Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa
File: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (raw, json)
Hash identifier: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=
Subject key identifier: E9:E8:E8:BC:D3:43:D1:33:71:6C:AD:CF:B6:F1:07:27:FA:0C:AE:A4
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 0194F5A81C32AA44EA639ADC19A6FEE74D88
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa
Signing time: Tue 11 Feb 2025 15:37:02 +0000
ROA not before: Tue 11 Feb 2025 15:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60453
IP address blocks: 193.142.234.0/24 maxlen: 24
193.142.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:a8:1c:32:aa:44:ea:63:9a:dc:19:a6:fe:e7:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Feb 11 15:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9e8e8bcd343d133716cadcfb6f10727fa0caea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:53:04:5f:34:7b:79:c5:dd:35:9b:17:90:
49:a6:be:bf:51:a7:96:61:12:0b:6d:c0:6a:8f:1a:
73:ff:1c:79:e0:52:df:d8:ca:41:b6:a5:50:63:55:
4c:9f:e4:2f:57:72:31:a1:5b:12:9f:18:04:05:7e:
29:09:68:55:6f:a3:a7:32:e8:ec:a6:e1:8e:07:c7:
9c:10:be:8b:c0:6a:1f:44:19:77:9c:e5:97:de:59:
1d:33:39:cd:75:1b:06:f9:00:1b:4f:c2:34:87:47:
c5:74:38:66:bf:1a:40:f8:72:a0:a2:92:f8:30:95:
95:32:db:e4:0e:89:b2:a5:5a:a9:15:03:26:81:0e:
14:9e:e3:24:3a:c8:ff:3c:d6:3e:97:17:48:94:a4:
5c:a4:a4:1c:26:0d:7e:4e:38:a5:51:91:c3:a7:2e:
44:6b:00:24:b0:68:08:28:1d:0b:11:56:89:88:38:
ad:ad:83:15:9c:27:48:30:3b:41:be:7e:f7:84:a4:
6f:b4:ec:70:a4:c0:37:40:96:b1:eb:4e:b4:75:2b:
49:f0:3d:d1:c8:b2:3a:1f:d5:fb:f6:54:ec:0d:a6:
cb:f4:c9:07:7c:a7:12:80:65:3d:55:22:bf:b3:b4:
7f:6f:ad:29:d7:13:c6:f4:83:92:42:3f:00:1c:47:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E8:E8:BC:D3:43:D1:33:71:6C:AD:CF:B6:F1:07:27:FA:0C:AE:A4
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.234.0/24
193.142.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c2:21:57:db:ba:6e:aa:5d:05:5a:cd:c8:7e:c8:d9:85:07:
e5:97:f9:7e:91:d2:7d:f5:f1:59:ce:cf:bf:d7:6d:17:32:78:
f1:77:4a:10:33:3e:b3:e9:1c:dc:18:4c:25:ab:d2:78:fc:a3:
4b:fb:12:7e:4d:5b:bf:70:5f:57:0f:68:2f:63:34:c2:02:da:
6a:85:b9:5d:4b:c3:6a:5a:18:c1:cd:5d:4e:98:4b:cb:36:b6:
8f:41:72:94:a7:8b:cd:18:5b:0b:d2:b4:38:72:25:95:39:e6:
41:bc:e7:1c:7b:9c:00:a5:65:4a:89:72:38:11:31:43:97:94:
db:c7:85:f2:3b:70:66:9e:13:99:a6:89:0a:04:5a:12:c5:65:
89:04:bb:cc:4c:86:e2:61:d2:97:4b:1f:28:8c:a2:98:b7:73:
f1:2b:c4:9e:af:e1:f2:e7:ef:08:e4:61:b2:d8:50:cd:b9:81:
7e:2f:e6:b2:0f:b1:b4:6f:33:67:62:2f:92:d6:71:e1:05:58:
a2:7e:21:aa:cd:34:9d:7b:c2:cc:b4:7d:4f:03:19:86:31:31:
5a:1a:13:10:4f:c0:24:ab:b7:aa:1b:a2:93:04:19:8d:13:0b:
8c:7d:ce:d9:be:86:b3:67:e3:5a:ba:27:12:62:ea:53:fe:38:
6d:68:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net