Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/1gkcm_O-6wWeQqVAGZBnyhP54qI.roa
File: 1gkcm_O-6wWeQqVAGZBnyhP54qI.roa (raw, json)
Hash identifier: nieo21q7o118HqvWop5XjeCS8y3w5y5mZQj+D431JE0=
Subject key identifier: D6:09:1C:9B:F3:BE:EB:05:9E:42:A5:40:19:90:67:CA:13:F9:E2:A2
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 019427B617B051718EE9AD8A5A60266EEDE1
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/1gkcm_O-6wWeQqVAGZBnyhP54qI.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58028
IP address blocks: 193.201.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:17:b0:51:71:8e:e9:ad:8a:5a:60:26:6e:ed:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6091c9bf3beeb059e42a540199067ca13f9e2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:d6:80:c9:91:76:55:fb:22:b7:bd:8f:d3:
f7:95:8a:07:d0:65:18:d3:3f:4c:0b:6f:78:ee:bb:
1f:28:57:b1:1d:d0:2a:1b:70:5a:9a:fb:17:94:10:
5e:88:2d:93:ca:a6:39:e4:37:41:85:eb:73:da:02:
15:e4:54:9a:54:1f:0b:b5:77:6d:0f:a0:5b:d7:12:
ea:57:11:bf:39:97:5b:ed:31:24:6e:87:1c:26:2c:
aa:ed:33:06:b8:a0:e2:c0:9b:01:e7:8f:a8:cd:0d:
46:94:bb:92:7a:04:e5:91:c0:12:17:69:35:85:84:
8e:3a:38:74:69:26:d9:e8:ec:c4:54:77:27:75:03:
7a:3d:be:66:f0:0e:0f:06:94:04:0c:17:f5:d4:d4:
d2:79:14:48:1f:67:cf:b9:dc:3e:6d:71:6d:d9:49:
5a:6c:d4:e3:14:4d:e3:85:ff:45:18:7a:a1:7d:04:
87:1b:0b:02:32:97:e6:dc:cf:d5:a7:46:5a:e5:38:
30:97:b4:4f:d6:80:d0:0d:c5:6a:aa:42:59:d6:2c:
86:f0:69:8e:dc:9a:ac:58:9c:1c:5a:cd:5d:b4:a4:
ae:31:78:c2:99:dd:44:58:e1:fe:39:77:06:f8:39:
90:24:4d:bd:22:a5:0d:ba:1d:46:92:5a:0c:96:d0:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:1C:9B:F3:BE:EB:05:9E:42:A5:40:19:90:67:CA:13:F9:E2:A2
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/1gkcm_O-6wWeQqVAGZBnyhP54qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:81:78:fa:f7:81:37:2a:c4:b1:58:03:95:30:0d:4f:ec:8b:
b8:d9:7e:d4:aa:ea:81:0b:f1:27:8b:ad:db:fc:d7:c7:3e:7e:
60:03:cb:48:79:98:a9:5a:97:ae:51:c9:fc:59:72:96:f1:99:
45:73:63:a1:e1:3f:82:b7:07:09:de:77:1d:53:56:ac:6a:86:
8f:e4:86:f3:61:b2:4d:39:9f:37:53:ae:45:9e:a6:52:c8:9c:
9c:52:2b:bb:16:ed:6d:2b:13:aa:62:c0:21:9c:a8:35:e9:aa:
7e:21:07:22:bc:d7:c5:c3:dc:84:93:85:56:54:a9:b1:e8:b8:
85:d0:9e:e7:ad:39:fa:aa:a8:45:d2:b1:7b:e3:67:a2:9d:9c:
8a:c3:0a:15:80:26:19:8f:3c:3d:7d:08:23:eb:62:76:01:6d:
69:7c:84:3f:92:e0:5f:e7:4e:05:42:63:66:70:a0:a2:74:3e:
c7:da:00:20:86:08:bb:76:08:23:d8:72:26:13:43:0b:e2:d1:
7e:01:b3:15:3f:20:34:7b:80:e5:47:e1:e7:ed:61:aa:61:76:
40:6c:79:bd:2f:00:4a:9b:47:cf:da:61:60:f5:3e:30:7f:61:
08:e6:be:9d:aa:96:61:cd:18:8f:f5:78:41:a1:7a:9a:70:ce:
28:a4:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net