Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/_L4_714o--k52AHUTKE5ELIZMFQ.roa
File: _L4_714o--k52AHUTKE5ELIZMFQ.roa (raw, json)
Hash identifier: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=
Subject key identifier: FC:BE:3F:EF:5E:28:FB:E9:39:D8:01:D4:4C:A1:39:10:B2:19:30:54
Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial: 01942521E6FD590E0554EDF3E9AFF6BE1D56
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/_L4_714o--k52AHUTKE5ELIZMFQ.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41910
IP address blocks: 194.33.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e6:fd:59:0e:05:54:ed:f3:e9:af:f6:be:1d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcbe3fef5e28fbe939d801d44ca13910b2193054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:1a:4b:48:a4:7b:f9:62:43:15:50:b0:01:
3e:71:06:99:c0:31:4e:2f:e6:1c:ed:42:92:40:54:
29:77:34:e0:08:09:36:8d:36:96:f3:c6:27:ac:22:
ba:45:11:da:a3:a3:28:22:4f:2d:17:76:cb:98:7d:
9f:ab:28:58:4b:48:67:28:f8:e6:00:51:4a:a6:6e:
9d:e6:e3:c4:bf:ce:5f:99:f5:4b:18:0a:cb:fc:d6:
e0:eb:66:ae:a1:41:2f:ee:8f:75:ed:9c:22:0c:c3:
c1:60:b5:76:ed:22:f1:2e:d2:4d:3d:6a:24:e3:b3:
40:1a:26:b4:62:3a:8f:f3:8d:7d:63:17:bc:48:73:
28:1b:18:8a:49:35:49:f2:32:f2:0e:99:01:e0:07:
f7:f7:5f:78:66:58:96:8d:7f:04:da:47:66:de:99:
01:cc:74:74:c2:5c:32:9b:cd:66:b6:bd:20:97:55:
fb:47:dc:d9:67:9d:0c:8b:71:ee:7d:b4:b5:68:dd:
4b:fc:91:a0:66:66:03:1e:cb:5f:9e:6e:07:62:9c:
c0:69:88:ce:cd:8b:d6:d5:1f:a3:73:9c:9e:22:9a:
1f:9d:42:b4:47:20:20:6a:91:a4:33:a6:c7:97:16:
99:aa:1d:8c:8e:50:50:ab:e2:e9:ab:e9:ff:21:97:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BE:3F:EF:5E:28:FB:E9:39:D8:01:D4:4C:A1:39:10:B2:19:30:54
X509v3 Authority Key Identifier:
keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/_L4_714o--k52AHUTKE5ELIZMFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f3:c0:c6:a9:f9:bc:e9:11:58:07:06:08:c7:c6:d1:7e:22:
a1:94:c2:67:b6:8c:09:43:03:6c:8e:de:87:3f:05:0e:a4:64:
ad:f3:19:6f:60:28:a7:f9:10:55:84:be:eb:c1:3a:ec:13:ff:
9e:36:43:57:f1:16:d6:6f:63:ee:1b:60:a5:89:a0:f4:61:bb:
40:2e:69:17:61:81:0c:8f:49:3a:40:35:10:d7:d4:67:52:49:
ed:a1:81:4a:a1:95:9b:94:a7:a9:75:d1:23:96:53:18:9a:5d:
fb:98:24:5f:45:8d:cf:2c:34:ac:0d:a1:c9:9d:3e:db:79:82:
5f:82:6b:b0:96:e8:af:76:ef:12:80:22:b7:21:31:78:b8:10:
c1:f1:80:5e:a6:17:9d:2b:08:4e:06:58:a5:4e:c0:a4:69:39:
c5:3f:90:6e:a8:9a:5e:55:38:39:c1:86:6d:e9:ab:a6:5a:82:
22:23:ad:aa:a1:93:e6:e8:88:83:6f:f1:b0:67:70:97:a4:3f:
29:e4:a5:54:e4:47:6d:2f:a9:10:78:2c:68:56:bf:38:50:c2:
5b:ea:44:ba:6a:8b:e8:5c:c0:cb:18:01:c8:31:6a:01:a5:4b:
d0:0c:87:48:f9:fd:78:72:6f:dd:a3:bd:2b:7b:9b:67:c3:82:
5f:a8:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net