Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/00x2a7vYcUP_RgzqZlJDShLq9Do.roa
File: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (raw, json)
Hash identifier: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=
Subject key identifier: D3:4C:76:6B:BB:D8:71:43:FF:46:0C:EA:66:52:43:4A:12:EA:F4:3A
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 019425216A4542F8DC89780B974B175687BF
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/00x2a7vYcUP_RgzqZlJDShLq9Do.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209111
IP address blocks: 193.92.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6a:45:42:f8:dc:89:78:0b:97:4b:17:56:87:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34c766bbbd87143ff460cea6652434a12eaf43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:1a:ba:ad:5d:de:df:af:69:86:19:87:0e:
f0:ad:6f:d6:19:c7:b8:75:4e:dc:25:c7:87:47:00:
09:18:8d:75:68:c8:98:06:84:27:9d:a1:0d:99:56:
c9:8b:6c:ab:db:61:fa:74:76:25:b1:a4:4f:4b:93:
db:48:ea:a4:8d:7b:02:8c:5e:e9:84:51:ff:1a:75:
a9:1f:df:59:1d:00:3a:ed:fb:1a:48:d4:fc:18:e6:
b2:aa:b9:de:47:78:e0:ad:82:b9:4d:d2:43:c5:0d:
c5:93:8e:05:21:8e:c2:bc:93:8c:97:e0:c8:f3:26:
38:2b:b1:cd:66:b1:06:76:32:c8:e3:3a:62:c9:39:
01:c3:b2:45:ac:15:72:2a:af:9d:55:9f:37:e2:8b:
f7:6d:3e:66:b1:aa:c4:f1:23:f1:31:72:70:04:14:
c6:80:fd:54:96:53:2d:1a:0b:a1:bd:06:fa:1e:c5:
86:ec:a4:90:c9:3e:97:88:91:51:68:e9:c7:f8:06:
2f:3b:bb:36:cb:df:a8:db:ac:36:40:ef:4d:77:f1:
70:a1:4b:0f:fe:22:57:8b:d1:2d:ae:b8:ff:f9:f3:
0d:b3:63:15:1a:0e:69:3f:e2:9a:1e:9e:4c:53:92:
a9:f6:d6:c2:be:29:42:d9:f4:96:92:b8:52:c3:2d:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:76:6B:BB:D8:71:43:FF:46:0C:EA:66:52:43:4A:12:EA:F4:3A
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/00x2a7vYcUP_RgzqZlJDShLq9Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.92.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:73:1e:bf:db:de:f4:01:24:57:73:2e:67:7b:be:84:64:17:
5d:e1:7a:30:70:02:07:a0:1a:06:70:72:c6:f0:26:1d:34:71:
cd:66:bb:98:67:e5:13:e6:76:51:5e:90:cf:ef:a5:80:ad:13:
af:a5:67:27:20:f1:7b:e5:2e:b8:ba:9d:50:3f:8c:bd:c7:56:
c1:c9:49:96:93:ee:6c:5c:45:15:63:bb:c2:4c:43:eb:5c:a1:
3a:91:dc:4f:b3:92:08:29:9c:2e:12:ca:d9:57:d7:3a:2e:a5:
e8:23:f3:fd:34:0c:23:3c:f2:fe:22:fa:aa:28:b4:20:ee:8a:
69:cb:90:6d:27:fe:6b:c2:a2:f5:a0:7c:e4:50:a8:9f:37:53:
ff:32:3f:be:12:24:3c:22:e7:4a:89:14:ae:6c:59:9d:24:7b:
62:67:70:2f:ef:ff:51:94:df:7e:07:e5:d4:71:7b:22:4e:ab:
9e:7f:9e:08:c2:71:68:80:a1:01:d8:68:71:5f:fa:fa:6b:8f:
f3:6b:1b:08:7c:32:82:cb:5f:6b:14:2a:07:98:1c:8a:8a:6f:
51:8f:7f:8a:46:35:3c:64:ef:e7:a7:f2:21:3e:50:b1:57:15:
bb:b0:23:cb:36:53:4e:e1:22:33:11:57:eb:20:de:60:7e:c8:
ab:10:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net