Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/iDV2A_xv2n7q3O9jLTJCnp6vwrc.roa
File: iDV2A_xv2n7q3O9jLTJCnp6vwrc.roa (raw, json)
Hash identifier: /P8KmklcNtKPEQlGLHfAa+ixo1Qe2LIISwyq3ib0jIk=
Subject key identifier: 88:35:76:03:FC:6F:DA:7E:EA:DC:EF:63:2D:32:42:9E:9E:AF:C2:B7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01962055BF81E2638A108540895435B79DA4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/iDV2A_xv2n7q3O9jLTJCnp6vwrc.roa
Signing time: Thu 10 Apr 2025 15:33:32 +0000
ROA not before: Thu 10 Apr 2025 15:33:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 194.36.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:55:bf:81:e2:63:8a:10:85:40:89:54:35:b7:9d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 10 15:33:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88357603fc6fda7eeadcef632d32429e9eafc2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:5c:f5:64:5b:32:b3:29:87:4c:38:a9:b6:
84:16:dd:13:a4:aa:34:64:85:f7:b9:74:fc:7c:06:
b8:64:62:e8:47:4b:2a:51:0f:c1:ab:0d:c6:1a:1e:
98:29:14:ff:c2:54:46:ff:46:27:bf:50:5d:e8:a3:
86:71:f8:e4:a3:6d:ea:51:25:d8:58:e7:94:4f:10:
e1:98:5c:b1:c7:e0:6a:49:a2:9e:c5:08:f1:3d:c9:
da:79:51:34:ab:87:18:c8:a1:fe:02:a4:ce:ca:37:
cd:cf:5f:bb:65:56:b8:eb:1b:bb:ed:44:e4:67:88:
0d:94:0a:07:66:18:48:d7:be:c2:bf:73:f1:c2:76:
75:b2:f9:e8:d7:aa:8e:d5:96:10:4e:14:0b:c7:20:
71:5e:86:d5:30:19:97:61:5f:87:ed:62:7e:db:d0:
72:83:f2:97:11:54:71:7b:fe:bb:2a:db:d5:77:d2:
01:07:ce:11:5b:05:4d:8b:35:ce:08:37:8d:05:96:
34:ff:a9:e5:97:11:03:4e:ce:ed:54:7d:1c:fd:08:
5e:99:28:a8:d9:7c:d0:1e:25:28:7f:b4:54:d8:f7:
ee:4f:7b:a9:72:e7:67:b2:7a:0b:2b:01:68:45:e3:
d4:08:de:c5:1c:73:1c:15:0b:00:a0:e1:7d:44:e4:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:35:76:03:FC:6F:DA:7E:EA:DC:EF:63:2D:32:42:9E:9E:AF:C2:B7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/iDV2A_xv2n7q3O9jLTJCnp6vwrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
18:de:3c:45:fa:f6:65:60:cf:c9:3b:f1:af:06:dc:05:e8:94:
6c:69:bd:2d:c2:98:7e:31:55:82:8e:9c:c4:f1:b7:cb:8a:d5:
ed:34:d9:eb:4b:ea:fb:b1:43:0a:10:f6:cc:29:8b:ed:04:9c:
09:2c:ce:75:3c:97:fa:00:e6:04:b0:6f:0b:3a:56:1b:e3:4f:
cf:cf:6d:87:1a:90:27:81:80:42:c5:c0:76:39:83:8c:45:fe:
00:9d:be:7c:c4:c0:90:f2:d8:15:1e:47:ac:12:5b:cc:e8:de:
ab:68:ba:29:f9:36:07:ca:5b:e1:39:d3:37:9a:30:c4:50:33:
18:fe:1a:df:94:9e:10:2b:e7:eb:21:c2:75:43:3e:d4:24:9d:
6c:bb:1b:f9:2c:db:36:4f:7d:f2:87:e3:fb:6f:09:92:20:4b:
ed:51:cd:c5:5d:e2:f4:7a:f1:5b:b6:77:f1:2a:7e:17:c0:8e:
31:e9:50:ac:9a:5f:b1:c1:a0:fa:64:fd:cb:fe:fa:73:e8:7c:
97:2b:64:61:b5:85:e6:2a:02:5b:9b:85:88:09:e9:5e:a0:e7:
77:1e:11:d9:9d:61:e7:fb:d4:c1:81:b9:e9:b3:fe:26:a0:d6:
80:69:6a:f5:5d:1a:80:4e:48:30:4f:b9:9b:66:54:3c:95:94:
3c:72:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net