Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/dh_JgCZHkTokMGRr7H9M3cKhoRc.roa
File: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (raw, json)
Hash identifier: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=
Subject key identifier: 76:1F:C9:80:26:47:91:3A:24:30:64:6B:EC:7F:4C:DD:C2:A1:A1:17
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 01942143AB7823BCED3E0811D76D386D13DB
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/dh_JgCZHkTokMGRr7H9M3cKhoRc.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15879
IP address blocks: 193.104.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ab:78:23:bc:ed:3e:08:11:d7:6d:38:6d:13:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=761fc9802647913a2430646bec7f4cddc2a1a117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:4a:4e:77:2a:ce:cf:5f:69:af:b1:b1:53:
37:7d:5e:61:14:ea:a2:16:9d:bc:a3:a7:45:f8:dd:
20:81:39:22:a4:95:d1:8d:98:89:fe:53:61:82:15:
27:91:82:c0:96:3b:8b:f6:43:19:5d:55:95:08:00:
14:ed:68:18:f3:3a:43:29:6b:e2:1e:01:8b:c8:30:
33:3a:10:ab:df:a5:52:e3:9b:ac:7b:8a:2b:cc:90:
bd:43:c5:fc:97:cd:63:68:93:b9:51:e0:a5:89:73:
30:64:06:17:ba:d9:f0:dd:6d:07:e8:d3:ec:93:b6:
35:7b:41:ee:77:7b:0f:d8:b0:0e:94:b2:5c:f7:32:
db:2f:de:94:6c:a0:ed:b1:37:9a:6e:82:73:82:c9:
64:32:f6:c4:85:98:6d:83:0a:e3:43:9a:f3:26:9f:
9a:9d:1a:fd:52:97:30:96:8e:21:70:f2:73:65:68:
b5:fc:8d:54:f3:3c:83:2d:ac:e4:b4:c6:78:f1:37:
61:be:eb:5f:0b:81:a2:58:9d:f2:81:de:cf:76:77:
16:ae:37:c9:79:61:60:c9:2d:c4:d1:c6:c2:ca:c2:
92:d4:23:8d:90:b4:70:3b:32:40:79:ad:3e:1f:91:
96:e0:ba:5f:3b:ad:85:fc:48:99:32:ae:76:b8:26:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1F:C9:80:26:47:91:3A:24:30:64:6B:EC:7F:4C:DD:C2:A1:A1:17
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/dh_JgCZHkTokMGRr7H9M3cKhoRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:50:4b:ef:1e:11:c3:9b:b7:50:61:8c:e7:98:64:4d:62:d1:
7e:a9:43:5f:b4:81:f9:19:02:19:c6:24:54:e5:2d:13:d5:f8:
52:c2:28:8c:63:97:5e:26:81:59:bd:8e:cc:c9:71:55:d5:7f:
d5:7b:5c:10:79:2a:88:93:80:10:e1:a9:a9:27:67:be:bb:46:
04:43:12:e1:b2:bf:a9:ce:26:3a:a0:de:76:87:a3:0c:81:a9:
a5:b1:cb:cd:e1:17:9b:7d:ab:be:a7:6f:a7:12:d6:90:c3:aa:
e1:12:ef:93:e9:13:56:9c:b2:96:24:2b:65:66:8b:c1:da:03:
79:2e:ff:d0:e2:bd:41:00:85:85:95:2f:e1:ec:65:0f:dd:99:
da:26:aa:7d:c2:9a:c9:8b:cc:40:c2:39:36:8f:b0:88:3d:cf:
8c:4f:b1:66:e6:68:d2:4a:94:d3:70:c3:1f:f4:b8:4c:c3:4e:
37:3b:e2:b2:92:4e:2b:1b:8b:49:45:cb:90:f8:ef:da:c2:d5:
da:07:94:82:82:53:0c:34:58:5f:b5:5e:6e:8c:b6:6d:3e:e2:
c3:4a:39:67:93:0a:cd:b4:f0:d2:db:b2:e4:1f:33:78:91:a8:
bd:ac:96:e4:cc:fe:bb:53:1a:c7:3b:ca:d4:39:d1:04:08:a5:
dc:48:03:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net