Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa
File: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (raw, json)
Hash identifier: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=
Subject key identifier: F0:F9:B9:E3:69:B1:9A:D3:71:EF:D2:29:C3:C6:89:DC:C5:14:52:5C
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 0194258F1174868D330A510CA220E4FB2E4E
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61320
IP address blocks: 192.109.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:11:74:86:8d:33:0a:51:0c:a2:20:e4:fb:2e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0f9b9e369b19ad371efd229c3c689dcc514525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:09:c7:5d:22:dc:3a:dd:38:21:5f:d9:c6:
7a:ce:ea:65:c7:b2:6f:77:1e:30:a8:dd:5b:b0:b8:
52:92:bc:4d:f6:86:94:72:18:4b:02:95:8c:94:b0:
ae:48:02:82:58:e5:cb:8f:78:48:b7:13:a7:b1:62:
c3:72:c9:e7:1d:b2:e4:6a:37:78:6c:ba:a0:1c:49:
0b:c7:98:73:d1:3a:8f:85:95:f8:90:e8:13:bb:6e:
97:0d:98:1c:63:3f:9f:3a:46:7f:f4:c6:bc:7d:53:
33:57:6c:d4:a9:4c:28:df:91:41:59:f0:51:46:79:
be:47:50:27:2f:f1:4c:aa:e0:b0:cc:bf:9d:61:e4:
d1:b5:ff:a4:82:34:08:4a:4f:5f:c7:56:83:74:38:
e1:fb:13:75:a6:24:ca:6a:48:76:f1:fa:80:ad:02:
3a:58:40:11:11:ca:76:b0:54:3a:c6:60:ff:83:91:
1d:f5:4a:c3:eb:2b:77:39:ba:11:d8:fd:dd:26:12:
49:d2:69:de:61:11:a0:93:75:d4:8a:37:d8:58:eb:
40:66:0a:ac:d4:14:dd:b8:b4:59:ab:59:bf:d0:68:
10:f4:58:0f:43:26:43:5c:d2:77:93:3f:93:a4:5f:
ed:84:7f:11:0d:a5:46:c5:20:af:ae:a3:b8:d0:b0:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F9:B9:E3:69:B1:9A:D3:71:EF:D2:29:C3:C6:89:DC:C5:14:52:5C
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.47.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5a:41:10:d1:75:0a:52:6b:46:76:82:f2:72:88:18:15:84:
f6:ed:06:98:8f:e9:c1:7c:23:05:4f:22:31:8b:f4:4f:21:09:
bc:78:63:f4:74:86:cc:ab:58:84:e1:6a:5c:f1:6d:fa:f3:d7:
fc:7e:fa:4a:2c:03:5a:2f:f2:35:fc:c2:d9:b9:f6:b2:ff:a1:
e5:22:10:00:5e:04:32:1b:e2:70:b9:a3:6e:b9:a2:1f:31:fa:
7f:88:6b:5d:3c:76:af:a5:09:53:ff:59:c2:85:6f:2a:7e:ac:
60:f1:04:0c:02:18:28:9a:c0:2c:55:bb:c0:e0:7d:e9:40:aa:
06:20:aa:1d:3e:57:f4:9e:27:f7:a5:ce:d3:d5:fc:0e:a4:60:
89:0a:78:a1:1e:69:73:df:d4:1e:4f:0d:f8:91:81:bc:a3:0a:
de:5e:15:04:d5:62:e3:7a:79:06:05:77:c1:71:88:ab:16:a8:
b2:4b:51:fe:e7:68:da:11:ac:85:44:d0:77:6b:91:dc:aa:f5:
23:0d:97:b1:b7:a4:fb:47:91:75:26:27:f6:7c:1e:96:02:7d:
77:a9:0b:3d:b7:c5:69:c5:15:d5:c6:33:84:0e:d7:03:fb:f0:
ac:73:9f:47:e7:40:9d:30:6e:bd:88:6c:ee:b6:d4:6b:76:8d:
78:cb:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net