Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa
File: F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa (raw, json)
Hash identifier: t5awNCHpv5Z1K7KKzegDPRjyXJOt1/jwTbN2Cm1q5cw=
Subject key identifier: 17:F8:E5:B5:7C:B6:52:8E:23:DC:29:D0:FE:8E:8B:A2:05:5B:66:4E
Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial: 019427484527475CE50D005A4CE9A2198114
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25598
IP address blocks: 193.5.126.0/23 maxlen: 23
193.135.4.0/22 maxlen: 22
193.135.4.0/23 maxlen: 24
193.200.144.0/24 maxlen: 24
195.245.237.0/24 maxlen: 24
2a03:8780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:45:27:47:5c:e5:0d:00:5a:4c:e9:a2:19:81:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f8e5b57cb6528e23dc29d0fe8e8ba2055b664e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ad:00:1f:9e:b8:0c:1e:73:22:ae:bc:d5:a2:
d1:8d:d5:cf:63:2f:3e:4a:a0:09:a0:bd:a6:02:f6:
fc:74:6e:f8:01:20:d3:c2:64:05:84:f1:5a:4d:12:
6e:c3:a2:f6:6e:0c:78:a0:38:da:95:66:c2:ac:91:
4e:99:93:12:51:59:9d:c6:81:99:98:5b:e5:32:01:
2a:b6:9e:7a:fc:33:de:19:4c:e8:2c:65:66:59:d5:
07:3f:83:bd:bf:f4:ba:ed:97:0b:df:33:ff:81:cc:
c3:46:1c:93:94:c7:96:c9:10:ac:90:bc:6b:16:28:
ee:76:6b:f4:28:6d:3c:89:3d:9e:0e:22:66:c0:12:
24:e4:a1:b9:d9:26:75:67:3a:8b:16:e8:c5:7e:4e:
74:ae:14:9a:1a:61:fc:26:60:2f:43:d1:18:0d:db:
5b:9c:f6:fb:8a:93:69:49:39:7a:97:97:b6:38:ad:
d1:5b:10:a1:6e:8a:17:e3:be:91:db:a4:51:8e:11:
65:40:31:0d:ca:8d:1c:60:87:02:9a:3d:17:43:72:
30:94:c9:f3:ab:9a:e4:1b:af:64:65:e6:9e:6d:57:
26:dd:31:12:7e:61:a3:b4:0f:26:06:db:2e:3f:6e:
f7:30:14:c4:d9:6d:ac:df:0a:b2:40:5a:f4:e2:4b:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:E5:B5:7C:B6:52:8E:23:DC:29:D0:FE:8E:8B:A2:05:5B:66:4E
X509v3 Authority Key Identifier:
keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/F_jltXy2Uo4j3CnQ_o6LogVbZk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.126.0/23
193.135.4.0/22
193.200.144.0/24
195.245.237.0/24
IPv6:
2a03:8780::/32
Signature Algorithm: sha256WithRSAEncryption
77:c2:9f:b8:53:a6:a2:41:6e:ce:4c:70:a5:98:45:da:2d:0a:
97:7a:1c:66:11:8b:0a:34:dd:02:88:ba:1b:be:96:4d:ef:ae:
fc:80:3d:f8:83:c8:f3:29:d5:f2:a6:b0:aa:6f:7f:ff:ff:20:
8d:ce:44:0c:ac:9c:45:e9:48:10:0b:4b:7d:d7:28:57:a2:2e:
cf:75:34:8a:b1:08:44:56:65:70:26:49:3e:ff:c1:e9:03:3c:
f5:5e:62:e3:0c:99:cc:2b:2d:b3:42:36:5d:2a:26:9f:d3:29:
18:df:ad:bd:6c:d2:15:a7:d9:8d:8c:35:48:7a:65:ab:6d:df:
bf:72:aa:e8:6d:ab:d0:56:82:37:0c:68:cd:d3:df:4f:0e:68:
bb:79:78:c4:e0:55:d7:79:dc:79:2c:e2:b3:1e:48:5d:41:d4:
0e:bc:b8:78:63:34:fd:13:ff:7e:d1:be:d5:8b:9b:d5:b5:91:
21:76:93:d7:e0:e9:48:8f:c4:fe:65:29:32:a7:63:24:16:42:
f2:5d:e7:57:83:7e:bd:18:0e:ae:81:dc:b4:78:f1:a5:02:1e:
91:a7:0f:a9:d9:1e:23:68:38:49:7b:51:06:ee:90:19:a9:5e:
86:c3:7d:8f:ab:06:10:23:9d:f6:51:56:4a:50:9e:99:22:c5:
2d:ca:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net