Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa
File: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (raw, json)
Hash identifier: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=
Subject key identifier: D7:F9:92:7B:F3:B7:FE:33:F4:5A:65:FF:16:E3:D8:41:A3:88:03:FE
Certificate issuer: /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial: 0194258F9FE82E76A6D3F56C6CB781B7C815
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 93.188.144.0/21 maxlen: 21
178.22.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9f:e8:2e:76:a6:d3:f5:6c:6c:b7:81:b7:c8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7f9927bf3b7fe33f45a65ff16e3d841a38803fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:51:16:39:b8:2f:bc:bf:f4:66:37:1b:ab:
e9:7d:4b:1c:59:82:0e:b7:14:66:e1:c1:9c:03:b7:
b6:30:b3:9b:51:fe:65:f7:f8:16:97:b2:70:1f:b9:
e5:f1:dd:13:7e:61:36:8d:87:4f:70:66:a4:78:cf:
c5:43:c4:31:06:17:74:12:93:52:66:bd:68:16:40:
a6:46:c6:f8:ba:64:08:a6:99:b9:10:3f:9e:ec:05:
f1:e4:a1:c1:a0:4c:36:99:b6:b7:6d:4b:56:fa:41:
a7:9a:b1:0f:7f:65:a1:fc:63:34:c2:5c:9c:c8:6b:
f1:5a:62:e2:c8:8f:0c:e9:6f:d5:99:f6:ed:03:05:
42:36:30:c5:f8:66:01:c5:70:04:f7:57:51:7b:8d:
d6:84:f6:fc:e8:41:9d:ec:ea:f1:29:2e:9d:5f:3b:
d8:9c:9b:93:e6:89:68:c1:dc:21:e7:69:f3:e1:c3:
1b:52:f8:81:e5:ed:8e:f9:18:fd:01:70:5d:b8:08:
41:54:0d:72:ca:51:6c:5a:48:67:7b:b5:18:5d:0e:
5f:93:73:8a:b1:42:af:67:ec:b4:90:9d:9f:42:d4:
8a:1f:54:7a:26:ac:96:23:41:64:db:ae:e7:e7:18:
64:fe:7a:d3:cf:b5:47:51:e6:4f:e6:c0:65:52:1c:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:92:7B:F3:B7:FE:33:F4:5A:65:FF:16:E3:D8:41:A3:88:03:FE
X509v3 Authority Key Identifier:
keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.144.0/21
178.22.176.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:2f:ec:b9:37:6f:2d:b1:c9:49:98:36:62:f6:fb:88:ca:c7:
f8:58:b3:b4:ff:cc:e3:df:b6:d7:a9:15:d8:1c:6f:41:57:81:
57:01:8e:e3:33:6f:6f:34:87:f9:d3:31:d8:50:84:ab:d7:18:
1f:d8:97:77:c3:04:35:6c:ca:d8:70:ac:56:02:b7:72:47:89:
1f:10:06:e0:d5:c8:4c:ea:ef:c1:a3:9e:30:ed:6a:e8:58:4e:
2a:79:65:12:7f:3b:46:e5:50:7f:4e:17:e3:15:cc:93:9f:c0:
6c:a3:8d:6f:24:7c:70:d1:0f:c6:18:7f:50:2a:71:ad:58:c7:
ac:d1:89:ab:63:f0:f8:36:c7:e7:c5:50:85:3c:15:33:7a:5f:
3b:30:20:e3:d0:33:42:d7:b5:8f:73:e8:c6:12:78:ba:19:a5:
60:f3:2b:52:49:0d:af:37:a3:1d:f3:27:41:d9:ad:d9:49:c1:
13:d8:4f:6b:28:07:e5:4f:4f:6c:47:8b:db:39:d7:d6:ce:96:
9a:9d:c1:31:78:6f:bd:be:aa:d0:75:cb:cf:c6:5b:4c:23:b1:
b3:59:30:14:76:32:23:ec:c2:20:01:7a:68:d1:5f:b7:1a:c0:
89:e1:d8:e4:2e:68:5c:de:86:76:28:07:94:fa:e9:6a:b9:56:
1d:07:d8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net