Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa
File: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (raw, json)
Hash identifier: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=
Subject key identifier: DC:96:7F:E7:0E:1A:31:6B:D1:55:BC:C2:A1:DF:26:52:4E:DE:C8:93
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 019425FC4661A524514B558E459162906B5E
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa
Signing time: Thu 02 Jan 2025 07:47:57 +0000
ROA not before: Thu 02 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 194.15.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:46:61:a5:24:51:4b:55:8e:45:91:62:90:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Jan 2 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc967fe70e1a316bd155bcc2a1df26524edec893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:c2:cb:73:5a:cc:32:2b:31:8d:1e:38:89:
fe:20:c8:68:d4:3d:0e:7d:32:96:e6:e1:29:68:31:
fd:c0:af:7a:0e:47:d8:cb:af:e1:16:35:3d:72:58:
1d:7f:bb:5d:79:0a:b5:72:74:1a:b9:3a:48:cc:b6:
cb:e4:71:1b:19:cc:7f:a2:69:f2:26:54:08:87:82:
ca:a1:02:53:1d:99:e2:00:19:c6:9d:0c:a0:58:7b:
1e:3b:f8:14:87:db:44:44:32:3f:df:e8:21:39:86:
e4:d3:5e:87:4c:73:9f:76:f1:60:19:4e:cd:31:46:
6a:8b:b7:41:b6:e3:28:65:f2:a3:4e:98:bf:52:38:
b1:97:b3:6f:21:ee:f0:3a:bb:3e:df:7c:12:df:ba:
7f:18:ac:a8:ed:69:7b:5e:ad:4c:57:a4:33:0d:31:
80:9c:ca:3a:b5:f9:1a:6b:01:da:d2:16:cc:00:73:
4d:58:48:25:79:bb:e8:bc:f4:99:ef:d6:2d:aa:94:
fa:c1:bb:34:9f:de:73:7d:30:05:fe:fe:10:3d:48:
e5:3c:06:20:8c:bc:91:45:08:ed:89:07:bd:fb:82:
d9:de:6a:0f:74:09:f2:e5:69:64:cd:8f:52:5c:37:
49:fd:fa:59:e7:b4:4e:ed:41:ac:45:16:12:d6:e3:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:7F:E7:0E:1A:31:6B:D1:55:BC:C2:A1:DF:26:52:4E:DE:C8:93
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.138.0/23
Signature Algorithm: sha256WithRSAEncryption
81:89:70:f6:54:b5:d0:3b:20:52:14:45:a6:e5:fa:2d:d5:97:
bd:6e:fb:20:b3:be:1a:f8:0e:42:1d:40:ce:89:4c:9e:7b:ac:
6c:2f:b2:4d:67:7c:bf:e4:5c:cc:d0:9b:68:f4:f7:a5:6d:61:
c9:a2:9a:04:c3:e3:43:8c:f9:d3:4d:58:e2:8e:ec:66:44:f7:
c3:fd:71:4b:2b:66:b7:64:a6:ab:53:01:5c:8b:8d:67:30:62:
aa:df:1b:82:08:71:e7:99:b7:e1:1a:5d:96:08:a8:a7:8d:5a:
b9:bc:c8:fa:9c:bf:51:77:7f:cc:66:91:f0:79:84:30:4a:25:
4b:cc:38:32:77:ab:be:39:fc:e7:53:06:ff:27:aa:70:0f:21:
38:85:71:35:58:b7:3f:d7:46:d5:a6:82:80:70:a0:e3:4b:1e:
e6:47:df:9f:f1:23:5a:67:2e:b6:f0:89:47:8f:c4:69:96:e9:
7c:ab:9a:70:13:d8:2e:25:99:6f:4b:39:53:da:4e:69:45:e4:
44:1b:06:82:8b:8e:25:0e:ca:0c:9b:a8:2e:29:a0:5b:1c:e4:
7e:4d:76:50:78:6f:8f:b1:66:df:c3:85:da:cf:d3:4f:24:fe:
86:0f:32:68:8d:84:f1:ad:c3:fa:0e:4e:af:bf:1c:f0:24:8f:
18:04:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net