Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa
File: ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa (raw, json)
Hash identifier: A+6pCmvRh21bff+k990m7MW26aQWM6C7J37zdRTRafw=
Subject key identifier: 65:85:8B:A5:9D:F9:29:98:91:69:6C:52:78:5B:84:9E:1E:A5:C6:5D
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 019425219165CFF350696B40F8FD52DA8BB1
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 193.43.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:91:65:cf:f3:50:69:6b:40:f8:fd:52:da:8b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65858ba59df9299891696c52785b849e1ea5c65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:50:dd:ef:3b:a2:0f:58:cf:de:60:41:62:
21:34:1e:38:42:e8:dc:d8:1a:c0:5d:7b:4c:bc:93:
c6:d7:87:6a:23:fd:3b:41:3e:56:f3:69:5d:8c:82:
93:00:2d:c1:99:dc:48:8e:69:eb:ec:65:c3:31:68:
e4:25:9f:19:54:92:06:3e:0e:88:88:c0:e3:7d:aa:
af:e8:c9:f0:45:a4:0f:16:58:51:9a:c0:69:28:ba:
13:6e:64:dd:e1:d4:72:88:f8:8b:06:a3:0d:a2:ec:
0b:94:79:fe:ee:fc:05:dc:89:2c:7f:6e:f3:b4:39:
37:4d:e4:21:9c:52:5d:72:56:5b:a3:9f:a9:33:f8:
15:89:5b:8c:eb:92:78:65:9c:bd:52:ec:22:fb:07:
bd:37:fe:96:6d:83:df:30:bd:5d:9f:18:db:84:0e:
9d:fd:6d:18:49:97:da:33:84:14:9a:ea:4a:ce:5b:
c2:5c:ef:76:ee:a4:34:5c:cd:99:da:16:3e:52:14:
2a:eb:44:4a:1e:75:a5:43:ef:14:bd:ea:e9:ff:04:
4e:d9:d0:34:d0:e6:82:5e:ff:7f:90:b2:20:b8:bb:
68:71:ab:e3:ef:14:91:a9:71:f7:9f:49:2c:e1:91:
66:66:df:f5:7f:7f:21:5a:be:94:d0:88:4d:2b:ce:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:85:8B:A5:9D:F9:29:98:91:69:6C:52:78:5B:84:9E:1E:A5:C6:5D
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.109.0/24
Signature Algorithm: sha256WithRSAEncryption
09:88:fa:82:06:be:8c:e8:f7:a4:71:4a:7f:4d:51:61:25:16:
70:9f:af:31:94:1b:25:f5:81:7a:79:26:cb:a6:fe:96:22:bb:
4c:8a:4d:60:7b:fb:0a:42:2b:c9:cc:79:5c:5b:9c:bf:69:2b:
c9:07:fa:3e:e6:cf:93:d2:d9:79:2d:92:f1:b5:0d:0d:df:02:
27:ef:ef:b3:68:1d:f6:79:b6:13:cc:7f:ce:1a:3b:25:af:69:
2a:9d:2f:03:16:c6:19:fa:49:a0:98:64:8e:0f:db:09:20:88:
11:00:80:42:3d:ce:4f:1b:32:61:04:8d:53:b7:e4:e0:05:c1:
d1:29:4c:0c:18:c9:a1:d2:19:29:f0:6a:7b:64:eb:01:ee:65:
08:fd:2d:f0:c5:70:82:29:0f:1f:87:39:5c:2b:d2:ad:5d:82:
b6:33:6f:ef:42:d0:16:91:a0:ca:4a:4c:9a:e2:cf:1c:95:2a:
65:48:27:c5:c4:0c:e7:c9:17:04:66:8f:5e:ce:6d:f7:25:14:
c2:f7:09:af:d7:01:43:ca:d9:38:f1:56:a4:da:7a:d0:69:07:
35:d5:95:56:1e:58:55:45:11:4f:02:68:01:38:27:e6:0f:f0:
2f:2f:ac:db:ea:92:21:e8:1c:f7:f8:30:66:cc:80:b1:62:9a:
ac:e3:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net