Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa
File: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (raw, json)
Hash identifier: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=
Subject key identifier: C4:FC:5C:38:9D:0A:7F:42:D9:7D:8C:4C:1A:2E:6D:22:A9:BE:A0:E0
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 0194228D162CCCADE564693F65F9B3ABFBAD
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207503
IP address blocks: 82.193.248.0/24 maxlen: 24
82.193.254.0/24 maxlen: 24
85.199.112.0/22 maxlen: 22
156.67.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:16:2c:cc:ad:e5:64:69:3f:65:f9:b3:ab:fb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4fc5c389d0a7f42d97d8c4c1a2e6d22a9bea0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:11:d4:d0:a0:2e:eb:bf:ee:e4:63:e3:c6:
bf:2c:77:d2:23:d3:15:f4:e3:91:cb:dc:f4:70:24:
62:5a:f4:0c:8d:22:e4:54:34:36:d9:1e:ca:8a:c6:
0d:11:0d:90:e5:99:20:13:7e:67:e0:7a:be:b2:29:
aa:34:07:3c:67:45:fb:e1:10:f3:ab:99:c8:b5:74:
9a:76:dc:1d:c8:21:de:eb:86:32:ca:50:30:7d:fe:
83:7f:30:9d:8f:7b:73:f8:1b:78:ca:a6:36:b4:67:
6c:54:c6:cf:0b:82:ee:f3:ff:3e:3a:ce:87:66:f6:
4a:2b:d9:e1:0c:8d:42:96:4b:b3:e3:f4:67:45:b9:
63:ae:60:88:d0:d3:93:eb:65:c6:14:58:97:46:4e:
fd:9c:f2:4e:11:bf:93:0f:98:83:4c:59:e9:a9:75:
49:dc:c8:ac:00:3a:1d:18:ab:9e:46:d3:d7:24:d5:
5a:01:84:77:37:85:45:12:4f:ec:cb:ae:f4:c6:a2:
42:44:b4:8e:af:5f:fd:95:c3:94:0e:73:7a:fc:74:
b3:eb:7e:e0:74:4b:19:9e:1d:c2:7b:0a:3d:52:9e:
ec:b6:17:8d:5f:5b:0a:4a:f4:b5:32:93:a9:81:1b:
a8:52:e6:89:86:68:b6:14:81:7f:ac:53:0d:12:64:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FC:5C:38:9D:0A:7F:42:D9:7D:8C:4C:1A:2E:6D:22:A9:BE:A0:E0
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.248.0/24
82.193.254.0/24
85.199.112.0/22
156.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:4c:59:c5:2b:06:25:f5:ae:9d:66:b2:bd:0f:8b:dc:f7:2a:
92:00:34:7d:ae:b3:ab:e4:e1:0e:da:3d:6e:71:36:dc:8f:3d:
ba:aa:be:b5:a9:4d:a4:3c:d6:83:a6:45:64:50:8e:eb:67:27:
78:65:74:1d:d8:a5:7c:25:aa:bc:0c:51:df:10:e6:50:5f:2f:
70:ce:33:1d:0b:46:be:da:ea:84:55:27:9a:b1:88:ef:2b:0d:
96:4d:ab:1a:c9:76:81:3c:95:4d:6a:81:8a:61:86:54:5b:5e:
e0:33:41:f3:8c:57:ac:1f:5b:ee:0f:05:1e:b8:30:48:2e:a7:
76:5d:d6:df:91:d3:5b:93:5a:1f:46:34:20:e0:6a:86:ee:fd:
a8:ff:cf:2c:57:3e:fe:ec:89:cb:bd:51:2c:1e:e8:a5:19:e4:
7f:00:25:29:bb:43:90:15:48:55:be:eb:5e:02:81:9d:4f:9b:
7d:3f:e7:5c:fd:44:6e:f3:40:28:cd:3f:45:82:c6:ff:3c:f6:
cf:be:c1:91:4f:64:3c:bf:d3:11:42:0c:d6:fc:b5:c2:91:bd:
ee:80:15:56:27:b3:c3:5e:22:2e:bc:aa:57:fe:42:77:80:75:
ba:7c:ab:03:d0:bd:1e:96:0b:23:cd:96:33:57:37:e4:89:da:
8a:6f:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net