Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa
File: YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa (raw, json)
Hash identifier: H2qTKciVzX2Iz/NfWeOKudVbBEab6voHC2+59WhtYSU=
Subject key identifier: 61:97:AA:05:72:90:16:65:D1:34:49:12:1F:16:13:77:91:6D:04:6F
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 0194258EE530C91B0FE7A91A6AA89AD5937C
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 193.25.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e5:30:c9:1b:0f:e7:a9:1a:6a:a8:9a:d5:93:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6197aa0572901665d13449121f161377916d046f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:20:f1:a4:20:ec:e2:88:0e:3c:b6:4f:f2:
5a:5e:c3:7d:be:f7:e4:d0:e7:e0:a5:c7:86:ec:b3:
12:2a:50:d9:7b:03:2c:1e:e6:6c:d5:e3:72:7e:93:
18:84:dd:a9:e0:6a:7b:1f:28:b2:44:1f:ac:fb:f4:
67:e3:61:de:3e:5c:28:c8:db:c8:99:69:a9:78:70:
93:ec:85:b9:fe:cc:69:28:cf:e9:eb:75:07:5b:73:
2a:92:5e:cd:20:1d:b2:cd:fb:26:51:c8:ad:dd:8e:
f5:86:aa:db:c6:9c:95:c0:63:30:d1:62:aa:12:cd:
f4:21:28:e4:90:34:4a:c1:36:57:19:6a:e2:fe:3c:
91:88:ef:6e:86:ed:19:e7:e7:c8:53:92:a1:4e:82:
81:b1:b1:e9:da:69:ee:f5:2f:88:65:9a:dc:40:7e:
d2:34:93:17:80:ad:d4:60:6f:d6:50:f4:62:2b:24:
19:4d:0d:01:62:b1:1f:a5:6a:67:88:79:21:11:d4:
5a:dd:8b:d1:be:cd:9d:a2:a2:7d:ad:27:ae:68:18:
82:b9:bb:f5:65:d6:f1:dc:58:bf:75:9b:6f:2b:25:
a9:ef:cd:8f:45:51:f9:7c:6b:08:86:88:93:bd:1b:
48:86:bf:18:9d:a6:37:c9:0f:55:f5:40:cd:01:2a:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:97:AA:05:72:90:16:65:D1:34:49:12:1F:16:13:77:91:6D:04:6F
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.173.0/24
Signature Algorithm: sha256WithRSAEncryption
94:58:f2:e7:0c:6a:b4:61:2d:11:68:c7:c7:29:9c:3f:c9:be:
28:02:12:4f:a9:9b:a1:a7:20:12:27:46:4b:7e:6e:78:32:b7:
ee:51:d6:99:51:ff:81:41:89:6e:0c:4d:2a:c7:a5:75:30:67:
f9:3f:32:c4:70:d4:84:42:3c:ac:fe:9a:76:33:fb:25:78:2f:
e2:34:55:a7:10:0b:f0:cf:76:5b:41:0a:d4:76:19:d3:70:96:
7b:f1:b0:99:2b:24:e9:d9:b5:32:d1:35:7c:1e:10:80:25:7b:
c9:b5:21:c4:23:e7:30:94:4c:6b:2c:cd:18:d8:ac:b0:80:60:
1e:45:0c:d0:ec:38:38:61:b4:8e:f0:8f:61:ab:9b:4b:96:2b:
98:d2:1a:24:2d:bf:0a:75:10:ec:fd:fa:f3:7e:1b:0a:a0:bb:
8e:d6:16:eb:1d:2a:e0:f2:9c:49:7d:2f:9d:08:02:2a:a6:83:
9b:6f:ab:00:fd:2b:f1:6a:06:e9:83:99:31:30:13:7d:55:17:
48:6e:95:c6:d0:4e:b4:60:e3:e4:ce:79:a5:bd:63:3c:60:d9:
77:81:c6:fc:14:41:a7:b1:21:3c:66:b1:c8:6a:67:f7:7d:d1:
bb:26:f2:b7:cf:e0:e7:e6:c1:1c:b1:ea:a8:a5:02:97:74:b0:
41:8f:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net