Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/x05WrfG2zADa49P9m0Z4GCWBqnw.roa
File: x05WrfG2zADa49P9m0Z4GCWBqnw.roa (raw, json)
Hash identifier: nYf6KTW49tj0mn1iQA6LN+Q+EJ2CseYMPtRfxDW4vn8=
Subject key identifier: C7:4E:56:AD:F1:B6:CC:00:DA:E3:D3:FD:9B:46:78:18:25:81:AA:7C
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 019420D663FEB7ACA8CC01D04156624311A5
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/x05WrfG2zADa49P9m0Z4GCWBqnw.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35099
IP address blocks: 193.221.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:63:fe:b7:ac:a8:cc:01:d0:41:56:62:43:11:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c74e56adf1b6cc00dae3d3fd9b4678182581aa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:d7:c5:5c:ad:a8:3d:fc:b8:91:96:85:f9:
33:f3:e6:b2:13:c3:66:0a:26:ef:9c:bb:29:8a:37:
8d:9a:77:a3:61:cb:2d:70:64:b4:33:26:29:1f:2f:
ac:c1:e3:54:8c:f0:ff:ed:93:6e:55:dc:7d:9d:b1:
26:b7:d8:46:91:81:d1:76:2d:be:3a:dc:6b:a6:e8:
61:1a:22:62:6b:22:67:f7:3f:6f:fe:d8:9d:0c:b2:
45:a4:cf:08:10:ee:ad:45:c2:d2:98:7d:65:dc:98:
41:55:9a:87:14:eb:d6:97:0c:90:1c:6d:c5:4c:8c:
c2:ca:04:e9:d3:32:8d:7d:a3:d1:04:63:61:aa:8a:
cc:07:0f:69:83:f1:d2:0b:60:a3:3a:78:ad:7d:00:
d4:e6:1b:ae:82:2e:db:c9:50:b8:7c:de:12:e1:64:
56:58:5d:c9:e2:fa:13:38:63:ee:69:24:74:e5:08:
0d:1d:95:5b:5d:b7:3c:0b:f0:f3:ea:d2:7b:fd:6d:
62:fa:1c:e4:70:ec:66:93:49:e4:f8:57:7c:8c:3d:
66:81:40:c0:e5:d9:f3:39:73:10:c4:12:b1:7a:cb:
bc:8d:5e:f7:f5:1a:14:cb:f4:5d:41:cd:9a:84:e9:
d4:78:98:bb:7d:a4:81:c4:78:56:86:c7:d3:be:56:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:56:AD:F1:B6:CC:00:DA:E3:D3:FD:9B:46:78:18:25:81:AA:7C
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/x05WrfG2zADa49P9m0Z4GCWBqnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.115.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:12:60:b9:6b:1a:a0:d5:86:53:36:06:3f:4c:cb:b9:75:37:
3c:5f:c2:52:6b:b4:b3:2d:e5:1f:1a:b1:b9:1b:5d:07:ab:0c:
4d:56:eb:44:1a:4b:01:62:21:c9:c6:f8:62:c7:e0:54:5a:04:
1e:59:3b:f4:d0:25:d2:12:f5:b4:0b:13:80:d7:d1:43:6b:a5:
59:66:a3:7f:9d:4c:79:7d:bb:39:fb:02:dd:f9:d2:93:ac:b5:
07:fc:92:3b:5c:6a:1a:c7:39:d8:e6:33:3d:86:b7:12:49:4f:
88:e7:38:c8:d2:0f:c9:e9:b2:8c:b4:cc:cb:18:22:6a:c2:35:
a5:cc:cf:36:47:46:63:59:16:3f:f1:37:de:04:14:ea:d4:55:
98:d2:46:e8:7f:6f:43:3f:4d:96:a1:db:f4:2a:ef:7f:d6:cd:
cd:a2:11:1c:0c:6a:36:ad:92:71:04:d6:86:16:98:cc:ed:cc:
6a:29:17:d4:70:8b:8a:6d:63:e2:8b:f9:3d:86:42:5b:80:6b:
f0:05:fd:6d:2f:54:68:c5:04:9d:74:98:56:d6:6d:bc:57:b3:
7f:d5:fe:2a:6b:f8:49:a3:87:52:bc:fb:c8:bc:82:43:e0:cd:
17:ac:f4:a8:a7:ff:69:69:98:ba:8a:1b:b3:b3:a1:6c:82:e7:
a3:bc:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net