Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/p5y8NQAzzfGGrlu-v-vNfVyVrb0.roa
File: p5y8NQAzzfGGrlu-v-vNfVyVrb0.roa (raw, json)
Hash identifier: kc/WazVc1v12QWHIn2ON5G/S24+0++IA58aa0ys1ptw=
Subject key identifier: A7:9C:BC:35:00:33:CD:F1:86:AE:5B:BE:BF:EB:CD:7D:5C:95:AD:BD
Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial: 0194266BAA8417E43066E545FEB2975EBE5B
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/p5y8NQAzzfGGrlu-v-vNfVyVrb0.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8255
IP address blocks: 193.56.246.0/24 maxlen: 24
193.57.112.0/22 maxlen: 24
193.57.116.0/22 maxlen: 24
193.57.122.0/23 maxlen: 24
193.57.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:aa:84:17:e4:30:66:e5:45:fe:b2:97:5e:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a79cbc350033cdf186ae5bbebfebcd7d5c95adbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:79:62:96:eb:51:c1:69:e2:5e:53:9a:48:
85:0f:ff:cc:86:e3:8e:c9:4c:b7:f9:28:37:da:8f:
2d:87:b0:5e:7f:fb:93:40:a1:48:a4:ff:51:99:a5:
91:ca:1b:a8:34:3f:64:e2:53:1a:3d:3b:4b:d1:0b:
62:1e:06:c1:b3:85:7e:16:6b:79:9d:5c:f0:5a:54:
1f:90:c1:f1:c7:de:a1:65:03:02:74:ea:98:21:5c:
a4:8a:82:3f:a7:33:2e:3e:2c:43:67:e3:36:2a:50:
dc:20:5e:2e:42:40:15:0b:fd:5b:18:98:86:2c:63:
4c:64:e9:8b:a6:e8:b2:b6:5d:2b:dd:a8:33:b4:8a:
a8:3f:89:88:01:e1:b7:4b:22:21:53:e5:90:bd:9e:
71:ad:62:71:03:44:ce:85:de:eb:a7:0a:34:a5:05:
37:4e:3f:4a:08:aa:f2:3d:25:f7:8d:cc:59:83:27:
27:ef:51:05:26:bc:10:b9:46:b5:d3:d0:89:c5:d4:
7b:9b:23:12:4c:e1:40:f4:c2:d7:93:39:31:3c:28:
fb:04:2e:5f:89:21:08:29:5b:c4:a6:03:4a:5d:c4:
3e:aa:4e:6f:12:5f:7f:bf:f5:7d:19:b0:6e:fa:41:
49:04:e3:d8:05:c1:d8:f8:13:00:4c:be:bb:58:7e:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:BC:35:00:33:CD:F1:86:AE:5B:BE:BF:EB:CD:7D:5C:95:AD:BD
X509v3 Authority Key Identifier:
keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/p5y8NQAzzfGGrlu-v-vNfVyVrb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.246.0/24
193.57.112.0/21
193.57.122.0/23
193.57.126.0/24
Signature Algorithm: sha256WithRSAEncryption
73:13:7a:3a:24:11:33:df:2b:f2:e9:ed:a8:44:04:17:91:17:
7c:dc:f9:e5:3a:88:69:67:04:37:bc:56:a3:b7:b4:0c:d7:7d:
2e:7e:a4:aa:ed:ce:67:32:8a:6e:40:40:e5:68:68:a9:dd:5c:
33:69:9e:d9:20:10:30:43:6c:b2:c3:9f:fe:32:1d:35:f6:28:
93:1b:5c:d0:a7:de:b3:41:55:92:e1:db:36:18:b7:52:1d:a1:
ab:7f:8d:cc:fd:39:6d:50:35:82:9e:3c:20:bd:6d:a2:53:41:
d1:d1:51:7c:79:df:75:13:26:2d:91:4d:a1:f9:26:0a:49:20:
c1:76:04:f8:a7:79:c4:6c:ec:31:80:3e:ab:f9:73:c4:22:fa:
93:cd:d8:3a:6a:33:ef:42:2a:4e:f4:2a:04:7c:c8:7a:3b:d5:
64:7c:ed:15:a4:3b:4b:e7:2c:ed:ec:0c:0e:61:07:cf:d5:3a:
59:04:21:fe:69:24:19:03:21:8d:5f:3d:ce:31:01:a4:04:77:
13:8b:43:d8:f9:45:ec:5a:b2:14:0f:1f:2e:1f:35:07:2f:23:
a6:c7:05:1d:1b:1c:7d:74:f1:ae:73:b6:70:21:00:53:ea:ec:
4a:30:7d:69:74:c2:8d:e3:2e:1c:32:20:51:ff:24:88:78:f4:
35:65:70:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net