Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa
File: Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa (raw, json)
Hash identifier: X6xGAAT5bKpyoabeTbBzbbLe23OVwiADFdpeDzqtwqo=
Subject key identifier: 41:AE:09:30:88:0F:BB:9C:0B:F0:E0:B6:76:4E:14:07:90:E7:45:8A
Certificate issuer: /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial: 01942826DAACC08502B004845C2DACD37C9D
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa
Signing time: Thu 02 Jan 2025 17:53:42 +0000
ROA not before: Thu 02 Jan 2025 17:53:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202446
IP address blocks: 194.33.20.0/22 maxlen: 22
194.33.20.0/24 maxlen: 24
194.33.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:da:ac:c0:85:02:b0:04:84:5c:2d:ac:d3:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Validity
Not Before: Jan 2 17:53:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41ae0930880fbb9c0bf0e0b6764e140790e7458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:e6:0a:59:f6:7a:66:c2:bb:9f:39:b8:1c:
0e:e0:52:b2:8a:e6:3f:ac:ca:d5:bb:1a:b7:62:b5:
3d:c7:ec:27:c7:ed:ca:cd:ed:10:12:eb:2d:f3:32:
49:09:d4:6d:fb:fe:72:29:d1:9b:b7:24:ce:a6:f5:
07:81:53:bb:6c:09:ab:2b:34:0f:cc:9f:5a:7d:e5:
92:6b:7c:21:fb:d9:15:99:b5:30:3b:10:d9:c3:95:
27:0a:cc:ac:22:ba:e2:f3:25:8b:07:ad:47:7c:07:
74:c7:d5:35:43:17:ca:9c:a5:1b:e7:ff:b2:65:74:
d4:c1:77:3d:50:ec:64:11:a3:0d:5f:30:83:34:65:
54:86:32:2c:3d:eb:65:50:11:8c:71:6d:6e:01:4c:
1f:8a:90:11:40:50:b6:3c:2c:7d:64:49:b2:22:db:
5a:75:f2:1d:18:23:27:14:39:2e:89:b8:25:76:7f:
ad:b2:39:72:3c:55:b5:a8:fa:12:0b:8d:6d:7e:5b:
88:36:7c:f1:40:09:02:29:d9:27:06:a3:20:1b:f1:
39:5b:01:b7:fe:45:f5:fb:6f:a1:2b:23:89:e7:2f:
0b:b1:69:9b:5c:fa:d4:fd:c7:f7:ee:6e:e9:57:e1:
87:66:da:df:e4:61:94:24:8f:6e:04:80:fc:18:e8:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:09:30:88:0F:BB:9C:0B:F0:E0:B6:76:4E:14:07:90:E7:45:8A
X509v3 Authority Key Identifier:
keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.20.0/22
Signature Algorithm: sha256WithRSAEncryption
44:38:ae:80:54:25:f7:2c:d3:f4:86:8d:e6:78:98:d6:e3:2b:
6b:89:7c:07:33:8a:f8:ff:ec:c5:d1:05:67:80:53:7d:a6:e0:
9d:36:7f:bf:49:77:38:17:0d:74:be:aa:d5:c3:1b:fd:d9:70:
33:08:ea:4e:58:e4:a6:61:5b:cb:20:60:ef:9b:43:5f:49:fa:
bd:e2:88:38:d7:6f:3b:32:8a:48:06:de:f0:9b:70:d6:af:6b:
1e:bb:5f:6a:b9:f4:d3:83:64:ce:e6:6d:d5:39:ed:7d:8f:0b:
e1:01:bf:4c:86:07:bf:ec:bc:c6:0b:f2:1a:89:76:56:9d:85:
9f:96:28:51:07:67:8a:b3:a9:78:67:16:e7:32:94:60:ee:b6:
e4:ce:e6:23:64:23:09:04:27:32:1c:ad:ce:bd:22:fc:8e:d9:
02:fa:83:25:51:8d:d9:06:0e:ef:e4:91:df:5a:cf:5c:aa:ac:
42:57:a4:49:11:e8:e2:6c:56:ab:33:bd:b5:0f:78:34:98:f7:
7e:f9:2a:29:d1:07:2d:79:2c:bc:1b:0e:93:2c:a8:47:58:c5:
29:89:15:95:a4:1d:73:3e:fe:37:f9:47:4e:0c:8c:62:77:91:
d3:ab:37:85:9a:13:72:bc:a2:b9:3d:f5:fe:dc:5f:a0:c7:3a:
15:e9:a1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net