Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/spqKrZZlSshpL2qYZip0d0WaBBs.roa
File: spqKrZZlSshpL2qYZip0d0WaBBs.roa (raw, json)
Hash identifier: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=
Subject key identifier: B2:9A:8A:AD:96:65:4A:C8:69:2F:6A:98:66:2A:74:77:45:9A:04:1B
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 0195FB16CAD3903A8B3DACAD9D3D09831761
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/spqKrZZlSshpL2qYZip0d0WaBBs.roa
Signing time: Thu 03 Apr 2025 09:58:49 +0000
ROA not before: Thu 03 Apr 2025 09:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19399
IP address blocks: 194.1.186.0/23 maxlen: 23
194.4.8.0/23 maxlen: 23
2a00:f060::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:16:ca:d3:90:3a:8b:3d:ac:ad:9d:3d:09:83:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Apr 3 09:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b29a8aad96654ac8692f6a98662a7477459a041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:91:42:e3:4c:a2:88:1b:19:df:af:5a:f5:65:
7a:1f:95:21:1c:7a:32:c2:02:09:91:a6:93:16:3e:
b5:9a:c6:88:12:85:cb:6c:61:78:d8:3c:e9:f6:e8:
52:75:b3:62:db:dd:4a:4b:5a:78:e8:2b:36:da:dd:
95:1d:ac:47:02:ab:e0:83:ec:9b:e2:0a:7f:e2:3e:
69:f5:fc:63:09:4b:34:6d:db:56:0f:d3:16:b5:bd:
fc:1e:ab:9b:38:77:bd:45:af:a4:d6:84:e1:a6:07:
65:af:01:71:2f:d3:96:13:cf:13:77:80:17:55:cf:
72:fb:f8:d8:d8:5d:fb:99:e8:79:76:e1:89:56:66:
c7:f0:e6:6d:65:86:b3:4d:b2:02:ec:99:e9:57:17:
d4:f8:5f:e1:dc:cb:6d:38:46:36:c7:a3:13:e3:bc:
f6:e4:7f:0f:a1:36:ec:fb:68:5e:67:e0:f5:16:7f:
c6:b0:3d:90:b6:e2:97:d1:62:b3:c9:17:b1:3a:f1:
83:6b:02:48:38:8e:d3:13:a6:5e:03:81:da:f5:aa:
8e:88:95:53:3a:46:07:a5:7b:65:91:b9:d1:a8:d5:
2a:0f:f8:97:80:54:a5:d5:d8:e4:0e:ea:5d:a6:fc:
70:ba:81:70:96:7e:8d:fe:14:b9:c3:3d:f3:75:10:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:8A:AD:96:65:4A:C8:69:2F:6A:98:66:2A:74:77:45:9A:04:1B
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/spqKrZZlSshpL2qYZip0d0WaBBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.186.0/23
194.4.8.0/23
IPv6:
2a00:f060::/32
Signature Algorithm: sha256WithRSAEncryption
a5:3b:28:50:c7:03:20:ea:28:ea:dd:c7:37:c4:55:a5:7e:b4:
c6:63:35:3c:45:d1:fa:61:28:a2:f4:32:04:c1:49:e8:d9:b9:
de:5f:5f:b0:d7:e3:76:a1:a2:fb:45:6c:ec:4f:db:68:26:ec:
bd:08:5e:df:69:b3:05:ff:20:b7:df:7b:e7:12:2d:5a:68:64:
84:a3:4a:09:cf:3d:eb:f1:5a:82:62:23:86:35:3f:84:8c:51:
24:6b:74:2a:56:89:9f:0a:c7:9f:ae:1c:99:57:62:a4:83:40:
fb:ca:ab:7d:01:ea:86:75:c2:78:80:41:43:be:04:02:e3:b9:
31:99:31:e9:b7:4d:6b:9d:6b:cc:d9:87:b2:f7:b2:52:5b:04:
ff:67:e7:dd:08:fe:bc:69:48:01:e2:d6:c4:34:7a:30:9b:33:
60:a5:3b:e9:6d:ad:34:c9:fd:e5:dd:d7:92:f2:36:a2:bc:b2:
d0:be:48:c0:bf:14:ea:b9:f3:ba:06:7b:9a:a3:69:14:ae:73:
5a:8b:a4:9c:80:86:54:ae:1d:09:2b:78:28:cd:25:92:b5:36:
77:3b:00:6c:e9:8c:d5:db:0d:6c:ea:d3:0c:9c:14:8d:38:db:
da:d8:07:47:da:95:24:16:68:5a:dc:bc:9a:58:0a:af:e8:af:
0b:5c:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net