Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/JysSz_R1K3TNaznJ02DbQNBve_s.roa
File: JysSz_R1K3TNaznJ02DbQNBve_s.roa (raw, json)
Hash identifier: BaOSaAFh8MSaQI0AxI9H+YSRs1439Nfg5CR//S5kRHM=
Subject key identifier: 27:2B:12:CF:F4:75:2B:74:CD:6B:39:C9:D3:60:DB:40:D0:6F:7B:FB
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 0194228E3AA07A9F0279C3FB7DF5291B3380
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/JysSz_R1K3TNaznJ02DbQNBve_s.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209651
IP address blocks: 193.104.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3a:a0:7a:9f:02:79:c3:fb:7d:f5:29:1b:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=272b12cff4752b74cd6b39c9d360db40d06f7bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:88:2e:b7:c3:6d:91:d9:0f:6b:06:2b:a2:
c0:9e:9c:70:60:66:52:4e:86:25:84:02:2a:01:08:
5c:6c:9e:e6:e9:d3:0e:f4:67:5d:86:c3:ec:a2:56:
ab:50:8a:62:d4:13:cf:b4:d1:f0:bc:31:12:03:08:
77:11:7e:ac:4a:02:38:c0:07:f8:b7:fa:9b:5d:e4:
5b:eb:45:87:c4:9a:36:fd:c6:11:0b:ea:f3:a9:54:
d9:d3:6c:4d:63:d3:5c:b9:13:39:ba:b2:5f:55:e3:
9f:24:01:8d:1f:cb:ec:d1:3b:59:b2:f5:38:9e:28:
79:b8:a5:c4:c0:4d:f7:05:88:f8:27:fb:11:37:e1:
95:33:ab:79:59:ef:cf:4e:ea:0f:96:5f:f8:39:92:
23:60:be:26:a0:30:08:29:a8:5c:31:20:97:bb:12:
f5:23:fe:c4:7b:48:57:d2:ae:4a:03:40:e5:6b:6c:
91:65:1d:20:59:5b:c8:cc:b4:d6:cc:ef:af:0c:4d:
76:ca:2f:a4:3d:dc:c6:e7:51:54:2c:d8:a2:40:c1:
e7:c1:c9:63:26:f6:c1:3d:35:30:ba:5c:c6:96:92:
0d:85:5a:93:ad:3b:e1:06:1f:3e:b3:15:3e:a0:91:
40:e7:28:78:07:91:e4:9e:21:7c:58:95:ec:34:b7:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2B:12:CF:F4:75:2B:74:CD:6B:39:C9:D3:60:DB:40:D0:6F:7B:FB
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/JysSz_R1K3TNaznJ02DbQNBve_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.133.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ef:d2:df:c1:44:c9:aa:81:12:c4:b6:ac:3e:bf:7d:34:c7:
ae:65:9b:da:a7:31:57:99:b1:82:0f:09:20:b6:1d:c7:67:29:
f2:e0:aa:e7:3e:08:2d:89:6d:25:4b:ce:e8:28:5f:99:c4:7f:
76:4c:56:48:97:9a:de:ce:b4:30:e2:0d:49:21:5a:a5:ad:8d:
fa:71:22:87:5a:e3:8c:79:68:4f:4b:ac:82:48:af:34:bc:8f:
a2:73:9d:0e:c7:1c:90:fc:0f:fa:40:53:ca:ba:9f:b6:fd:09:
b4:5e:60:3e:50:6c:05:ff:1c:86:95:37:47:32:b6:ea:99:47:
b7:6e:25:08:cf:a4:11:3e:48:48:cc:ed:88:e7:d8:a5:66:6d:
55:47:a4:ca:b4:9b:01:99:4c:77:0d:ac:2a:98:1a:89:cf:96:
ee:55:86:30:49:cc:1b:5c:e6:82:71:31:34:66:79:4c:20:6d:
77:c4:bd:db:3d:e4:d1:32:48:e0:b4:bc:44:b6:2d:6d:a4:5c:
e3:c7:de:b2:81:6b:c5:80:a2:39:0c:22:7b:7a:2d:e8:c7:41:
78:52:6d:11:71:4a:94:89:09:dd:1b:82:8f:fc:90:15:8e:a3:
e3:86:20:72:b5:94:c9:1a:7f:dc:6e:d0:f3:b9:89:7d:fd:bc:
27:6d:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net