Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/oXNlY-oBhR7dTf9pZaxVV6POHQg.roa
File: oXNlY-oBhR7dTf9pZaxVV6POHQg.roa (raw, json)
Hash identifier: K1qaC6BRPPJv+auFKCvtZX9lIT9BoIVDnlW+2EVLt0A=
Subject key identifier: A1:73:65:63:EA:01:85:1E:DD:4D:FF:69:65:AC:55:57:A3:CE:1D:08
Certificate issuer: /CN=edd482c2bee8460048d82902cec9867205222997
Certificate serial: 019584829A05445B647AEB67112281C6885E
Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/oXNlY-oBhR7dTf9pZaxVV6POHQg.roa
Signing time: Tue 11 Mar 2025 09:21:46 +0000
ROA not before: Tue 11 Mar 2025 09:21:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31052
IP address blocks: 193.0.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:82:9a:05:44:5b:64:7a:eb:67:11:22:81:c6:88:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd482c2bee8460048d82902cec9867205222997
Validity
Not Before: Mar 11 09:21:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1736563ea01851edd4dff6965ac5557a3ce1d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:83:b6:f8:49:52:aa:ce:76:43:05:dd:29:
24:31:9f:77:a3:df:49:b0:78:63:2c:23:df:4b:97:
d8:1d:ad:c7:17:c7:8f:6c:20:d5:c5:58:b7:bd:0c:
41:94:6c:ac:32:ba:5f:cd:cf:aa:6e:8c:f5:1f:8a:
e2:0b:2f:dd:3e:ef:f9:fa:44:aa:c4:60:2b:d0:a1:
da:98:14:39:63:93:b8:c6:2c:78:83:e4:38:20:94:
f3:31:3b:ee:9a:1b:46:e5:ea:08:f4:48:60:00:10:
d8:38:98:46:55:10:21:71:50:d5:bb:9c:b7:c2:12:
f0:d9:a9:1c:5b:f1:50:c8:5c:36:1c:31:e5:f5:e8:
8c:9a:dc:34:38:ce:5b:e6:d1:ef:df:97:ff:00:98:
60:5e:68:84:42:9f:5f:19:6d:98:2b:19:73:7e:8b:
d8:e6:de:69:4f:4e:c0:4c:45:23:0b:7e:b1:6a:27:
65:51:31:eb:18:db:23:5a:99:ff:40:fb:42:f0:4c:
e6:a0:de:4d:30:14:86:3b:e2:5d:e8:c0:f9:d8:43:
e6:aa:bb:ae:16:40:85:e0:39:53:09:8a:5c:4d:f4:
7f:81:21:2e:a8:21:b9:36:09:35:d6:71:0a:19:81:
7f:17:a9:0e:7f:bf:8b:a4:31:7d:ea:ed:05:34:70:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:65:63:EA:01:85:1E:DD:4D:FF:69:65:AC:55:57:A3:CE:1D:08
X509v3 Authority Key Identifier:
keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/oXNlY-oBhR7dTf9pZaxVV6POHQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.224.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b7:02:2d:16:38:4b:5d:81:12:b3:44:4a:a2:d5:96:59:fc:
9c:7b:61:01:14:14:5e:4e:14:e9:75:8a:32:82:b6:ba:0a:bb:
41:6e:0d:a1:73:2a:e5:41:5e:da:0a:a1:65:4f:99:63:74:97:
49:78:61:7b:98:95:ed:6e:00:0a:ee:df:58:4c:5e:ca:fc:7a:
3f:62:84:36:21:ef:5f:38:78:2e:d9:f8:18:ed:26:70:20:35:
51:4c:60:8a:a5:b2:15:86:fc:87:51:b7:89:b3:3e:01:e8:b7:
2f:cd:5c:6e:fe:13:19:16:ba:43:83:56:45:26:ee:cc:b5:11:
46:40:3a:5e:7b:06:6f:93:1a:e4:ad:7c:11:3f:e8:03:7c:d9:
15:6d:41:da:d3:64:3d:a5:f3:8f:c7:3f:4a:6c:d4:5c:9c:70:
91:1a:e9:c5:2f:71:91:b2:2a:12:aa:f4:e1:f5:d4:6f:b2:a8:
69:ef:fa:02:b4:f9:e3:ee:90:fb:75:64:c2:65:79:f3:54:36:
7e:f0:c0:87:e8:b6:ac:8c:57:8d:68:e6:1f:d6:ca:33:63:90:
72:0f:c7:d7:42:45:0c:c1:43:1a:5a:4b:7b:38:05:94:7f:86:
aa:4f:81:bc:25:00:95:b7:7a:c6:13:71:91:fd:5c:b4:82:68:
cd:89:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net