Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/x05s8cxNFz3Ea01ENwVR0hPrDdY.roa
File: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (raw, json)
Hash identifier: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=
Subject key identifier: C7:4E:6C:F1:CC:4D:17:3D:C4:6B:4D:44:37:05:51:D2:13:EB:0D:D6
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 019428270282569D5F70413B3FE4734A85BA
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/x05s8cxNFz3Ea01ENwVR0hPrDdY.roa
Signing time: Thu 02 Jan 2025 17:53:52 +0000
ROA not before: Thu 02 Jan 2025 17:53:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30768
IP address blocks: 193.19.82.0/23 maxlen: 24
194.165.0.0/23 maxlen: 24
194.165.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:02:82:56:9d:5f:70:41:3b:3f:e4:73:4a:85:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Jan 2 17:53:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c74e6cf1cc4d173dc46b4d44370551d213eb0dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:4e:7a:9d:b4:df:99:f7:3a:5e:da:35:bc:
14:05:0f:f1:9a:ec:1d:47:d2:59:fa:29:fa:f4:ba:
37:29:ae:30:2f:10:46:0b:7d:36:44:15:1c:8a:a6:
e3:97:4e:e0:3e:30:d9:fc:4d:d5:57:fd:c1:1d:47:
22:9a:c7:44:5d:84:da:37:07:9c:43:bf:3e:96:7d:
75:62:16:36:d6:8d:b2:57:ff:50:05:cc:9b:19:c2:
63:80:10:38:2d:b5:dd:b2:02:e6:51:8a:42:fe:d4:
f1:59:69:59:bb:13:4a:99:e3:4b:1c:24:2c:7d:01:
46:29:3f:95:6a:10:b2:4f:41:d2:e2:ca:ff:f5:d7:
02:9b:28:8b:53:a6:fd:91:da:71:eb:37:f9:0a:b3:
09:4b:14:57:52:87:9f:c9:01:1f:4a:bf:c4:64:cd:
03:c8:af:40:8a:26:7a:0c:32:00:92:14:8c:16:6c:
ff:47:92:0f:7e:87:10:ae:f5:52:85:f0:14:e0:e1:
b7:c6:09:ba:14:a2:3f:26:bd:be:57:02:ae:91:00:
d0:cb:b5:25:5b:0d:9b:72:53:8d:7a:ec:7e:53:18:
3f:b8:c0:bc:08:48:49:cb:37:56:55:26:3c:a7:b7:
b8:58:6f:4b:42:cd:26:88:2e:7c:a5:65:8d:a7:fd:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:6C:F1:CC:4D:17:3D:C4:6B:4D:44:37:05:51:D2:13:EB:0D:D6
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/x05s8cxNFz3Ea01ENwVR0hPrDdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.82.0/23
194.165.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:4e:2f:f5:6c:35:21:38:35:d7:51:21:21:58:fa:22:d5:30:
6c:03:ff:70:40:4c:65:4c:36:28:d2:37:df:c5:d0:3a:b7:3f:
81:ae:57:56:f8:87:4d:af:c2:85:65:ff:c0:a2:88:d7:2c:23:
49:d0:82:56:c9:5a:43:72:32:d1:b7:5b:28:97:a0:e5:c4:93:
59:1b:f7:03:d7:cc:86:71:f1:3b:0f:28:78:95:28:39:c9:36:
10:bc:1d:e3:b9:81:2e:25:bf:39:dc:ef:9f:ea:aa:b4:e7:92:
65:3c:73:ca:a7:1e:a7:b4:80:9f:e1:fa:63:12:21:55:9d:18:
58:d1:c5:9d:cf:87:89:8d:47:d2:20:09:71:6a:c4:e7:bf:71:
19:ac:ef:b0:53:d0:f6:1f:f0:8d:29:60:a8:a8:7c:52:2b:b7:
cd:fc:60:5c:32:25:7c:75:d8:21:86:c7:db:4d:c4:95:a9:95:
cc:aa:be:c5:fb:ef:a9:a1:13:2a:2e:54:fe:b6:30:b5:ce:ae:
0f:55:a5:64:77:ad:ad:b7:bd:39:3b:47:c7:0f:b4:87:60:3f:
9e:96:55:87:0a:d7:c1:c8:87:2e:b0:fd:b2:6c:c1:ca:e6:14:
a3:da:35:2e:0c:7f:25:4a:0b:b2:b1:47:94:f1:04:ae:ab:52:
5b:b9:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net