Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/n54-V6R69Zbq8jSQEWdfXQAauKs.roa
File: n54-V6R69Zbq8jSQEWdfXQAauKs.roa (raw, json)
Hash identifier: 7adElCmMmz9gs9syq0xK+Ax2i+eejhFJcT8zpbTEy5A=
Subject key identifier: 9F:9E:3E:57:A4:7A:F5:96:EA:F2:34:90:11:67:5F:5D:00:1A:B8:AB
Certificate issuer: /CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Certificate serial: 0194221FE136BE53D81ED2B465C9B4EC0F69
Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/n54-V6R69Zbq8jSQEWdfXQAauKs.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199188
IP address blocks: 176.124.191.0/24 maxlen: 24
185.97.160.0/22 maxlen: 22
185.97.160.0/23 maxlen: 23
185.97.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e1:36:be:53:d8:1e:d2:b4:65:c9:b4:ec:0f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f9e3e57a47af596eaf2349011675f5d001ab8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:6e:23:72:48:e1:f9:ea:40:e5:47:83:d0:
bd:1f:b1:38:91:87:0d:e8:87:7f:84:6e:f3:2c:64:
74:aa:b6:be:27:80:f7:05:55:06:a3:c8:3f:88:b4:
9e:da:72:33:66:3e:6a:c5:1c:24:c4:82:55:1b:10:
7b:ce:4e:de:49:11:e2:66:02:50:9e:4a:c6:0a:44:
ec:69:d8:fa:90:e5:93:f2:ca:e3:32:a9:be:61:3c:
c4:48:50:f9:04:e0:56:ee:d4:83:60:0c:17:72:05:
0f:ad:42:7f:c1:64:ad:29:c9:b6:d1:c7:86:83:03:
51:41:72:ed:08:1b:bb:92:bb:33:b2:c4:92:96:75:
83:9c:97:60:fa:c4:03:da:7c:0a:4a:61:d2:4f:77:
fa:37:73:a7:90:33:2f:69:99:7b:3a:b9:4e:b1:58:
9f:98:fe:43:9a:28:54:a7:bf:71:33:35:c4:70:93:
4c:9a:ee:8d:93:99:d4:9b:c0:1e:98:66:db:be:75:
d3:79:33:fd:ab:71:b7:25:1a:4b:99:e5:4d:70:a0:
c7:39:6a:ce:72:33:5f:ea:de:61:da:44:d1:0f:57:
e2:8e:d0:70:e7:66:65:52:fa:82:7d:f2:e2:30:47:
59:04:8d:72:80:09:1d:2a:9d:aa:45:ab:d5:3d:da:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9E:3E:57:A4:7A:F5:96:EA:F2:34:90:11:67:5F:5D:00:1A:B8:AB
X509v3 Authority Key Identifier:
keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/n54-V6R69Zbq8jSQEWdfXQAauKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.191.0/24
185.97.160.0/22
Signature Algorithm: sha256WithRSAEncryption
17:36:ce:ec:f3:5b:b3:ef:b9:64:d5:07:ed:e6:5f:43:46:7b:
5c:6d:9c:00:72:42:dc:c2:d7:f1:e6:08:fe:95:fd:c2:86:2c:
e7:21:fe:1d:c8:fd:d3:0c:db:80:c9:b2:99:d0:35:33:b9:75:
b7:41:14:7b:be:80:03:c8:2e:49:9e:dc:40:a4:08:49:73:4a:
ee:20:20:ca:71:6a:b6:58:73:e1:06:eb:76:2e:e3:63:61:82:
50:16:d4:ea:3b:c0:8f:47:eb:57:85:6e:64:8e:04:f7:5f:f6:
36:aa:c4:9f:8d:da:4e:de:72:79:20:47:c0:c9:3e:25:7a:99:
81:eb:4a:b1:ff:85:ca:91:d2:69:db:a7:43:65:2a:0b:95:59:
e9:78:ac:fd:28:e1:de:84:ec:92:1f:c2:63:9d:f3:42:f7:e2:
55:15:07:61:70:5d:5a:45:f3:53:be:66:0c:09:5f:63:31:ba:
45:7b:31:f9:ab:8b:11:2c:64:4e:cc:0d:d2:2c:bc:6a:60:49:
d7:59:33:88:15:26:1d:62:30:df:3c:8c:cc:6e:30:44:26:f4:
d4:e1:c1:6f:f2:59:a6:d1:dc:2f:7f:f8:9a:ad:3a:b6:f5:c9:
ce:57:6b:ef:b2:69:17:15:41:b1:74:fe:76:40:41:62:c7:d8:
90:fa:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net