Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/yz6_439OmIgbPGI_9SMl-hcB7SM.roa
File: yz6_439OmIgbPGI_9SMl-hcB7SM.roa (raw, json)
Hash identifier: b+VVST8s13jCLV/LOSpCV8hcczaiQ8urh6lhnrg3Cso=
Subject key identifier: CB:3E:BF:E3:7F:4E:98:88:1B:3C:62:3F:F5:23:25:FA:17:01:ED:23
Certificate issuer: /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Certificate serial: 019427486FACC71DDB40B58FEF1230974838
Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/yz6_439OmIgbPGI_9SMl-hcB7SM.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42301
IP address blocks: 193.200.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6f:ac:c7:1d:db:40:b5:8f:ef:12:30:97:48:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb3ebfe37f4e98881b3c623ff52325fa1701ed23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:03:be:d6:c5:37:ad:c5:a7:05:0e:c4:cb:
c7:38:e1:c3:3e:f5:73:ea:4e:a9:29:af:c4:12:9a:
ad:14:52:69:d2:b3:53:3b:81:91:37:3a:96:ce:f4:
87:3b:b3:4c:e2:1d:a2:b3:d4:88:9f:6f:35:b0:10:
24:3b:fa:4b:e2:f5:3b:31:19:f4:d0:f4:c2:a2:0b:
38:65:89:e6:18:4e:8d:25:2c:7a:92:40:ba:80:8c:
62:fc:ac:97:ca:b1:3e:6b:1c:0e:db:fe:9d:ff:aa:
02:29:ea:15:cf:81:93:0f:9d:d5:8f:bd:c0:fe:40:
48:2a:0e:a9:54:fb:f4:96:17:ed:a4:bd:34:ff:2e:
6b:46:cf:fd:53:b0:5d:f5:0e:12:ed:ad:eb:d9:e0:
75:06:19:67:a7:20:09:96:a5:10:2b:c5:11:f8:16:
5c:09:72:2b:e1:87:e3:a8:81:75:21:cf:05:8c:c7:
95:c6:8b:a8:3a:4b:48:7c:d8:f1:56:f9:0d:a4:1f:
2f:07:f8:08:81:b9:98:f3:78:70:ee:46:6b:b5:89:
03:38:57:72:b6:f8:3a:77:6d:b4:e4:21:54:f1:57:
0b:5c:34:f9:44:2d:51:a7:1b:5d:1a:3d:8d:ba:14:
05:e4:f9:0c:85:fe:c1:61:80:f1:05:22:b7:5d:bc:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3E:BF:E3:7F:4E:98:88:1B:3C:62:3F:F5:23:25:FA:17:01:ED:23
X509v3 Authority Key Identifier:
keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/yz6_439OmIgbPGI_9SMl-hcB7SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.239.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3e:6f:d4:46:da:d6:a8:0e:de:23:82:e7:66:d6:d3:b0:f4:
b2:d6:a9:7f:2f:f9:46:05:4e:3a:7a:20:ac:a2:ad:e2:37:6c:
20:e0:e7:a3:a9:d5:b7:2b:08:67:18:b6:77:60:71:0a:34:57:
26:91:9d:0f:2e:93:59:c7:e2:13:a4:4a:b8:59:6f:60:2a:f7:
61:83:65:f0:5a:a9:ba:8a:8b:d3:d3:2d:78:d2:a2:29:61:2e:
c6:36:0e:e2:99:25:5c:73:3b:7a:2f:8b:44:03:80:47:5c:18:
27:ef:69:dc:23:83:da:c3:32:f3:07:b6:57:d8:b7:59:76:bc:
29:d0:dc:22:be:b3:39:fe:00:24:1c:dd:45:18:2c:ab:e2:c1:
a9:c4:2b:7b:e4:0d:76:af:9c:d8:2d:09:8f:0f:b5:1e:db:1a:
a8:83:50:a4:aa:15:2b:cf:c3:f1:0f:c8:d3:fa:0d:38:1c:4b:
6f:74:e6:98:c7:f7:47:87:d0:24:cf:f6:90:4c:01:b7:4f:65:
22:c7:f8:8c:d4:f7:ad:7e:be:be:63:2e:d7:d9:05:4b:a2:0f:
64:78:05:d4:8a:04:65:b0:6b:5d:cb:91:77:21:29:eb:57:2d:
f8:1e:33:eb:8b:3e:30:cf:c8:55:11:06:3e:80:b4:8d:7f:e7:
59:60:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net