8:01:
7b:fa:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net