Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/UThfbWvZb2PXAmFnxUbwmcadIvs.roa
File: UThfbWvZb2PXAmFnxUbwmcadIvs.roa (raw, json)
Hash identifier: SO7N8NAXEb8d0CKRuGu75MSAjtkwodWQ5MaMjLOJVMY=
Subject key identifier: 51:38:5F:6D:6B:D9:6F:63:D7:02:61:67:C5:46:F0:99:C6:9D:22:FB
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 0194236A4B44160DAE97CCEDEA8BED874A67
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/UThfbWvZb2PXAmFnxUbwmcadIvs.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51186
IP address blocks: 194.28.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4b:44:16:0d:ae:97:cc:ed:ea:8b:ed:87:4a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51385f6d6bd96f63d7026167c546f099c69d22fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:1e:64:63:a7:6f:8f:e6:2e:36:e5:c4:03:
89:f0:c5:b2:87:7d:14:09:f6:b6:a5:b4:9c:2a:65:
f7:ce:b3:c6:83:5d:ec:33:5c:f0:00:d0:9e:93:11:
95:6e:eb:c4:2f:fb:27:5e:61:92:2d:a4:29:40:6a:
dc:60:65:93:50:98:cf:e4:7e:5d:7d:86:6d:0f:63:
6c:eb:cf:4d:42:8d:f4:3e:c8:21:82:d7:20:16:e8:
9c:85:4e:c5:3a:e1:a5:81:79:2c:fd:5b:4e:7f:46:
27:3e:88:41:4c:78:4d:bb:75:9d:2f:b0:c6:95:40:
c2:83:84:18:37:a6:af:77:b3:52:60:b4:2d:8b:ae:
9e:de:0d:e9:65:72:5c:ac:dd:87:2f:c3:7e:cb:dc:
75:dc:79:3f:be:90:78:11:f5:8d:42:bf:cf:d1:c0:
fd:47:6f:0f:e4:ae:b9:bb:74:bf:59:ef:b0:8d:5a:
ed:c1:8b:43:e3:10:a5:a3:f1:60:a0:6f:50:f0:b0:
96:3c:cd:00:e6:33:db:ce:a4:9b:ec:ab:0f:76:78:
d7:4b:7a:67:3b:0a:a3:81:cb:bc:6e:4e:ec:7d:eb:
f4:7c:4d:5a:10:b0:2f:46:44:27:67:4f:5d:bb:0d:
71:2e:ef:5d:d4:44:53:f3:ad:e1:48:da:07:0b:b2:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:38:5F:6D:6B:D9:6F:63:D7:02:61:67:C5:46:F0:99:C6:9D:22:FB
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/UThfbWvZb2PXAmFnxUbwmcadIvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.236.0/22
Signature Algorithm: sha256WithRSAEncryption
05:ee:3d:ac:88:ad:4b:7e:be:1e:6e:fc:2e:07:b6:4e:00:29:
87:59:90:a3:2c:83:77:5a:66:d1:60:e8:af:b8:b9:ca:19:90:
40:30:92:99:9d:9b:0c:c3:24:56:7b:b0:f3:0f:d2:de:c7:89:
b5:a7:e1:78:65:3d:2e:11:1d:f8:2f:06:1a:ef:7d:ca:25:45:
4a:da:1f:65:22:7a:1d:70:85:64:e0:c0:55:0b:2a:b7:bd:c7:
1a:ac:10:88:9d:6f:64:05:5b:f0:14:4f:91:f2:24:f7:d4:d1:
d7:ff:2a:44:53:95:f0:d8:42:6c:2b:4c:dd:59:34:1f:d4:d1:
a2:15:30:32:48:2c:95:02:be:32:70:13:ed:59:86:21:9d:90:
d7:40:94:85:19:b7:dc:62:f5:91:c5:1c:a8:07:43:dd:4a:cf:
8a:3f:1e:5f:6e:3c:4d:03:e5:c3:65:75:bb:9a:29:27:5e:7a:
34:a2:73:17:c9:d2:91:c1:2f:50:5f:d8:a3:88:f1:ff:55:72:
75:8f:a5:30:f1:9d:b7:fa:6d:9b:38:18:1e:ee:e8:5f:e7:b6:
24:a8:46:56:fa:bd:d8:41:4c:fc:d1:6e:68:1f:ca:24:09:5d:
28:34:a0:2e:2b:03:39:65:59:2c:2f:ed:06:64:84:5e:18:f6:
f4:9d:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net