Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa
File: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (raw, json)
Hash identifier: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=
Subject key identifier: 7F:7C:A1:6C:C1:19:B3:B2:35:81:0F:F1:F9:64:BD:26:89:0C:E6:59
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 019423D6C765A6FD2E4AB210D7A731E105D5
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31308
IP address blocks: 193.151.20.0/24 maxlen: 24
193.151.21.0/24 maxlen: 24
2001:67c:2c90::/48 maxlen: 48
2001:67c:2c91::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c7:65:a6:fd:2e:4a:b2:10:d7:a7:31:e1:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f7ca16cc119b3b235810ff1f964bd26890ce659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:6c:41:e1:32:4c:91:ee:7b:67:02:4c:ed:
86:e1:21:9f:14:9b:b3:d8:6c:3e:96:a0:7e:dd:61:
59:7a:eb:5c:8d:7b:97:47:de:ad:d3:cc:92:42:24:
a9:9d:b5:7f:68:d9:d3:8a:cc:77:9b:b4:65:eb:6c:
0c:60:fe:1c:7e:87:4c:55:ff:ad:14:bf:96:fb:3c:
52:4c:4d:a4:3b:61:4b:3e:77:f3:b2:a7:e0:82:f3:
23:67:f5:d8:41:e8:24:2b:68:f7:97:3e:c1:f5:eb:
45:33:f6:c2:4a:39:d6:b6:73:21:c9:dc:7c:cd:2d:
22:e8:bb:9c:17:6b:2a:a4:14:c7:de:94:8c:68:8b:
ea:d4:44:00:5a:95:ab:ab:b5:d2:7f:70:84:3e:f3:
03:41:27:18:08:cd:fc:7e:b8:34:e7:de:08:3d:a8:
93:da:5c:74:b3:d2:45:28:12:00:2d:a8:85:ce:31:
f4:d2:09:53:62:26:15:cb:94:de:b0:21:e8:91:19:
3d:48:ab:f6:80:16:83:36:c3:19:75:f7:12:7b:f0:
60:30:a8:8d:2c:4e:6d:86:c2:dc:c7:26:fd:75:16:
f3:8b:45:21:ab:b8:e8:49:46:6d:88:b4:29:3d:1e:
e3:58:61:2b:9b:e8:92:dc:0f:31:79:80:7f:ca:42:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7C:A1:6C:C1:19:B3:B2:35:81:0F:F1:F9:64:BD:26:89:0C:E6:59
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.20.0/23
IPv6:
2001:67c:2c90::/47
Signature Algorithm: sha256WithRSAEncryption
08:91:b1:cc:69:91:a3:11:74:82:c8:97:5b:92:4c:06:7c:4b:
b6:c8:18:1c:c6:8b:d8:82:dc:5c:2c:3d:ad:b8:bb:cb:db:04:
56:4a:59:b8:0d:37:a4:bb:a1:45:a9:44:f3:3c:b9:5a:c2:c7:
93:98:66:16:99:f3:2c:4d:9b:ea:71:0e:df:0b:19:f1:f7:70:
81:15:fe:31:61:cb:49:ad:ee:c4:00:1e:81:ba:e3:6d:d3:d2:
7f:1c:dc:4a:94:4e:97:0a:c3:5a:14:8e:a8:07:db:c6:e0:0a:
b6:65:9f:2c:41:81:c6:5b:bd:b0:d2:f7:41:bf:43:48:69:67:
4e:36:54:d6:24:1f:01:88:3d:88:98:01:8f:03:2f:ba:7a:50:
b7:71:7d:e9:b4:eb:f2:4b:16:aa:77:51:5b:81:6f:9d:b5:46:
73:92:f8:3c:46:f4:9b:a6:e2:8f:c5:70:84:ee:2c:26:6b:b1:
5b:8a:a0:64:55:43:db:95:63:f4:24:80:f8:cd:35:e5:f2:64:
f8:cc:15:e5:03:83:57:34:96:58:97:a8:3f:dc:25:09:4d:34:
42:ce:ee:d9:a5:c5:76:e8:6f:18:3d:75:01:d7:1b:89:3a:85:
01:04:06:70:a8:10:45:54:e3:b5:38:c6:81:e7:63:45:dc:67:
87:92:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net