Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/cZHYHiGd6PIrfuySObNNa9cF_qc.roa
File: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (raw, json)
Hash identifier: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=
Subject key identifier: 71:91:D8:1E:21:9D:E8:F2:2B:7E:EC:92:39:B3:4D:6B:D7:05:FE:A7
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 0194228DF6146065DE287B0A5404CED0B9D6
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/cZHYHiGd6PIrfuySObNNa9cF_qc.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1342
IP address blocks: 193.163.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f6:14:60:65:de:28:7b:0a:54:04:ce:d0:b9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7191d81e219de8f22b7eec9239b34d6bd705fea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:18:b4:a9:f8:39:0f:07:6a:0f:7a:f4:0a:
9f:3e:5f:fe:18:98:7d:93:d4:1b:95:4a:63:e8:f4:
d4:45:b6:ed:ca:1d:f0:e3:06:fc:ba:e3:3e:26:18:
a2:3d:20:77:40:fa:f4:30:28:a2:74:b9:4c:79:e7:
b9:74:71:db:e0:29:1d:ba:3d:20:25:a9:28:ad:77:
7d:a2:f9:ac:98:8c:43:88:a3:15:49:ad:22:35:14:
38:7f:02:68:51:f0:0a:c6:4f:1f:59:d0:11:bb:e5:
ce:fd:72:91:eb:a3:28:e0:51:a7:08:3a:62:0d:53:
cf:97:46:43:18:a3:40:94:8b:d7:5e:88:32:1d:28:
8f:92:79:06:4d:91:d5:42:78:9d:28:44:a0:81:2d:
33:32:32:da:a9:51:6e:87:0d:3b:a7:ca:9a:93:57:
95:60:79:8a:e6:17:a4:3f:b5:09:38:14:bd:df:1c:
dc:b9:fc:fb:4f:88:1c:b7:81:f4:73:19:73:90:0f:
5a:09:bb:bc:1d:45:65:49:8b:a0:3a:07:6a:93:95:
18:fe:5c:7e:8d:00:4b:e3:bf:3a:9d:c3:f6:04:5f:
84:43:a1:2a:46:13:c4:72:7a:73:3e:d7:09:ca:5c:
8e:c4:80:08:85:b6:34:b1:39:cc:1a:08:d1:f3:d1:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:91:D8:1E:21:9D:E8:F2:2B:7E:EC:92:39:B3:4D:6B:D7:05:FE:A7
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/cZHYHiGd6PIrfuySObNNa9cF_qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:94:2d:2a:79:ca:4c:71:06:59:23:63:95:49:e3:43:14:83:
0d:0f:e4:b0:31:e0:1d:27:ba:24:c5:63:ee:9e:90:ff:58:5b:
50:5a:c7:8e:59:e8:dc:bf:89:ef:03:35:f3:ee:92:9d:9a:80:
17:17:45:73:e4:b1:5f:34:5d:34:78:67:69:b3:52:a1:6c:57:
7a:d0:c8:2d:01:d3:51:c0:9a:9c:e9:87:c0:ac:d5:28:28:ce:
51:4d:6d:f8:23:9c:df:56:9a:3f:3f:53:df:22:72:b4:77:58:
bb:06:35:a3:6b:d3:ff:c9:85:e8:30:1e:dd:c4:72:25:46:1f:
95:62:fe:ba:e0:46:25:33:43:8c:2f:40:95:31:82:45:c3:9b:
5a:12:73:a0:a2:5e:00:e4:a4:81:d3:6b:bf:68:38:90:52:54:
a5:be:77:0d:71:f9:cd:d7:ef:60:56:4c:16:b5:d3:28:20:a6:
01:c3:53:fc:0c:c5:d8:54:4f:7d:c8:ca:7c:6f:4c:73:a7:03:
4d:59:bf:f9:f5:10:ea:dc:b3:0a:e6:ce:48:89:e4:5e:89:c5:
1f:2c:98:0b:5d:7c:00:c3:43:ae:b3:6e:c3:63:9f:6e:10:0d:
be:89:45:48:54:2f:a1:2b:33:a1:3c:a0:ba:1d:dd:6a:50:6c:
06:f8:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net