Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/CK4siPWBYfHEvMudVxcsDQPxAR4.roa
File: CK4siPWBYfHEvMudVxcsDQPxAR4.roa (raw, json)
Hash identifier: YhDnpIVqIiFTzSv32iL9GB9Nu0H7+HMcl1R+Eah/CyM=
Subject key identifier: 08:AE:2C:88:F5:81:61:F1:C4:BC:CB:9D:57:17:2C:0D:03:F1:01:1E
Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial: 01942748660C62C463D3A930A8A7292F252E
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/CK4siPWBYfHEvMudVxcsDQPxAR4.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204949
IP address blocks: 213.134.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:66:0c:62:c4:63:d3:a9:30:a8:a7:29:2f:25:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08ae2c88f58161f1c4bccb9d57172c0d03f1011e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:f6:70:6d:c6:db:f6:cf:7b:6a:a2:28:d9:
69:de:b5:77:1c:14:93:cf:ef:ac:2f:99:5f:b3:ab:
f7:25:3c:8b:43:35:1f:b3:9a:f6:b6:c1:73:83:4a:
d9:1f:58:a9:b6:a0:f8:e6:86:5f:35:22:7d:6f:0c:
ae:31:f6:86:a7:ef:82:d6:df:f6:9a:2e:1d:74:d9:
5c:de:6d:e9:8c:14:b7:68:4b:3b:6f:32:7c:a7:0a:
f0:76:d5:e2:4a:90:d9:9b:64:74:01:2e:50:af:f9:
cd:b3:64:e2:5e:47:0d:f2:ac:d4:12:38:5a:b6:50:
45:51:f6:a7:90:87:15:54:c7:f3:1b:f2:96:cf:cb:
b9:84:7e:91:ff:1f:78:31:1a:59:3b:7e:14:7f:d4:
6f:b0:8c:49:c8:c8:02:20:9b:5a:c8:5c:d9:8b:f5:
17:19:e4:da:e0:27:57:60:ad:9e:4d:31:fa:5e:f4:
7b:89:34:de:60:1f:17:84:b0:1e:09:b9:7c:55:c3:
fc:99:ef:7b:5d:ae:86:86:35:e7:08:4b:5c:d5:dd:
89:2b:aa:f0:eb:bf:13:6c:6e:6d:e8:76:ca:ca:b5:
9c:9d:53:1f:43:83:45:8c:ed:c4:a6:09:69:81:4c:
64:95:ea:cf:86:89:9c:35:ac:ca:1a:ce:78:b1:17:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:2C:88:F5:81:61:F1:C4:BC:CB:9D:57:17:2C:0D:03:F1:01:1E
X509v3 Authority Key Identifier:
keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/CK4siPWBYfHEvMudVxcsDQPxAR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.10.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4b:8c:11:0f:d8:d2:69:18:14:ae:30:19:ed:a6:40:6c:ee:
bc:b1:8d:d5:00:46:8c:03:ac:8c:bc:e0:78:3a:80:d1:e2:e7:
9f:b8:e8:04:d8:45:9c:e0:b9:f8:3a:a0:3f:fb:bc:ad:93:2a:
ea:de:8f:f6:a7:48:31:c0:1e:fe:50:88:29:2f:43:55:dc:02:
54:c2:28:59:f5:64:90:3f:d3:92:e8:13:38:1f:4d:b1:a8:99:
65:9d:50:f0:fd:0c:e8:99:28:5d:7c:65:ba:fe:9c:77:ed:dd:
f7:69:17:39:44:08:12:2d:1c:21:25:1f:54:9a:68:44:71:44:
e1:af:db:53:4c:89:13:54:1e:7e:53:29:2d:e4:8d:fb:c0:19:
1c:87:36:de:91:2d:5d:f3:19:1b:01:e9:d2:c1:83:a9:2b:b1:
90:19:e4:32:f1:0a:74:e0:e2:39:99:c5:03:d4:55:ea:6c:31:
f0:bc:1e:34:13:fa:3e:eb:ba:f8:f4:9a:e6:f0:73:53:bf:5c:
4f:1b:e3:77:fe:be:e8:44:c0:4a:1e:84:07:88:40:1a:70:cd:
04:e9:12:9b:4d:af:2e:fc:3b:d7:8e:31:c0:f6:16:69:3a:eb:
d3:ed:89:58:f1:26:26:73:73:49:d4:fe:66:ba:24:04:71:0e:
3c:23:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net