Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/icJdEYHRoQ8a2HsX6tAswYTYm1I.roa
File: icJdEYHRoQ8a2HsX6tAswYTYm1I.roa (raw, json)
Hash identifier: yVJLCj9xlz6tDxLUrnxZtc8J67boCW3htMxhNuv+eUk=
Subject key identifier: 89:C2:5D:11:81:D1:A1:0F:1A:D8:7B:17:EA:D0:2C:C1:84:D8:9B:52
Certificate issuer: /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial: 0194228D8691BFEE76EF3BAF460EE509F66C
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/icJdEYHRoQ8a2HsX6tAswYTYm1I.roa
Signing time: Wed 01 Jan 2025 15:48:07 +0000
ROA not before: Wed 01 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215374
IP address blocks: 193.8.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:86:91:bf:ee:76:ef:3b:af:46:0e:e5:09:f6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
Validity
Not Before: Jan 1 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89c25d1181d1a10f1ad87b17ead02cc184d89b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:00:7b:5e:49:02:17:df:7e:5e:f4:96:51:
4f:c6:5f:0d:49:10:f8:dd:a9:dd:9b:4f:dc:0e:18:
df:a5:75:d2:3a:23:d2:9b:47:83:d0:7d:ec:4d:45:
27:bc:9e:de:16:a5:c5:12:e4:f1:64:46:c2:78:2d:
7e:f4:33:bb:8f:f2:72:62:3c:4e:88:f9:5b:6a:99:
f8:63:e5:1a:92:8e:85:62:de:23:40:61:01:d0:a2:
85:ee:8e:1a:af:80:7e:dd:48:8a:3f:2e:11:02:d6:
42:42:0b:cd:1a:4f:60:bf:28:49:8f:d9:fe:1f:65:
6b:fa:79:a3:b4:05:46:9b:f4:d0:a2:d2:87:10:10:
d5:76:a9:b0:7c:ab:23:75:83:01:9b:3d:6d:e1:af:
61:5e:c0:25:86:23:ce:9a:9d:01:40:27:d9:5f:bc:
af:10:06:15:98:f8:c3:a2:44:a1:2e:12:c6:fc:6c:
35:69:23:18:24:a2:9c:79:fc:30:ac:78:60:f3:5e:
73:c4:f9:6b:82:03:df:de:1b:88:6e:b8:57:a0:41:
91:33:61:fc:e9:f3:57:67:b9:79:25:d7:bc:8f:d4:
dc:98:ef:92:be:4f:6e:08:0c:57:19:c3:0d:06:58:
40:f4:0e:69:0e:40:61:ab:df:a9:4c:24:8b:76:5e:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C2:5D:11:81:D1:A1:0F:1A:D8:7B:17:EA:D0:2C:C1:84:D8:9B:52
X509v3 Authority Key Identifier:
keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/icJdEYHRoQ8a2HsX6tAswYTYm1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.73.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:93:ea:a5:5e:70:33:5a:28:f8:0f:d5:fc:3d:e5:24:5c:bb:
73:34:bd:89:2c:86:c2:20:9b:01:6e:b4:34:45:27:35:aa:0c:
e2:d0:ab:74:04:c9:7e:4f:b6:26:6d:d9:be:11:63:ba:3d:0a:
a0:81:57:9e:8e:ea:f4:5c:ce:cc:12:0f:44:2c:ee:9b:d5:3c:
86:57:1a:c7:c8:e2:08:b4:f3:0c:03:1b:29:5e:ba:5d:e9:32:
08:58:c0:40:62:8b:ff:b6:22:5f:88:49:29:a5:7b:7b:88:29:
f8:63:9e:cd:95:24:52:36:42:cd:17:05:86:22:15:0c:83:02:
09:4d:90:ec:9b:5b:20:f0:f4:53:e1:62:c9:ba:f2:7c:20:46:
ab:51:4e:ab:c5:5c:07:20:f9:0c:1c:0a:13:81:1e:8d:6d:28:
53:45:31:24:cf:0d:0f:1a:0e:4f:7e:3e:30:b1:19:69:fb:86:
a1:78:94:df:7c:86:55:67:06:fa:ca:a7:dd:e4:35:72:a1:f0:
dd:26:a8:f6:08:40:b6:ee:da:79:2c:e9:c3:2d:03:b0:98:e0:
d0:92:53:c2:8f:f4:c1:9a:88:ce:6a:79:54:15:85:5d:2c:86:
be:ba:40:8a:d5:d4:9b:46:98:e4:1d:20:19:53:52:8f:7b:fb:
81:3b:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net