Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/u9vtufdQeD6Gp2gsOoVPleakbQs.roa
File: u9vtufdQeD6Gp2gsOoVPleakbQs.roa (raw, json)
Hash identifier: jqziqEIAhQzAZhdIm9v3y5ugqInsG16PaBcDYGSnoFA=
Subject key identifier: BB:DB:ED:B9:F7:50:78:3E:86:A7:68:2C:3A:85:4F:95:E6:A4:6D:0B
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B22A8A5CC3A7D5494451B5B6B6EB00
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/u9vtufdQeD6Gp2gsOoVPleakbQs.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15948
IP address blocks: 194.177.193.0/24 maxlen: 24
195.251.205.0/24 maxlen: 24
195.251.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2a:8a:5c:c3:a7:d5:49:44:51:b5:b6:b6:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbdbedb9f750783e86a7682c3a854f95e6a46d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:be:f7:a9:40:f8:26:8e:9c:3c:c9:54:38:
9e:fe:4f:cf:08:0e:ff:d9:38:b6:46:ca:cf:7b:7f:
23:8b:f0:b2:83:b2:65:e5:d3:0d:29:1e:5f:56:46:
fc:ba:88:77:40:e9:25:92:06:23:d7:f9:9d:e9:31:
81:d8:e5:ba:44:4d:6d:de:71:2c:a7:e5:22:3a:46:
a6:c3:ab:15:1b:4b:86:da:2c:eb:60:cd:c4:4f:5f:
46:9d:07:2c:da:a0:03:43:2c:10:bc:01:9d:21:fd:
50:8a:e2:e1:13:79:56:5f:1f:92:4e:cc:13:f7:bc:
80:d7:73:20:d5:23:d4:6e:49:f4:7e:3c:72:25:10:
a7:36:bd:39:5e:df:f1:c5:b5:b2:94:7d:d7:6e:56:
4e:c4:e5:54:ca:6e:6a:00:19:ef:33:f1:6f:2f:24:
10:16:d4:c2:38:9f:31:e4:11:71:18:cd:4f:c1:43:
ec:6e:28:87:94:c3:04:93:a0:27:9d:c8:c7:a5:30:
66:ae:42:79:41:a6:59:bf:5c:6a:c7:55:bc:37:42:
7f:e0:07:8b:0b:a4:75:5b:d9:14:e7:ef:44:d7:c1:
cd:10:3c:c2:11:f7:65:c2:1f:25:7a:b6:53:18:72:
9c:c1:ad:09:33:69:50:92:ae:33:bf:48:85:e9:45:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DB:ED:B9:F7:50:78:3E:86:A7:68:2C:3A:85:4F:95:E6:A4:6D:0B
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/u9vtufdQeD6Gp2gsOoVPleakbQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.193.0/24
195.251.205.0-195.251.207.255
Signature Algorithm: sha256WithRSAEncryption
16:36:19:1a:49:09:a3:e0:e2:f8:e0:ec:9a:63:45:d9:f4:6b:
af:b6:a5:4c:92:73:a7:b6:0f:80:fc:24:72:80:4a:1b:1c:0e:
97:25:6a:94:af:29:d6:77:58:ee:74:98:06:b2:a4:91:74:6f:
f8:fe:bb:8d:2b:02:f2:66:12:03:b8:76:72:d4:bd:03:47:8f:
dc:be:d8:d7:1b:1a:95:63:16:32:78:aa:38:ef:97:a2:58:e4:
fd:18:b0:55:33:4a:d0:76:b5:6d:55:88:46:7c:4f:84:93:e4:
f3:9f:c0:d4:b4:41:3f:d3:8d:3b:89:39:34:ca:ae:41:18:bf:
af:c8:83:16:31:a6:32:7f:05:fc:d7:4d:80:e4:dc:97:aa:e5:
c7:51:cb:2a:40:09:e4:d5:6a:cd:09:f7:8a:69:66:9c:12:cf:
88:62:0d:49:f3:c0:55:aa:63:86:00:6e:bf:12:50:52:6b:50:
76:d5:13:2a:67:66:9d:7f:b0:36:11:8b:9e:d6:a6:c5:ae:71:
3b:59:03:ec:3c:26:12:45:9b:10:48:63:bb:31:b2:21:52:68:
f5:22:5e:a0:82:b2:43:92:04:47:97:a1:c8:74:ec:f6:bf:dd:
cf:b4:df:61:6d:c6:69:80:0c:5b:6e:7d:61:b9:d9:e1:dc:fc:
cf:93:a4:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net