Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa
File: 5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa (raw, json)
Hash identifier: oYg7Hd7YagslknVGleyR1QDuiaGvaAsro+gwXQIpa8k=
Subject key identifier: E7:10:A3:49:B5:63:D1:E4:08:F8:26:D4:98:70:A7:DB:35:7F:4D:83
Certificate issuer: /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial: 01942444C088157F5D269DADA46872B5073F
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50508
IP address blocks: 193.105.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c0:88:15:7f:5d:26:9d:ad:a4:68:72:b5:07:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e710a349b563d1e408f826d49870a7db357f4d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:30:34:17:d2:18:58:7b:5b:db:83:f6:95:
66:7b:82:ff:89:0d:b6:bb:f5:9c:a4:bf:42:d1:16:
d5:2d:bb:48:b5:99:10:84:90:e9:fb:56:03:ab:5d:
4e:42:24:e8:c0:41:da:9a:f1:a4:36:ed:b6:17:36:
d7:a1:07:04:9d:35:ab:88:9b:85:35:af:b2:64:ca:
a6:55:81:25:e4:28:c0:d0:04:be:0d:64:9f:df:29:
4c:3c:7c:6b:1c:d3:7e:24:39:c9:c5:c0:5b:bb:cd:
a5:c2:46:7d:3b:7d:47:e9:97:48:83:e2:f4:17:a8:
8d:59:1f:c5:3b:99:bb:f1:71:0b:b5:70:43:bf:31:
0d:2e:9a:65:79:62:9c:16:a9:28:26:ab:15:3e:5f:
84:05:7f:02:b6:6e:9d:88:99:04:60:53:d3:4f:68:
b4:f8:47:ac:64:c9:cc:9f:fe:e6:bf:53:dc:35:7d:
86:e5:2e:15:83:13:c9:52:32:4d:38:e7:b8:dd:24:
3e:d6:f9:c7:f9:9d:29:91:e0:0e:83:65:49:b4:f5:
b2:1d:05:7d:78:84:4b:00:1f:f6:95:51:83:4b:45:
8c:a5:c2:13:28:a2:2a:a8:58:e2:1d:d9:0f:b7:e7:
d2:49:e3:54:cc:e7:79:01:a6:eb:a8:e4:9f:a0:c8:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:A3:49:B5:63:D1:E4:08:F8:26:D4:98:70:A7:DB:35:7F:4D:83
X509v3 Authority Key Identifier:
keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:81:16:f7:87:bf:48:e8:87:c8:10:27:65:f6:55:97:e3:6f:
90:50:ed:cc:3b:2a:22:0a:51:00:01:37:5f:32:0c:0a:02:4f:
f1:4a:18:e0:2e:ac:fa:1c:c5:c3:cc:fe:df:37:62:79:90:2d:
39:76:0c:f6:4c:1d:94:7d:d5:94:ef:d4:75:26:39:02:f0:08:
85:e9:de:f4:b6:94:78:2b:60:14:ed:17:ff:ae:36:ae:a1:a4:
89:0b:48:dd:2c:c0:83:e7:71:73:d3:82:1b:4c:cd:67:a2:6e:
21:7a:ac:aa:3f:f8:f8:91:23:fb:18:a0:12:bf:b6:20:3c:36:
67:2a:62:48:f3:07:a1:d1:87:3d:95:e7:21:1f:cb:60:22:73:
57:29:ee:28:97:d5:fd:b9:11:51:5e:c6:27:25:71:f4:e0:d6:
58:38:c0:a7:c1:2c:30:45:a7:58:3e:08:6d:4a:56:85:fa:ba:
99:76:85:49:94:fe:5b:fd:4f:87:dd:24:84:2c:45:96:dd:ad:
49:9c:c9:6f:e4:0c:9e:42:51:66:e7:ef:04:1f:be:ea:df:03:
da:10:38:5a:6e:8c:96:e9:17:8b:26:79:84:45:ca:a8:00:78:
f1:0b:4e:fa:50:33:2b:9f:63:71:33:60:b4:ce:02:53:cf:07:
b5:0e:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:05 2025 by rpki-client on console.sobornost.net