Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa
File: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (raw, json)
Hash identifier: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=
Subject key identifier: 8D:C4:89:C4:47:C5:B8:83:AA:BF:EB:D4:BA:F0:50:72:4C:9F:F9:92
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 01956A5AF1DFED5E6188D3FFB0769C771C20
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa
Signing time: Thu 06 Mar 2025 07:28:19 +0000
ROA not before: Thu 06 Mar 2025 07:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34232
IP address blocks: 176.53.194.0/23 maxlen: 23
176.53.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:5a:f1:df:ed:5e:61:88:d3:ff:b0:76:9c:77:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Mar 6 07:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dc489c447c5b883aabfebd4baf050724c9ff992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:00:54:32:68:39:49:dc:38:4f:2e:86:e9:
cc:8c:1b:59:74:5e:5d:6b:89:20:3a:27:ee:56:0b:
51:3e:c8:36:54:e0:07:fd:0f:bd:76:84:bc:f7:cc:
66:c7:4b:82:bd:0a:cd:7e:62:60:a8:c0:c7:5c:bd:
b1:eb:d6:ff:2e:49:86:36:9a:2f:d5:bf:4c:d2:db:
ea:25:89:6f:53:a3:e4:d4:f2:32:41:d2:2d:42:a6:
5e:aa:ae:35:cf:3c:f3:57:92:65:68:7b:cb:05:a4:
aa:e8:bd:9a:ac:96:53:9a:aa:2e:e1:25:16:7f:53:
c4:9c:66:66:d4:4b:09:cd:22:92:d4:17:cd:72:96:
57:40:2e:3f:a3:39:9b:3f:96:14:77:9f:7a:0f:f3:
23:a0:e3:87:7e:e4:b4:b0:ce:c3:fb:3a:fb:d9:e6:
b2:0d:20:55:8f:6c:20:22:c1:b7:7e:e2:13:bc:05:
e5:38:92:4b:71:34:94:b8:b2:a4:29:8c:ab:cf:8b:
ef:e7:76:34:bf:7e:be:cf:92:12:57:f4:91:a3:7f:
88:f3:d8:6d:26:68:9f:3d:b4:5e:54:0c:23:98:22:
39:49:b3:75:80:69:43:9c:da:e6:0e:9a:ec:16:87:
0e:94:31:a5:15:66:1b:93:65:b7:cf:07:ec:6e:6c:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:89:C4:47:C5:B8:83:AA:BF:EB:D4:BA:F0:50:72:4C:9F:F9:92
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.194.0/23
176.53.208.0/22
Signature Algorithm: sha256WithRSAEncryption
58:d7:01:31:14:ad:d1:82:92:d9:c6:3d:5c:62:28:74:ae:dd:
b6:82:87:85:a8:57:d4:28:de:76:33:b8:13:e8:a2:d1:c0:b7:
58:b6:1d:b4:8e:47:de:6a:17:9e:c9:a0:8d:8e:4f:81:3e:00:
31:89:d0:1b:3e:01:e7:74:f1:e7:0d:e2:4e:42:87:cc:1c:8b:
90:3c:66:e5:55:a5:5a:a0:78:fe:79:91:ec:0e:27:0b:e8:fb:
a4:ab:4c:30:8d:48:52:8b:b7:92:69:11:c4:4e:60:d4:b3:d4:
61:e5:1e:2a:85:d2:dc:50:03:e7:5d:f4:51:24:37:3d:27:f9:
73:96:17:a7:77:74:68:75:97:8b:61:16:1d:e3:47:34:58:90:
64:5a:d5:36:fe:08:fa:c2:67:3f:cd:79:08:e2:c3:e4:a9:40:
3f:b4:98:20:0d:cc:79:a7:e7:36:e1:85:bd:3a:a3:82:3d:bc:
a3:b0:51:5c:b1:74:47:46:15:11:d7:91:f2:36:1f:1f:8b:e1:
85:d8:00:89:96:e2:9d:14:db:22:c1:e8:b1:7d:f1:4c:60:0d:
46:c1:24:cc:ee:58:98:14:be:cd:32:c2:69:81:dd:97:be:4d:
12:4c:e1:33:4f:2f:7a:94:a6:8f:25:62:a6:33:15:74:66:6f:
0a:db:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net