Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/_JhAhRBJC8Nb5PAAydr7b39_4_c.roa
File: _JhAhRBJC8Nb5PAAydr7b39_4_c.roa (raw, json)
Hash identifier: ieSA2cvoYnKzjgdt7WaMk8MY4NDkHZh/ubbeQu9eRXQ=
Subject key identifier: FC:98:40:85:10:49:0B:C3:5B:E4:F0:00:C9:DA:FB:6F:7F:7F:E3:F7
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FC56F401F27B73E64B07A5E554D98
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/_JhAhRBJC8Nb5PAAydr7b39_4_c.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61338
IP address blocks: 89.174.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c5:6f:40:1f:27:b7:3e:64:b0:7a:5e:55:4d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc98408510490bc35be4f000c9dafb6f7f7fe3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:b5:57:07:5c:ab:c6:00:9f:70:8e:74:75:
95:d9:90:d6:cf:f1:6f:07:06:9e:07:09:64:80:e3:
c8:02:6f:5f:68:6e:60:ee:4e:f3:32:2f:e4:b1:27:
5f:f0:a9:f1:55:38:b8:d7:25:94:b7:9c:b2:a8:5a:
2c:d8:30:25:64:94:d1:98:30:b8:e8:7d:f9:f7:d9:
b1:c9:38:5b:b5:af:59:5a:5f:d3:7f:81:c3:ff:00:
df:da:b2:37:87:5b:be:22:01:6b:5f:de:6a:62:d8:
30:f6:e0:5a:61:9c:48:a5:7e:04:3c:2a:1d:61:eb:
bf:fe:f3:77:ba:9a:f0:dc:2d:eb:15:d0:77:68:ee:
7c:b9:30:c3:5f:86:c5:ed:51:92:63:43:f8:14:69:
f0:2e:9c:3a:7d:a0:c4:19:48:f4:74:22:b3:51:11:
ae:53:c9:29:ed:35:8c:55:57:5b:d5:93:52:1f:ba:
b6:78:8a:0c:6b:4d:88:b9:eb:66:f8:7c:99:6b:7b:
69:8f:16:01:a3:bf:b1:dd:02:28:f0:7d:be:dc:f3:
c7:79:89:fa:c2:7f:f6:8d:1a:24:5e:88:cf:2f:83:
a6:c3:be:e3:0e:5a:f7:be:7e:6a:d9:cd:60:6e:b5:
ff:ad:41:50:34:6c:da:75:41:0f:92:e5:e0:00:92:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:40:85:10:49:0B:C3:5B:E4:F0:00:C9:DA:FB:6F:7F:7F:E3:F7
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/_JhAhRBJC8Nb5PAAydr7b39_4_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.174.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:16:21:ba:de:1c:f5:88:96:4a:87:f9:c6:11:33:80:cd:87:
3e:10:bb:d9:1c:c3:27:5f:76:bf:00:9c:49:b1:ec:90:6f:03:
66:e8:c9:b5:0c:bf:d7:5e:7d:d7:e5:13:22:3d:71:4f:fa:9c:
e6:7b:b8:b8:89:6a:88:c4:2e:a4:ec:6e:72:d3:c0:ff:5f:cd:
02:d2:67:fc:7e:ef:6e:d3:d4:81:8f:ce:c8:8c:31:ef:58:18:
72:df:ba:4f:29:2e:60:2c:6d:7a:43:52:10:4d:67:6f:b7:6e:
06:16:44:7d:72:76:76:8d:53:cf:ed:3f:bc:b0:74:7e:15:6d:
7e:23:34:c6:72:53:d9:22:84:31:86:3d:17:55:a3:6d:10:c8:
07:cf:7e:b3:89:09:15:57:8e:de:10:e7:d3:7d:cd:0b:77:a4:
05:ce:1f:8d:24:bd:0a:11:5d:9b:eb:b6:fb:92:5d:f7:c8:5c:
8a:fe:99:d6:c7:a8:2f:07:7d:37:0c:a2:36:80:71:39:d4:33:
88:b8:9c:1e:f7:16:ae:a6:10:63:c3:ac:67:e0:79:31:aa:f3:
ac:e8:96:f1:8d:e1:aa:66:89:32:31:05:eb:7c:fc:4b:2b:f6:
3a:41:d7:43:83:42:64:df:ca:1e:e7:9a:e2:10:50:a4:85:e5:
6d:c7:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net