Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/30qNUm4LVV2JzJAozjpjCljWLl8.roa
File: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (raw, json)
Hash identifier: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=
Subject key identifier: DF:4A:8D:52:6E:0B:55:5D:89:CC:90:28:CE:3A:63:0A:58:D6:2E:5F
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 01951E9E8F6D0D5A1245A367479A677C4692
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/30qNUm4LVV2JzJAozjpjCljWLl8.roa
Signing time: Wed 19 Feb 2025 14:31:02 +0000
ROA not before: Wed 19 Feb 2025 14:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208164
IP address blocks: 193.27.91.0/24 maxlen: 24
194.153.133.0/24 maxlen: 24
2a0f:2880:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:9e:8f:6d:0d:5a:12:45:a3:67:47:9a:67:7c:46:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Feb 19 14:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df4a8d526e0b555d89cc9028ce3a630a58d62e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:49:8a:bf:e6:b6:03:29:8b:89:8c:56:05:f7:
00:8f:32:4b:22:6f:79:39:c3:56:27:87:fc:54:fc:
7e:47:13:f5:f7:e2:d1:5a:d6:49:8a:c5:16:6a:8f:
58:97:b7:fc:ba:a3:1f:64:4f:f0:b6:e2:6f:23:83:
f4:3e:fb:52:a6:5d:ad:fe:1a:0c:15:43:35:51:7d:
e2:fe:9e:ff:b7:6b:b3:ae:64:ea:f7:16:b8:0f:ba:
83:95:33:65:c7:01:0f:8d:1d:83:26:73:72:c8:cc:
9a:76:30:b2:2f:5c:41:63:8d:58:6a:62:a2:45:07:
54:14:71:58:f5:ca:72:02:2f:08:91:f4:1a:98:af:
ae:97:f0:a7:87:7d:c8:ec:a5:3a:0a:e6:81:00:ee:
15:47:c4:b9:22:08:26:f1:87:e0:bb:f3:f5:61:fa:
85:04:52:ae:be:43:90:a0:7b:f4:f3:43:52:13:43:
48:6d:b4:8f:1c:53:14:73:3a:da:35:83:ea:24:bb:
2a:a7:fd:40:71:a7:fe:cd:2d:0e:86:8b:86:7f:5a:
41:c6:28:c2:e1:2f:d0:9a:d2:10:28:92:7d:27:44:
73:e6:6c:52:b8:73:18:69:59:65:79:e2:48:9b:74:
f6:95:91:41:38:31:3b:ed:fd:c3:2f:fb:a5:41:4b:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4A:8D:52:6E:0B:55:5D:89:CC:90:28:CE:3A:63:0A:58:D6:2E:5F
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/30qNUm4LVV2JzJAozjpjCljWLl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.91.0/24
194.153.133.0/24
IPv6:
2a0f:2880:400::/40
Signature Algorithm: sha256WithRSAEncryption
74:36:f4:bb:22:3d:56:fd:54:7e:7c:28:58:c3:6b:af:d4:40:
d9:50:03:8f:53:07:8d:7e:d9:7e:01:32:c9:7c:b5:0b:0e:13:
2d:48:ac:7f:c2:c7:80:b0:82:22:3b:b5:83:25:b4:73:14:83:
85:8a:ef:e8:4d:28:1b:09:9b:f8:de:00:a2:90:7d:48:4b:e1:
d6:47:4b:c0:c6:fd:72:77:df:1b:fa:e6:af:5f:ad:c4:cb:26:
5d:d4:af:a7:f0:a7:6f:b3:d8:6d:d1:81:98:8a:bc:b9:f9:91:
91:9d:f0:50:73:a6:14:c8:9b:db:d6:1f:ec:9a:31:b2:67:44:
b5:7f:f1:57:4a:53:19:b8:38:93:a2:c1:0f:4e:cc:08:15:87:
32:29:b4:30:e8:7a:e0:7b:e0:3b:07:6a:cf:d3:eb:40:f6:34:
35:47:78:1c:bb:9a:6b:5e:a9:bb:47:6c:b3:da:ce:30:02:7f:
6d:4b:8a:5c:d4:a2:be:2b:50:7c:c3:f3:23:b6:f1:12:00:c2:
8a:31:cc:63:7f:bc:a4:ba:42:6f:51:db:3f:68:b0:9f:f7:52:
c2:29:89:6a:fe:88:93:e0:f1:5e:0a:8f:6a:7e:15:52:f9:c0:
3c:e8:f2:ee:e0:7d:57:d7:8e:55:df:d1:e0:18:9b:eb:67:75:
d5:34:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net