Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa
File: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (raw, json)
Hash identifier: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=
Subject key identifier: 79:30:F9:5F:B7:94:57:13:DB:13:E6:C2:44:7F:50:1B:12:D1:64:3B
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 01942143D248FEB3FF9F3FA38C22F1BB72F6
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57022
IP address blocks: 193.35.28.0/23 maxlen: 23
193.35.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d2:48:fe:b3:ff:9f:3f:a3:8c:22:f1:bb:72:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7930f95fb7945713db13e6c2447f501b12d1643b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:37:0a:13:d8:1a:99:6b:df:26:c7:8c:b5:
ab:7a:b7:54:95:7e:1d:86:59:0e:32:9e:a3:56:3a:
e7:37:4c:e1:19:11:37:cd:af:79:7b:19:34:29:e6:
cf:70:ed:88:53:1a:82:16:57:c0:45:46:48:53:e3:
1f:da:da:89:0c:52:d5:0e:75:95:26:82:84:ef:86:
e7:81:d8:27:9b:7b:ca:63:6c:e4:56:06:4e:7e:38:
79:63:d5:2e:bb:2f:35:01:57:da:19:cb:d9:04:95:
0d:10:b9:8b:74:ae:39:35:6c:66:b3:91:a7:bb:de:
2d:04:0b:8f:21:cb:76:0d:26:f8:2e:74:46:09:d6:
6d:13:52:6f:ab:82:ce:e3:8c:9e:91:9d:d6:68:63:
56:b9:d9:1a:03:14:ef:3b:d9:64:4c:9d:a2:da:c1:
43:dd:c8:cf:4b:0f:9f:b8:9f:70:78:df:37:f1:79:
7a:1b:9c:1f:d8:5e:40:46:ae:be:4c:7c:7c:2a:a4:
40:04:a8:53:c9:ae:1d:ba:06:b4:98:83:5b:b7:2c:
5b:38:54:ee:36:ba:fb:43:41:b0:13:25:16:33:83:
43:54:94:22:db:a0:34:19:91:7f:29:c1:90:28:97:
65:8e:e8:d3:28:10:5f:87:0f:7d:18:39:a0:61:9a:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:30:F9:5F:B7:94:57:13:DB:13:E6:C2:44:7F:50:1B:12:D1:64:3B
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.28.0-193.35.30.255
Signature Algorithm: sha256WithRSAEncryption
32:1d:0c:dd:5a:3b:85:7a:95:17:c1:72:ab:1d:06:a8:4b:a6:
9c:c6:27:cb:2a:6b:19:4e:c6:f3:6d:8c:2f:1e:2d:f5:13:de:
7b:c2:14:2a:ec:a6:f0:74:ea:fe:94:88:5f:3b:5f:5f:0c:e2:
b8:ea:46:9e:81:cb:27:18:94:55:ab:61:0e:d1:46:c9:ea:2a:
46:f2:db:8b:2b:1a:7b:6e:98:9d:44:45:f3:9c:bf:bc:61:8e:
9e:b7:ee:43:4b:28:a2:7f:3f:94:b2:15:a8:b9:e2:8a:1a:bb:
6b:d9:c6:bf:22:32:b0:07:9e:0e:fc:e0:bd:96:f0:63:b6:db:
be:1f:88:c6:df:56:0b:6c:7c:f1:6f:e3:9c:ae:c0:33:fc:de:
c2:13:c9:25:8a:d8:81:2f:44:2d:4f:c4:bc:f2:d6:3d:5a:26:
6a:29:1b:10:93:76:16:5f:7e:44:52:86:c6:c2:d2:0f:04:8a:
62:51:3d:92:c6:33:7e:cf:9e:0d:46:b9:5c:17:0d:f8:5f:bd:
4b:bd:ad:c1:f7:7b:df:6b:4c:a8:20:06:53:25:18:f4:dd:66:
ba:75:04:2c:94:08:f2:2c:18:d4:c9:0a:3f:29:52:a4:4b:85:
8e:7a:ee:95:86:72:a6:78:ae:12:cc:eb:04:db:c4:61:83:e0:
38:8f:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net