Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/J60Pw4hyKKjQhqi1eSTzFtauoi0.roa
File: J60Pw4hyKKjQhqi1eSTzFtauoi0.roa (raw, json)
Hash identifier: Pts66hPVy/S0JFZfVc88DLunALgdL+k1upaL/I3M97g=
Subject key identifier: 27:AD:0F:C3:88:72:28:A8:D0:86:A8:B5:79:24:F3:16:D6:AE:A2:2D
Certificate issuer: /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Certificate serial: 0194266BCEAB534875A817F077C924043AAD
Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/J60Pw4hyKKjQhqi1eSTzFtauoi0.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50097
IP address blocks: 193.104.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ce:ab:53:48:75:a8:17:f0:77:c9:24:04:3a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27ad0fc3887228a8d086a8b57924f316d6aea22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:de:81:89:c1:90:24:43:72:c8:a6:ea:e4:
13:17:59:e2:fe:b2:1e:96:d1:77:01:4f:dd:78:5f:
71:62:ed:e5:86:20:1e:67:13:0d:57:91:d0:19:e4:
0c:e0:48:3e:e1:47:eb:b1:18:7f:7f:81:25:d3:3a:
56:df:95:9c:50:fe:c0:64:b1:99:b0:ca:5b:3c:2c:
7d:88:7e:e4:e5:3c:02:03:77:e4:10:e4:96:d7:72:
cd:8b:67:25:d7:20:70:38:d9:d4:25:14:76:16:d5:
f9:1a:12:e3:fa:44:60:e2:9e:55:8f:67:df:23:b2:
f9:f7:f6:b8:80:6d:d6:2c:f1:d8:5f:16:07:15:79:
11:44:bb:c4:20:0b:d6:0f:05:1b:ef:1f:1f:1b:32:
6c:6b:94:43:53:17:39:bd:ad:2d:09:54:7f:81:27:
9b:fa:34:66:9a:ab:08:2b:a3:fe:49:93:ab:16:e9:
7a:02:ff:51:99:d5:fd:e0:34:77:be:2f:ff:17:47:
ae:15:b6:57:d5:ad:34:20:c5:cb:73:81:23:4c:30:
fd:a6:1c:26:43:3d:9f:a6:ec:54:fe:a2:a5:97:6d:
44:51:34:1e:6b:3d:ec:8a:fa:d4:97:ba:21:4b:0c:
85:a8:78:26:9a:f4:4d:27:b2:04:fb:c6:2d:d6:06:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:0F:C3:88:72:28:A8:D0:86:A8:B5:79:24:F3:16:D6:AE:A2:2D
X509v3 Authority Key Identifier:
keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/J60Pw4hyKKjQhqi1eSTzFtauoi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:19:8d:dd:e6:df:fd:16:71:e6:b7:18:87:f5:7c:66:55:44:
a6:49:10:cc:ae:e3:67:3e:0f:a4:50:e7:91:ea:27:8f:18:58:
57:38:62:39:12:67:a5:34:56:bc:d0:0d:e3:ef:2c:70:e8:e4:
c8:26:4f:a3:9d:5c:2a:60:95:1b:05:1e:75:36:f4:51:02:74:
82:5d:3c:63:8f:3a:af:7e:0c:aa:a9:6e:0d:4d:45:87:af:3e:
c6:34:cc:20:90:95:52:cf:e6:4f:1f:66:d2:5f:cb:9d:a7:7f:
39:39:ae:3f:90:5c:17:ca:da:91:0c:b7:45:00:d4:1b:45:8c:
36:51:f5:8d:ca:2e:85:d0:30:cc:4e:b3:e5:68:af:89:5a:b4:
4c:4b:1d:d1:6f:7b:ed:6d:d8:36:a3:66:d9:30:b8:70:ff:7d:
aa:87:b5:3c:22:32:f0:3e:a0:79:b4:9b:db:e3:7d:ba:37:0e:
27:32:bc:dd:79:5d:85:9c:aa:dd:56:0f:bd:b4:b0:3d:df:d0:
79:a1:69:37:56:47:c6:3c:48:9b:7d:f3:73:2b:76:15:db:fd:
fa:83:05:87:0e:e1:80:ba:71:ae:1c:2a:e9:9b:b1:3d:06:db:
92:63:9b:cd:8d:7b:c9:2f:79:19:89:a4:d0:08:5e:37:d4:14:
13:04:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net