Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa
File: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (raw, json)
Hash identifier: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=
Subject key identifier: 59:D7:75:B4:C6:36:A9:18:34:84:B1:17:14:9C:E1:62:2A:8B:C9:4F
Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial: 01942369FD1362C96D2EBA740D6CEC0AF333
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41766
IP address blocks: 193.37.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fd:13:62:c9:6d:2e:ba:74:0d:6c:ec:0a:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59d775b4c636a9183484b117149ce1622a8bc94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:13:a7:af:25:aa:e6:b4:b2:04:cf:a5:46:
eb:b9:50:bc:b6:07:c8:8f:6f:71:37:21:55:d8:83:
b4:3f:f6:b6:5b:e5:8f:fa:1f:36:8b:57:fa:b1:a8:
83:ec:ee:4a:a0:ed:9a:c3:e8:ad:95:80:70:37:9d:
b5:bd:90:a9:6f:63:61:ec:19:3d:48:db:6d:0a:dd:
54:dd:20:8c:e8:7b:4f:52:78:4c:f2:38:15:8d:1c:
1f:92:d3:18:ee:f9:c4:86:8c:8e:88:60:83:6f:af:
33:70:e4:f7:9c:e8:0f:c8:eb:96:83:b2:d8:2f:c1:
1c:33:da:55:4a:27:07:ab:7a:d0:f7:3e:b3:dc:a2:
bd:ca:6c:7d:32:99:88:0d:eb:46:c6:b7:71:aa:6a:
6d:fa:f8:15:26:ff:57:f2:f4:cc:0f:ea:99:5a:06:
78:bc:1a:3d:06:02:4f:2c:80:6b:c1:32:1e:28:bf:
d7:39:5a:0d:fa:dc:8b:d2:5d:1c:05:31:0d:25:2d:
80:65:59:dc:2f:31:bf:6e:f4:11:5b:b4:50:6d:d2:
12:b5:fe:0e:53:9e:14:0e:83:7f:55:ee:58:08:51:
5b:45:da:fd:02:30:18:f7:79:9d:77:a5:49:41:47:
7d:7d:a3:21:05:5a:19:08:bd:14:75:a9:88:bd:40:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D7:75:B4:C6:36:A9:18:34:84:B1:17:14:9C:E1:62:2A:8B:C9:4F
X509v3 Authority Key Identifier:
keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.147.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5c:24:fc:91:88:c7:9c:04:d0:a2:5a:6a:14:0b:11:77:b8:
65:a7:f7:e3:84:71:5e:e4:01:0b:2e:9c:bf:38:de:62:5f:28:
64:e5:1f:b5:23:d6:bf:2d:6c:ff:51:40:82:8b:29:c7:db:7d:
ab:e4:f8:01:8c:91:ee:00:f7:82:86:19:3c:09:0a:3d:f2:f5:
9f:85:7d:d6:d7:94:39:10:b1:5e:03:b9:1c:f0:c0:2b:7e:a5:
25:70:a0:fe:07:f8:39:ed:60:91:be:b4:54:2b:04:80:c0:cf:
ef:22:64:a2:22:6d:e7:70:e0:12:5e:2b:d1:b7:6d:ae:1a:df:
b1:1a:27:2a:e1:67:5d:ff:07:06:15:e5:db:56:57:8f:f1:a1:
51:5e:c5:17:ee:7e:3a:85:f7:c3:75:4e:cd:15:72:00:88:e1:
cb:6c:49:a4:1c:13:54:96:20:47:48:ad:92:c8:94:96:99:7d:
74:3c:f4:8b:b9:80:8f:e2:32:38:56:94:59:92:0f:18:e3:63:
ad:b7:47:96:a4:22:ca:f0:75:44:d1:e1:82:1b:fe:65:29:05:
1e:84:6d:66:f5:35:2b:eb:ba:cf:d2:55:20:b2:73:9d:70:c8:
a4:da:d4:bc:f0:e8:68:74:8c:2c:68:b7:0e:a2:d6:80:55:11:
c2:81:0a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net