Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/pSUsVG_bS5VDyx7FvEkF49mcbeU.roa
File: pSUsVG_bS5VDyx7FvEkF49mcbeU.roa (raw, json)
Hash identifier: jhzQnUCMeb1r1pf3095h6nJHTJLIAeqwLmduD2zh2Kk=
Subject key identifier: A5:25:2C:54:6F:DB:4B:95:43:CB:1E:C5:BC:49:05:E3:D9:9C:6D:E5
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01946B0216FAFA28976675710FA0C0DC97CA
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/pSUsVG_bS5VDyx7FvEkF49mcbeU.roa
Signing time: Wed 15 Jan 2025 17:28:06 +0000
ROA not before: Wed 15 Jan 2025 17:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 188.94.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:02:16:fa:fa:28:97:66:75:71:0f:a0:c0:dc:97:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Jan 15 17:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5252c546fdb4b9543cb1ec5bc4905e3d99c6de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:12:01:b0:85:58:4d:65:71:8b:94:1d:70:
2d:8a:b3:51:72:ef:8c:05:68:0a:9f:32:5a:09:2d:
61:24:11:9b:8b:11:42:6a:8b:80:a4:ec:f2:f1:89:
bf:11:1f:6c:00:75:c2:05:ed:95:f9:81:7f:ac:ac:
a2:17:5a:fe:ca:28:dc:35:82:78:81:0e:f5:13:d2:
d1:3e:29:9d:1d:59:e4:e8:06:27:ea:80:f7:8d:25:
4a:a6:69:32:36:2c:3e:2e:e3:19:70:fd:48:c9:43:
41:84:d8:9a:38:4e:6d:fc:70:9f:36:34:6c:f6:e2:
3c:2b:20:bd:68:c3:10:a8:df:87:80:a5:0e:5f:3f:
81:71:1e:e7:86:23:ae:e5:1c:8e:bf:f3:80:a5:bb:
25:21:b1:d0:11:3e:3f:a2:aa:c9:e8:a3:01:49:57:
71:46:89:bd:f2:5a:91:41:20:3e:ef:80:d5:12:a3:
c2:92:9e:ee:78:d3:40:11:e2:94:92:d8:10:8d:2b:
6a:23:3c:03:c2:89:71:6d:3c:2f:83:27:dd:5e:78:
19:e1:e7:b7:a5:c9:52:8d:1e:18:81:c2:50:a7:ef:
21:6f:bb:a7:53:3b:e1:a1:0f:9a:d1:73:3d:ca:51:
93:58:81:c2:48:c2:ad:22:b8:d9:fa:82:21:98:41:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:2C:54:6F:DB:4B:95:43:CB:1E:C5:BC:49:05:E3:D9:9C:6D:E5
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/pSUsVG_bS5VDyx7FvEkF49mcbeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:57:48:09:36:ff:25:a3:46:c4:69:cd:a6:a2:9b:8e:96:5d:
28:6e:e1:9d:2b:9e:95:47:a2:11:f7:43:e3:6f:6a:19:33:b6:
1e:cc:65:95:5d:a3:18:3b:70:af:4d:4c:64:21:7c:b6:11:2c:
13:8e:66:6e:a6:96:e3:fb:a9:17:50:32:4f:92:b7:09:29:f2:
c6:c3:a7:9b:a0:e4:ac:70:65:d6:ec:34:45:ce:17:85:68:14:
81:cb:ec:8a:ac:1f:a6:86:f3:f1:c6:be:92:c6:ba:41:f2:8a:
66:2c:f9:dc:e4:29:02:d2:e4:a0:89:bb:f3:19:63:51:fe:2e:
fd:fb:b8:41:b6:6f:c8:2a:62:a9:a6:de:b7:6d:13:96:e1:36:
c8:a2:80:8d:79:f3:82:ec:e8:f6:47:f0:91:ba:4f:bb:bc:57:
8c:b1:2f:e3:a7:e6:2f:40:30:2a:85:05:01:28:a5:f3:8a:c6:
e9:49:e3:f2:19:5a:1f:d4:38:d9:e1:8a:f1:ef:55:bd:a4:09:
99:d4:f0:3f:ef:a6:44:78:75:79:f1:31:9c:76:58:d3:0a:45:
7f:c1:40:bb:85:51:c7:81:d1:d7:24:b5:57:e8:d7:29:13:45:
16:7f:6d:e4:5f:a3:4b:a7:75:41:48:8b:53:2e:6f:2e:fb:e5:
26:03:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:06 2025 by rpki-client on console.sobornost.net