Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa
File: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (raw, json)
Hash identifier: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=
Subject key identifier: 6B:22:66:CD:80:4D:7D:C7:6A:DC:D3:C9:F0:CD:DC:14:E5:5F:CC:2B
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 019425FC5D608CAA24F29D8B191B2EBD03CC
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa
Signing time: Thu 02 Jan 2025 07:48:03 +0000
ROA not before: Thu 02 Jan 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44679
IP address blocks: 193.201.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5d:60:8c:aa:24:f2:9d:8b:19:1b:2e:bd:03:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Jan 2 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b2266cd804d7dc76adcd3c9f0cddc14e55fcc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:16:7a:f1:01:06:7c:54:3a:91:3e:69:6a:
ca:84:46:47:48:4c:43:47:c9:be:3f:e3:c7:b5:08:
78:ec:a4:02:bb:d3:3d:1a:34:36:c5:6a:ca:f7:6b:
e1:81:da:d1:c7:f8:fa:3e:19:71:b6:79:65:9a:96:
55:f8:9d:8c:bf:09:f7:8c:52:e0:d4:d1:bc:c5:71:
36:0d:2d:4b:dc:ed:bc:f5:f4:13:7b:32:eb:99:35:
e8:91:b2:32:69:18:19:fb:7d:d7:d4:86:00:db:9b:
0d:55:bb:8e:d8:0f:ce:63:08:79:4b:24:57:6f:74:
76:a6:fd:a8:96:5d:b9:dd:f7:e0:a9:11:4f:a1:45:
76:08:4c:6a:2c:8d:1c:f1:52:a2:3a:57:fc:5e:53:
2d:f2:30:66:53:bc:74:fa:c3:97:87:c0:6b:dd:16:
e7:4f:28:02:c7:da:25:6c:b0:c8:2e:11:79:fc:f7:
8c:0d:b0:a0:88:a4:8d:f8:76:9d:f2:fe:5a:d4:41:
fc:02:04:a8:0e:60:04:30:b5:9e:19:ac:b2:9a:bc:
42:13:d7:d2:0d:91:72:f7:ce:b7:5f:6c:ac:9a:5c:
7e:d9:c3:cc:a8:7c:f2:ec:97:ac:b5:75:09:fa:97:
ea:9c:56:94:f4:fd:64:91:99:df:98:f5:8d:1d:d6:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:22:66:CD:80:4D:7D:C7:6A:DC:D3:C9:F0:CD:DC:14:E5:5F:CC:2B
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.232.0/22
Signature Algorithm: sha256WithRSAEncryption
84:86:80:b1:0b:90:f1:f1:23:c2:74:f4:1d:21:a7:e3:7f:8d:
12:6c:34:5d:8c:6e:c6:93:f2:fe:0c:ce:72:d0:db:9b:6d:03:
8a:8b:e5:d1:7c:0e:ee:b7:77:c1:61:cf:8f:d0:10:28:6a:90:
87:9c:36:5c:cd:e1:d1:be:e6:ff:3b:37:2e:bb:39:71:a2:60:
5b:36:c2:f4:10:6a:91:39:b7:b5:bd:b4:5c:f2:d3:8b:c5:93:
cd:a7:08:79:65:54:2d:03:94:20:90:17:dd:af:fe:47:3f:75:
3e:05:2f:67:f8:63:26:a6:84:25:35:95:f6:d6:a7:a9:e0:b7:
f2:80:98:b1:17:6d:ee:2e:da:1a:3e:09:b8:52:62:25:b0:43:
0b:8f:4e:f9:9d:1a:b3:49:5d:b4:bd:b4:ea:21:86:44:43:8e:
33:63:67:e3:ce:1f:2b:0e:81:79:ca:bb:5d:a2:61:3c:2b:df:
2e:02:40:23:ec:d2:14:f1:0d:fc:2f:d2:9c:44:75:12:c3:e8:
52:53:83:35:48:1b:da:99:79:c5:37:36:bc:04:0d:d3:56:37:
9f:19:54:5a:cc:54:fe:4d:47:26:76:6c:76:c3:3a:77:7a:2f:
7a:39:e3:ee:09:78:a9:fe:4b:5f:b5:f1:d7:08:19:8f:5f:b5:
f8:5f:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net