Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/IZ4_8o0uG1RVAax56_hcAW3WTtc.roa
File: IZ4_8o0uG1RVAax56_hcAW3WTtc.roa (raw, json)
Hash identifier: BLF9NvSAp12xGKGCWF6fmakXoIQEimqM8wkdCYNJdbY=
Subject key identifier: 21:9E:3F:F2:8D:2E:1B:54:55:01:AC:79:EB:F8:5C:01:6D:D6:4E:D7
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 01941FFAB38C40F4ADA71A77832ED313E96B
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/IZ4_8o0uG1RVAax56_hcAW3WTtc.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50889
IP address blocks: 193.246.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b3:8c:40:f4:ad:a7:1a:77:83:2e:d3:13:e9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=219e3ff28d2e1b545501ac79ebf85c016dd64ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:06:fe:37:d6:5d:d7:2e:a0:d3:d7:c7:4c:57:
23:62:1c:47:9b:8e:0c:54:af:9d:84:e5:1a:88:25:
cd:0c:b2:5b:df:3d:c7:8b:6d:20:45:9a:36:5a:52:
9c:ab:e6:da:27:08:fb:55:83:2d:ce:22:b4:73:a2:
c9:c7:fd:94:b9:47:99:ef:c1:db:7b:9c:6d:ea:20:
ea:81:d2:43:4f:61:92:48:91:5d:c3:bb:1d:69:5f:
ec:68:9b:96:a8:12:55:ec:e1:14:a9:c4:30:40:7e:
14:19:25:c3:e9:8c:66:91:f2:35:2a:47:16:62:9a:
f0:9b:85:d4:92:a2:37:80:33:cf:eb:d2:d9:a1:b3:
d1:6c:70:ab:90:df:7d:6b:44:91:65:ab:1a:0b:cc:
3d:78:fb:74:76:9a:24:46:ef:98:0f:4c:a5:3b:75:
1f:5d:14:36:b8:93:9d:1d:13:2e:8b:7f:cc:e2:ab:
ba:42:72:6c:dd:c1:24:ed:42:8b:26:0e:38:c8:87:
7a:1b:2f:89:20:c3:c2:f1:43:b1:49:2f:35:67:17:
fd:ff:e7:17:33:cc:79:99:70:6c:e9:77:29:d8:96:
07:62:47:1a:b9:0c:da:84:89:13:02:8a:8b:ca:7a:
52:e5:44:9a:d4:bf:b1:36:d6:fc:42:68:7f:22:2c:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:3F:F2:8D:2E:1B:54:55:01:AC:79:EB:F8:5C:01:6D:D6:4E:D7
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/IZ4_8o0uG1RVAax56_hcAW3WTtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.51.0/24
Signature Algorithm: sha256WithRSAEncryption
75:69:94:ec:cd:c7:81:6f:2b:25:01:46:d4:bf:b9:1d:70:88:
81:36:98:75:65:b0:b3:ec:76:50:29:6b:ea:ef:51:a8:30:52:
82:f8:78:12:f6:41:ad:7a:0e:7e:a7:a0:bf:20:e7:07:41:53:
cd:3f:61:b8:cd:62:98:80:8c:c3:e8:fe:de:2a:94:1c:dc:3f:
3e:86:ca:a4:2c:f1:9b:25:88:93:98:fa:89:2a:d0:41:b0:ba:
96:32:6d:07:84:7f:e3:7c:f3:ad:5f:ae:d5:7c:f2:da:3f:28:
dd:1b:03:1a:13:88:08:48:db:57:0f:31:89:b0:06:82:07:f0:
bf:f2:4e:48:82:dc:32:7c:15:1d:11:66:70:8f:1c:d1:23:87:
fe:e7:b7:02:ac:55:44:05:ff:02:21:08:05:fa:2f:c9:4b:34:
a9:ee:e9:92:9a:c9:57:bd:02:f2:45:99:2d:af:88:3b:64:cd:
08:b7:cb:f8:ed:c3:7f:9d:39:78:36:46:90:68:c0:ac:a5:6d:
01:c6:bb:8b:15:72:7c:1e:82:3c:4a:61:39:f1:43:16:0c:b8:
bb:78:c1:f5:0e:f3:0d:85:91:b9:ea:10:45:d3:f7:df:a4:c4:
9e:ae:52:93:62:e8:b0:7f:75:56:ae:8a:a9:e0:5b:9f:53:ef:
57:45:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net