Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa
File: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (raw, json)
Hash identifier: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=
Subject key identifier: 0A:AD:6E:C1:0A:C7:15:03:E6:E7:1B:C9:BB:D7:95:3C:3A:58:25:F8
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 019421B2109A2F985F2B5F398BA3A4A5CBB9
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212378
IP address blocks: 193.169.143.0/24 maxlen: 24
2001:678:9e4::/48 maxlen: 48
2001:678:ec0::/48 maxlen: 48
2001:678:ec4::/48 maxlen: 48
2001:67c:11f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:10:9a:2f:98:5f:2b:5f:39:8b:a3:a4:a5:cb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aad6ec10ac71503e6e71bc9bbd7953c3a5825f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:95:c2:fa:78:30:4f:ca:0d:23:3c:a5:a0:
bc:ca:ce:13:5d:a3:b1:c2:85:1d:f9:66:0d:26:60:
22:42:77:34:2b:79:85:3c:1c:c0:05:d8:ee:22:81:
76:1f:d6:e6:11:49:b7:ba:11:1a:03:d7:e6:24:af:
20:88:21:1d:0b:43:79:7a:0d:3e:d5:01:e4:32:5b:
f6:a9:cf:88:f4:9c:19:5f:91:23:58:e9:d1:47:20:
d8:be:1e:09:6f:8a:97:3f:4d:65:b3:4d:c7:0a:a8:
22:6d:c1:35:03:f6:73:0e:b6:f5:3d:37:3b:03:4c:
86:fe:e8:96:e0:2d:8e:90:7f:45:1b:bc:cf:fb:a0:
fc:5d:8f:31:d4:c9:24:fd:69:6a:d0:18:46:48:3f:
a9:05:ec:fe:f5:7a:a8:41:f5:70:0c:d1:7d:39:5c:
45:dc:1e:50:fa:54:8a:86:00:61:f8:2d:0c:2f:dd:
90:49:aa:e4:1f:db:99:9e:16:c2:5c:7f:67:8a:14:
86:c8:66:1e:24:39:51:1a:18:e2:64:c3:85:47:7b:
1b:b8:de:56:1a:31:f7:d9:24:06:01:ec:5d:d1:25:
ad:d2:c0:e5:ab:f9:dc:94:8f:0d:88:5a:40:72:59:
51:46:7b:b3:b2:8c:66:10:28:e5:27:36:4b:dc:e6:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AD:6E:C1:0A:C7:15:03:E6:E7:1B:C9:BB:D7:95:3C:3A:58:25:F8
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.143.0/24
IPv6:
2001:678:9e4::/48
2001:678:ec0::/48
2001:678:ec4::/48
2001:67c:11f0::/48
Signature Algorithm: sha256WithRSAEncryption
4b:34:e3:64:5d:3b:16:8b:51:35:95:6d:be:16:a7:05:71:0a:
86:6b:ea:64:9f:a2:bd:c2:8f:40:19:9b:e2:67:c3:ce:6b:2e:
87:e3:de:34:39:35:86:3a:70:d9:ea:52:53:63:f8:6a:68:82:
a9:08:f6:03:37:ba:23:54:53:0c:25:1a:01:55:52:8f:79:b4:
00:72:b1:7d:94:cd:24:cf:14:34:d7:cf:14:24:aa:72:01:85:
7f:56:44:c6:d6:b8:98:ec:b3:06:0b:b3:4b:14:60:7e:77:d9:
16:39:09:cf:a9:78:79:41:a5:51:86:54:44:15:18:9a:cb:cc:
a1:ca:05:a3:fd:5d:6f:35:05:c2:c8:88:9c:b9:56:49:52:5e:
72:91:9a:72:31:63:66:19:54:d3:de:bb:3e:74:d3:ef:c2:b7:
6b:d9:c9:d4:98:91:6f:f6:97:6f:2b:61:a8:15:28:f4:8f:9a:
64:dc:1e:96:fa:13:7c:bf:4d:e9:83:d8:61:dd:10:c8:0f:7a:
06:a4:af:6d:76:25:a2:2a:09:2e:39:de:7e:b9:a2:d4:f6:8c:
7f:53:86:e8:14:93:93:af:c8:dc:df:9e:07:d6:20:2d:83:c3:
f9:c9:8e:d4:d3:08:b6:eb:17:82:54:0a:ca:29:3f:ca:3d:f6:
ab:3a:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:19 2025 by rpki-client on console.sobornost.net