Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/PMwAzTvxWSjXFX28MV2s8k9HrhI.roa
File: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (raw, json)
Hash identifier: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=
Subject key identifier: 3C:CC:00:CD:3B:F1:59:28:D7:15:7D:BC:31:5D:AC:F2:4F:47:AE:12
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 0194258F9B43282EF4E5CE2FB8B94F5B0AA9
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/PMwAzTvxWSjXFX28MV2s8k9HrhI.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24579
IP address blocks: 193.110.89.0/24 maxlen: 24
193.111.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9b:43:28:2e:f4:e5:ce:2f:b8:b9:4f:5b:0a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ccc00cd3bf15928d7157dbc315dacf24f47ae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:12:08:db:9d:78:22:e9:93:5a:36:0f:e7:
aa:aa:31:c9:50:6f:3c:e1:73:e5:c6:9b:f2:03:f0:
ca:42:0d:a3:7c:ec:02:cf:c7:97:b7:b1:9c:0e:e7:
c0:88:00:01:59:1e:2f:d8:7a:1e:ea:db:b7:c3:e4:
79:be:d2:55:c0:17:18:b1:14:a0:3e:db:09:b8:30:
db:21:c7:29:8f:ec:a7:5a:66:4b:bd:d3:e7:63:69:
bc:95:8f:81:0c:65:0a:79:ac:5c:ae:ee:8f:99:8f:
ee:50:eb:16:77:14:36:2a:46:ed:49:b6:03:53:91:
50:04:0f:1b:fd:2d:0e:8d:1a:b7:b2:ec:77:c9:95:
21:fa:07:9c:99:cb:14:73:3d:87:9b:0b:4d:8a:d3:
b5:60:34:c8:2f:9b:27:1b:94:da:c5:18:9a:f3:b2:
cc:b1:99:25:ac:f7:c5:18:5a:92:33:06:5b:99:b1:
ad:27:f5:05:a8:94:63:50:b0:31:66:69:f1:04:16:
19:98:d2:d6:0e:cb:88:9d:b8:87:c3:01:96:75:88:
a3:11:d8:48:c1:21:d1:5d:ea:4e:64:56:cd:0c:c8:
bf:63:45:74:2b:cb:c9:f8:d8:fa:74:14:c3:5f:e8:
43:85:47:54:c2:fb:49:5d:aa:12:ff:0a:8c:60:7e:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:00:CD:3B:F1:59:28:D7:15:7D:BC:31:5D:AC:F2:4F:47:AE:12
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/PMwAzTvxWSjXFX28MV2s8k9HrhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.89.0/24
193.111.188.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:04:35:7d:3d:0d:40:34:c8:f3:5a:86:c1:7e:02:96:c8:c9:
e0:56:b3:ad:9c:b2:59:c7:73:30:55:f9:4e:d5:06:b2:71:57:
8e:4a:11:73:f0:56:8f:c4:01:db:91:09:8f:05:e1:df:1b:5d:
54:71:b2:c0:14:a2:be:c9:28:e3:c0:82:9f:e3:ff:eb:8b:1a:
8f:65:d9:ad:0f:5f:90:69:3c:80:09:1b:7e:34:af:8c:f8:b7:
f6:cd:99:81:89:6d:03:ca:50:5b:2d:f5:94:cc:b5:75:45:74:
54:1e:90:5a:1d:44:fb:5e:ba:e6:c2:02:9d:30:78:24:93:59:
d1:78:2f:c2:83:f3:7f:e4:40:53:2b:91:28:71:5c:a6:32:1e:
83:5e:02:13:00:30:aa:bc:3f:cc:f2:2a:32:04:67:20:09:99:
b5:58:d9:62:6f:8b:ac:8a:20:ca:14:25:ca:d9:c4:9a:93:12:
2d:f7:96:77:7e:f9:63:67:8a:d3:47:ea:72:ec:b2:33:8a:40:
d1:82:99:bf:c5:a4:2e:72:bc:af:c8:e6:df:ed:11:4d:69:bc:
72:f0:8f:ec:9e:e4:c1:ff:8c:33:17:02:01:15:64:e2:77:bd:
2f:e6:2a:0d:a8:4e:15:c6:7e:e9:c1:2e:8e:cf:aa:d6:6c:c2:
c5:fc:fa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:33 2025 by rpki-client on console.sobornost.net