Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2G8xR8nzTFkC03iQ49cxFsNvTro.roa
File: 2G8xR8nzTFkC03iQ49cxFsNvTro.roa (raw, json)
Hash identifier: KutQW3QGfVM5IpUcRfeUFbSJEYQFrxOxjD6AAimoICs=
Subject key identifier: D8:6F:31:47:C9:F3:4C:59:02:D3:78:90:E3:D7:31:16:C3:6F:4E:BA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01961E4955FFB8320CD30DCC46B134AA48CF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2G8xR8nzTFkC03iQ49cxFsNvTro.roa
Signing time: Thu 10 Apr 2025 06:00:44 +0000
ROA not before: Thu 10 Apr 2025 06:00:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 93.119.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:49:55:ff:b8:32:0c:d3:0d:cc:46:b1:34:aa:48:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 10 06:00:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d86f3147c9f34c5902d37890e3d73116c36f4eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:70:fd:cf:15:2a:2f:ea:7f:24:3a:57:fb:
3a:ab:16:ea:ec:19:62:7a:c2:f2:fc:90:c3:b2:be:
08:c9:41:56:09:75:0f:46:70:4f:48:69:1c:56:ab:
5b:4a:e4:14:ac:d0:d4:68:39:55:dd:dc:c2:c6:f5:
5d:05:68:3a:18:02:e3:5c:c3:f3:f6:e1:a8:41:4b:
a4:f6:f0:f2:e8:c1:14:a9:bf:e3:71:0a:a8:49:e4:
0f:46:5c:c5:91:f7:22:bf:48:62:d5:a0:6a:dd:14:
c7:f7:15:d1:6e:a7:6d:c3:97:3e:ba:6c:89:45:fa:
8d:d3:85:c9:31:d5:3b:f7:79:59:37:3f:78:9a:e5:
e5:69:b3:ba:08:2e:52:85:6d:5a:4e:33:1b:7c:3f:
54:0e:09:57:5b:19:bb:df:52:21:c0:f0:bb:02:cf:
78:dc:df:75:98:62:00:4f:28:fb:20:70:aa:11:e4:
94:29:81:ca:c6:24:9f:62:6a:5b:84:61:f0:7c:c3:
a3:4a:9c:0f:88:2c:2d:1a:4f:c6:44:b3:64:46:1f:
bb:03:76:7c:e0:c2:1e:63:ab:fc:59:62:98:93:52:
2f:67:ee:60:74:15:1c:f6:bc:23:4d:d3:fe:3c:e9:
57:d0:bd:1e:12:10:fe:65:87:d5:49:ad:22:7e:90:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6F:31:47:C9:F3:4C:59:02:D3:78:90:E3:D7:31:16:C3:6F:4E:BA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2G8xR8nzTFkC03iQ49cxFsNvTro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
47:48:77:02:3b:3c:ba:99:8c:e9:37:4e:3f:f5:ea:8a:20:c2:
28:a3:8d:91:16:57:5d:ab:17:bc:0c:73:d0:78:c8:0d:5e:60:
44:23:ca:0c:d8:cb:79:a0:03:a2:f4:ca:cf:52:a9:84:87:2f:
d2:2e:63:60:fa:7f:47:2e:dc:c7:e7:1c:60:fd:d9:26:33:2c:
55:37:8c:33:56:76:82:a1:ad:74:f7:1e:54:77:c2:36:02:4a:
a7:db:95:42:b3:d7:d0:b9:45:60:ae:66:7d:d1:ad:d9:44:f2:
aa:5a:ec:f9:39:f6:4c:af:df:db:7c:96:bb:60:88:df:ce:70:
a3:7d:9c:63:9d:6a:41:d6:60:c6:6a:a6:2c:aa:ff:bb:d3:79:
25:1d:93:44:6c:f7:1b:11:00:3c:98:9b:11:9f:db:54:65:ae:
0d:12:25:1f:02:b9:ec:54:f1:65:2a:49:89:08:19:d5:d7:cd:
ab:ad:82:b0:70:72:9a:df:d4:f7:78:3c:be:a0:72:96:a4:c6:
40:e7:ec:5a:e3:91:c8:1e:fa:7a:15:f1:40:aa:b7:1b:fe:0d:
7e:fc:f4:b2:b0:27:90:34:da:f2:4d:fb:ba:6c:03:7e:53:14:
74:bf:6b:20:b4:e4:ce:0d:f3:28:b0:85:84:f1:88:c0:87:19:
97:75:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net