Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/v5LwLHwuCUZrT_0G6r3v0bfLSQs.roa
File: v5LwLHwuCUZrT_0G6r3v0bfLSQs.roa (raw, json)
Hash identifier: +ztaiH2S/aHDtgvKfj/YkXPsW58SyJ9uS27Ej7psyFg=
Subject key identifier: BF:92:F0:2C:7C:2E:09:46:6B:4F:FD:06:EA:BD:EF:D1:B7:CB:49:0B
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 01941F8CA6F44C70C8B42BDA539F8D7F58D2
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/v5LwLHwuCUZrT_0G6r3v0bfLSQs.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41969
IP address blocks: 193.104.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a6:f4:4c:70:c8:b4:2b:da:53:9f:8d:7f:58:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf92f02c7c2e09466b4ffd06eabdefd1b7cb490b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:ea:11:e5:6f:3f:c0:02:1b:92:a3:a1:47:
3b:6c:a4:d1:88:de:ca:22:38:5a:09:de:1e:9a:7e:
ac:5e:a6:42:b4:87:88:0b:3f:07:f1:fd:e8:cc:51:
aa:d5:23:f2:46:65:2b:f5:b9:80:6e:c9:fc:56:4c:
a5:50:ef:61:c7:53:05:c9:2d:ed:2e:34:9f:7e:93:
d7:ee:58:b0:cc:2a:a7:8b:59:fb:31:76:76:2a:5d:
c7:b1:0d:51:19:9e:20:1e:f9:3d:75:4b:9f:b0:af:
5d:66:ae:8f:38:49:35:c1:b0:20:93:df:04:d0:65:
cb:c5:80:26:27:7c:02:81:c8:cd:ad:8d:c1:60:c0:
38:e7:4b:14:8b:4a:a5:84:9b:d5:e8:53:62:75:18:
81:89:c6:6e:0a:84:29:42:60:04:65:1e:88:3a:d2:
bc:51:e6:6e:da:f4:82:67:4f:a5:b6:6a:5f:9b:97:
e9:a3:fe:1c:f4:30:c4:b3:f8:08:ca:09:3a:6d:6e:
ad:b9:f3:dd:49:a0:ee:03:4b:fd:bd:68:ca:ca:79:
0c:b6:19:2d:88:14:56:e0:8c:67:fe:8d:9c:98:ce:
2b:c8:b5:29:d3:f8:89:f5:5f:63:f7:03:f5:8d:96:
dc:b8:bd:8b:9b:8b:0a:54:82:31:10:ff:40:d5:b2:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:F0:2C:7C:2E:09:46:6B:4F:FD:06:EA:BD:EF:D1:B7:CB:49:0B
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/v5LwLHwuCUZrT_0G6r3v0bfLSQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.174.0/24
Signature Algorithm: sha256WithRSAEncryption
36:51:ed:23:6f:5f:72:47:28:22:76:39:61:c5:01:5b:81:7e:
42:d3:13:b6:37:76:3d:b7:2c:c3:98:2f:93:35:d5:83:0c:21:
12:13:ea:3a:10:65:35:ad:38:e2:f6:1a:e6:09:8b:b6:e3:e1:
b2:33:e6:1b:8f:e7:a0:e7:f1:12:3e:a4:68:77:44:f9:d9:0e:
40:18:e0:06:4d:a2:4f:cf:27:f8:68:88:da:f3:5a:be:fd:8d:
86:72:b0:b2:4d:ba:c8:3d:6a:4a:6b:e8:64:63:b3:94:1a:18:
94:a7:5d:6d:ee:fb:16:26:8f:65:c7:a7:d1:fc:8e:43:ce:31:
e0:cb:ae:90:90:be:e9:46:c0:c7:f6:6b:f6:f0:25:b1:61:82:
b8:21:57:02:5b:d0:b4:84:84:ab:30:58:d3:d3:91:65:2e:31:
20:09:08:ba:18:c5:c8:21:d5:1c:82:31:21:5d:9f:7d:c7:6b:
20:b1:75:21:61:d5:d1:2a:c9:45:51:6f:a7:3c:29:09:d4:9e:
3e:ae:af:4f:37:ad:ad:9a:a1:fc:03:b5:ef:8b:70:52:4d:4a:
b6:b7:07:d2:71:01:f2:82:bc:07:3a:26:9a:40:ec:e9:6f:bd:
a3:a5:c5:6b:65:e4:1a:91:21:68:af:0c:1b:fe:3b:40:5b:43:
f5:24:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:26 2025 by rpki-client on console.sobornost.net