Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/0PPKwxGiNMBSbhAVhmxpYBAC0QY.roa
File: 0PPKwxGiNMBSbhAVhmxpYBAC0QY.roa (raw, json)
Hash identifier: WQQqIrp440ZZBY56ooFkJtOlObbPJTfYbhMoRZRs5sc=
Subject key identifier: D0:F3:CA:C3:11:A2:34:C0:52:6E:10:15:86:6C:69:60:10:02:D1:06
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 019424B3E758262AB3D7353B721395409606
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/0PPKwxGiNMBSbhAVhmxpYBAC0QY.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35472
IP address blocks: 193.218.44.0/22 maxlen: 22
193.218.48.0/20 maxlen: 20
193.218.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e7:58:26:2a:b3:d7:35:3b:72:13:95:40:96:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0f3cac311a234c0526e1015866c69601002d106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:90:7a:73:4b:3a:14:3f:38:0f:d0:8d:1e:
e1:f3:78:20:43:41:92:eb:1f:8e:be:a2:97:29:6b:
ea:57:fe:b3:2d:96:a3:a4:db:da:26:6f:12:41:9d:
80:59:93:a1:df:10:a2:1e:e9:08:19:1c:ba:81:87:
d4:81:07:6e:bb:4d:ab:b7:55:9f:0d:83:92:07:75:
a8:d6:ec:82:17:53:54:95:cc:ce:22:84:69:55:4c:
c4:63:8c:de:c3:99:30:e8:43:a2:7a:fd:4b:0e:69:
c2:d6:02:48:c0:72:7f:86:d4:7f:59:be:cf:43:a2:
6f:aa:6b:d0:75:98:73:6e:fc:26:28:0c:b6:67:73:
c3:32:f8:ce:fe:ee:54:44:9c:ae:ec:09:a7:5c:5b:
ea:e8:99:9e:bf:1f:97:be:7e:29:90:61:12:0e:b3:
f3:a6:88:34:33:9f:87:2d:18:48:af:46:5f:72:c6:
67:91:99:18:e3:b5:ea:3c:2f:8b:43:4b:4c:dc:d9:
c3:c8:ed:87:42:10:59:28:f8:b5:e9:38:02:5a:b6:
65:06:2d:de:b9:6b:f8:20:2a:10:bc:aa:33:7b:a1:
10:55:00:f4:22:43:7c:78:d1:eb:db:07:88:e5:70:
1e:6e:6f:86:dc:cb:7e:70:55:4d:da:92:38:78:6b:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F3:CA:C3:11:A2:34:C0:52:6E:10:15:86:6C:69:60:10:02:D1:06
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/0PPKwxGiNMBSbhAVhmxpYBAC0QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.44.0-193.218.71.255
Signature Algorithm: sha256WithRSAEncryption
64:2a:21:df:96:45:27:56:05:04:9d:c6:82:46:65:d3:9d:e4:
9e:32:d6:43:60:18:90:9e:14:5e:67:d3:e9:36:a6:00:0d:42:
80:7d:fc:04:f3:d5:5a:76:a3:66:00:fd:56:50:4c:59:17:a2:
a3:06:0f:37:89:37:83:ac:0e:ec:ee:5d:a0:54:1f:26:b2:84:
49:ca:29:80:22:2d:bc:5f:69:0c:98:e3:64:38:97:4f:78:3c:
32:b7:08:f4:4b:93:81:b3:8d:de:a6:b7:0d:a9:b0:52:9e:98:
dd:fe:0b:d3:29:fc:18:2c:ee:06:a4:29:ca:da:48:9a:3b:e5:
b1:45:ef:ba:b0:c9:0a:9f:c3:52:d0:a2:60:91:0e:53:60:29:
d0:5d:73:2a:00:fa:d3:c5:04:f6:1a:56:67:58:70:92:fa:d8:
86:2a:2f:fa:02:fc:56:32:60:e6:0b:b0:a4:80:8c:ed:6d:11:
04:41:a8:e7:ae:6b:23:b0:1e:43:c8:ab:05:54:c5:0e:10:3f:
c1:d0:ab:32:c9:0f:a1:1b:a2:a3:19:ee:3f:51:5b:82:da:a6:
0c:26:71:c7:0c:a1:a0:21:e6:be:10:7d:a8:52:71:92:00:f3:
ab:f4:38:8b:02:5a:f3:8c:67:d2:b9:91:9c:90:0c:a0:7a:cb:
0b:8a:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net