Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/n4zWAGSBoW2P2tD8GHdUapBZXfw.roa
File: n4zWAGSBoW2P2tD8GHdUapBZXfw.roa (raw, json)
Hash identifier: VNZ4jJVwAA/qBwKPAk5VqDJoxXSNxaIowbxqJ7eV/1E=
Subject key identifier: 9F:8C:D6:00:64:81:A1:6D:8F:DA:D0:FC:18:77:54:6A:90:59:5D:FC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019616683F43D54EEDBA4A73455EF76D033B
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/n4zWAGSBoW2P2tD8GHdUapBZXfw.roa
Signing time: Tue 08 Apr 2025 17:17:32 +0000
ROA not before: Tue 08 Apr 2025 17:17:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 193.23.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:68:3f:43:d5:4e:ed:ba:4a:73:45:5e:f7:6d:03:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 8 17:17:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f8cd6006481a16d8fdad0fc1877546a90595dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:11:44:54:0a:ef:77:92:cb:78:0d:a6:e9:
a6:0d:fe:dc:42:be:5e:56:21:64:30:7d:39:e7:d7:
73:34:c6:02:0b:e1:39:3b:64:cd:af:bd:08:96:e1:
ee:84:ff:e9:ab:ab:62:d8:36:b0:16:5d:8c:d0:45:
f4:a4:0f:44:2d:20:67:bd:41:2d:69:9d:49:2b:f9:
d5:98:4f:6a:b8:c7:45:53:d1:e7:36:1b:64:63:51:
b2:2f:81:0d:50:4e:5b:75:54:02:78:2b:1c:65:98:
da:19:c1:1a:5d:f9:a0:4b:f2:6b:f7:82:6f:9b:cc:
fb:21:27:97:85:f6:da:66:1a:a8:34:2c:b8:ff:28:
fb:39:2f:9a:7d:5a:ff:a2:b6:4e:ef:1a:3d:44:90:
3c:ae:e9:63:37:a0:de:ee:4b:5d:57:1a:39:d5:c8:
50:42:28:e3:48:52:50:22:36:c2:8e:0e:43:15:b6:
a4:ad:11:1c:22:d0:55:b7:2b:ac:11:e8:31:5f:81:
e5:79:63:4c:eb:16:91:f1:c8:a5:93:33:1c:a7:e8:
b6:f5:34:57:0e:9d:c3:13:d9:57:58:ee:db:27:ab:
d5:b5:98:3c:ca:ba:85:4b:ad:d5:f6:91:e7:af:13:
6c:bb:56:9b:78:ad:1e:67:39:2e:24:37:e8:60:4e:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8C:D6:00:64:81:A1:6D:8F:DA:D0:FC:18:77:54:6A:90:59:5D:FC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/n4zWAGSBoW2P2tD8GHdUapBZXfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
22:56:a8:3d:a5:25:0c:fc:9f:83:72:63:d6:46:ef:18:2f:f8:
28:d4:e2:2f:1b:da:25:29:6a:60:8f:6a:95:0e:b3:9a:9c:4e:
28:b9:27:c1:3d:49:56:29:07:53:61:bd:1f:6b:79:22:ad:9d:
ed:ac:68:13:a7:44:c8:4b:41:2d:6b:c8:b4:06:4f:ff:eb:0d:
70:9f:dd:10:08:ae:b5:e3:0b:62:af:9c:98:a1:38:26:85:67:
24:7a:c8:ee:dd:88:86:50:77:b7:3c:5a:9a:c3:18:df:19:dc:
a2:e5:df:68:d3:eb:82:86:2b:db:66:4b:9f:97:d1:84:07:21:
60:2f:75:0c:0a:c4:41:1e:31:19:3a:ad:b7:f5:9e:c3:0d:54:
a9:db:f7:16:46:e1:76:80:af:e8:a5:25:86:af:53:7c:52:4a:
9e:a2:69:a4:1a:c2:db:50:81:f2:de:f5:08:ac:15:93:ea:74:
97:15:85:7f:20:d5:ad:e8:13:e1:1f:0d:de:9d:9d:bd:b2:f5:
4c:30:3e:c1:9d:c3:ef:db:ee:13:99:fd:76:80:ca:89:e6:54:
d9:ad:1e:3e:9e:8b:20:64:83:39:dc:ea:05:f4:99:15:8a:c3:
2d:59:3d:ed:61:07:a1:5c:4c:c1:0d:4c:20:c9:fc:5a:3a:08:
5b:c6:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net