Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/Th8E4wMERzzrtf61mMlHU7T-O1E.roa
File: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (raw, json)
Hash identifier: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=
Subject key identifier: 4E:1F:04:E3:03:04:47:3C:EB:B5:FE:B5:98:C9:47:53:B4:FE:3B:51
Certificate issuer: /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial: 0194221F78DA0B39C8CC3AE3FE6FB901A8D4
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/Th8E4wMERzzrtf61mMlHU7T-O1E.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51262
IP address blocks: 193.84.120.0/22 maxlen: 22
193.84.120.0/24 maxlen: 24
193.84.121.0/24 maxlen: 24
193.84.122.0/24 maxlen: 24
193.84.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:78:da:0b:39:c8:cc:3a:e3:fe:6f:b9:01:a8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e1f04e30304473cebb5feb598c94753b4fe3b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:3a:70:0a:3c:08:96:ab:7f:d8:96:5d:85:
0a:bb:28:0f:ba:11:12:41:ab:5d:d4:37:c8:fc:6b:
99:3f:fc:a4:22:dc:73:2e:d1:30:a4:e8:93:0b:8a:
f5:2b:42:4e:54:30:bf:63:ad:74:e0:fc:a8:8e:7c:
a3:05:09:4e:c5:24:e2:58:29:68:db:43:5c:85:e7:
22:33:eb:08:21:9a:83:31:3b:53:b7:3e:60:60:c7:
b8:e9:0e:06:7d:97:e1:66:06:43:6f:f4:bf:59:5d:
4a:8b:25:76:35:8f:73:94:31:92:c7:c5:78:3b:7a:
e4:29:e1:41:ac:6b:e4:f3:9f:65:32:c4:89:d4:c5:
61:7c:de:bc:b8:a1:56:16:8d:83:61:a9:aa:e7:7c:
f0:e0:12:cc:bd:65:35:8a:e7:5b:94:ad:bf:71:c4:
73:94:7b:65:d8:9e:e8:2a:09:0c:5f:d6:c3:19:3d:
86:d7:58:54:01:33:4c:2a:e9:bf:e2:25:1a:55:04:
41:c4:9c:c8:ea:8d:b8:42:54:46:9a:34:b2:19:da:
15:bc:01:06:5c:0a:1b:63:5b:4e:5b:b0:a3:fd:06:
28:85:33:90:35:46:1b:34:53:e6:e2:ca:b0:52:a4:
03:0a:51:d4:aa:07:e4:d2:ee:44:2d:5d:04:35:cc:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:04:E3:03:04:47:3C:EB:B5:FE:B5:98:C9:47:53:B4:FE:3B:51
X509v3 Authority Key Identifier:
keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/Th8E4wMERzzrtf61mMlHU7T-O1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:57:e6:40:f8:e4:7b:72:d3:77:b3:f7:5d:a0:d1:54:3d:8d:
34:44:37:36:c2:eb:23:9b:c4:c1:8b:3b:e2:1c:7f:0c:ad:2a:
ed:79:ca:5b:77:89:4e:d8:7c:60:21:9f:37:b1:88:86:d3:a7:
99:76:a1:59:e9:c0:e7:07:e5:d8:df:5c:b7:a8:a3:6c:92:aa:
da:76:b8:b1:3f:5f:4e:52:7e:ef:ac:58:b9:af:1c:7e:64:ea:
4c:a7:48:bb:a4:68:4a:b7:c0:51:b4:b1:cc:9c:cc:84:5d:9d:
3e:99:96:98:be:c1:bb:27:22:04:a2:1f:fd:f2:48:81:70:d6:
57:15:07:9d:09:e5:b2:c3:ea:43:3e:41:e6:e3:3d:37:f3:67:
00:54:cc:c9:21:87:a7:ea:a1:42:da:6a:69:04:4e:33:15:80:
1f:fe:51:db:50:fd:12:92:71:b9:50:ef:60:0a:2b:69:f1:1d:
d5:ca:b0:65:1e:63:f9:a9:85:dc:11:67:15:6c:3c:f0:ed:03:
64:ef:04:74:b4:5c:90:25:a9:14:69:30:55:94:0a:ca:2a:28:
b2:28:93:c2:39:4b:64:0f:8e:52:45:83:01:b3:c0:7c:1a:24:
e9:7b:75:b4:3e:fd:ae:f1:93:c5:88:95:23:d9:5c:b9:80:8d:
fe:b1:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net