Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/E8EItKN2__9iKd7VUUHBehRVQCo.roa
File: E8EItKN2__9iKd7VUUHBehRVQCo.roa (raw, json)
Hash identifier: mIn23TrAWNsxopm3nGDSwuz19rtPaaB79Dzo0Qrhuqk=
Subject key identifier: 13:C1:08:B4:A3:76:FF:FF:62:29:DE:D5:51:41:C1:7A:14:55:40:2A
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 019420D6147970033F4FCC04E10C1CA53D98
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/E8EItKN2__9iKd7VUUHBehRVQCo.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29522
IP address blocks: 193.143.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:14:79:70:03:3f:4f:cc:04:e1:0c:1c:a5:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13c108b4a376ffff6229ded55141c17a1455402a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:e2:2d:8e:26:28:9d:3a:5f:6d:04:e8:29:
47:84:01:56:b3:7c:0e:22:0f:53:bf:41:44:99:52:
e1:2b:be:18:3c:d2:a4:1a:e9:69:35:10:b5:cd:40:
c4:07:93:7d:4b:31:48:36:72:a1:51:ea:37:a6:3a:
62:31:4b:ca:17:47:66:81:5c:c1:4e:f7:47:1d:6d:
6a:d3:6c:0c:13:fc:05:a8:8b:98:16:39:7f:88:76:
e7:21:83:94:78:2a:8c:6e:ce:1f:56:e5:09:28:39:
4e:23:0c:f6:08:57:71:8e:c3:ed:0e:78:4d:9e:65:
54:a7:56:88:78:87:da:92:fe:6d:eb:ac:1c:f3:6f:
24:9c:e7:51:85:a0:64:17:87:af:50:74:06:bc:19:
e8:a2:42:61:20:2f:85:92:8e:3a:36:4f:a8:17:ee:
26:99:8a:3b:78:80:b6:6b:2d:a8:6a:db:3f:b6:1d:
4a:58:13:9e:61:6f:bc:e8:e6:82:ee:62:b8:44:64:
89:f7:a4:17:72:f7:6b:00:08:18:0e:ac:80:25:1c:
fd:a2:9e:c0:5b:2e:57:00:ca:b7:4f:df:b3:e6:33:
e3:ca:99:1c:33:51:df:94:ad:96:3e:0d:f8:58:ef:
b6:43:7f:15:59:1c:40:8f:b0:29:1f:02:9f:1b:c5:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C1:08:B4:A3:76:FF:FF:62:29:DE:D5:51:41:C1:7A:14:55:40:2A
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/E8EItKN2__9iKd7VUUHBehRVQCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.77.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:e8:81:ea:05:df:b9:bd:33:ff:c7:1f:93:99:97:74:1b:a9:
08:82:b3:78:37:4c:98:1e:10:67:82:d4:03:c3:1b:60:18:40:
11:c2:96:d7:5e:95:4d:bb:bc:4c:91:be:af:94:67:4c:4f:df:
78:1d:9a:bc:1d:81:a1:e5:12:f5:43:7c:75:73:87:39:bb:80:
d5:a4:14:89:2b:51:4b:9e:6f:82:1f:08:a6:01:ec:be:b3:b2:
77:97:7a:c7:ba:27:b1:e7:48:81:26:b7:56:78:1d:1d:1f:85:
4d:fd:87:48:94:d8:04:71:c8:c2:a1:7b:03:c9:83:a0:26:d9:
b2:a7:7d:4a:41:15:43:07:0e:3d:cf:dc:ad:07:ac:d3:d8:79:
68:4c:91:42:b0:5a:94:6b:77:d9:a8:93:d1:1d:7a:8e:f8:50:
29:b5:9e:9c:08:96:23:50:18:84:35:4d:4f:7d:c2:13:9a:0d:
59:22:f4:b3:bf:c8:6b:dd:c6:f4:79:06:1c:66:e4:55:2d:ff:
05:f3:7f:f9:94:d0:8a:5c:1f:73:af:e4:3b:d1:02:7b:61:4d:
92:b2:3c:51:f2:b6:c7:39:4e:f0:33:01:9a:43:7e:b7:94:84:
5b:e0:04:3a:56:cf:1d:09:42:0e:61:a4:62:c6:bd:83:f7:d1:
45:65:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net