Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/1Sndi7er7bpQydqDqOMh1TcWi2c.roa
File: 1Sndi7er7bpQydqDqOMh1TcWi2c.roa (raw, json)
Hash identifier: 1MEp25vqqZ0ufx7FrXXarnt6HcRltVfMx9pP8jk/+jU=
Subject key identifier: D5:29:DD:8B:B7:AB:ED:BA:50:C9:DA:83:A8:E3:21:D5:37:16:8B:67
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 019427484762654F09BB297E7F15E39D7CB4
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/1Sndi7er7bpQydqDqOMh1TcWi2c.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13004
IP address blocks: 88.218.139.0/24 maxlen: 24
188.120.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:47:62:65:4f:09:bb:29:7e:7f:15:e3:9d:7c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d529dd8bb7abedba50c9da83a8e321d537168b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:ac:4e:5d:da:f3:fe:6f:85:68:3a:2f:65:
c6:e4:76:67:4f:c8:33:c1:89:31:e6:6e:9b:46:a7:
c3:86:47:30:41:a7:ab:a3:9a:af:92:09:7d:89:e4:
bf:d7:7c:6e:ee:0a:40:a2:70:15:c3:2d:e0:cf:3d:
23:13:a5:3a:8d:84:db:d0:b2:5b:f7:5c:ca:78:f8:
43:2d:5a:e1:35:dc:e3:eb:38:03:74:f5:49:55:f9:
d9:8e:93:d4:b6:36:33:d5:9b:e0:09:ce:8a:ec:6b:
9a:3c:d9:d4:46:2b:30:f5:bb:29:fb:32:84:25:dc:
5a:c8:85:38:32:e0:05:f1:88:bd:22:84:84:fc:56:
a9:fa:14:97:2b:08:e1:bc:ea:82:c6:f3:0e:3d:b2:
cb:51:f6:10:32:2d:36:ba:53:7f:de:5a:40:f3:f6:
a3:65:d7:30:44:81:3a:ea:89:47:8e:36:d5:51:bf:
67:e6:4c:64:fb:23:a8:85:e7:40:2c:ad:0d:ce:63:
31:0b:af:dd:15:58:35:19:e5:ff:62:3c:46:ca:53:
9c:71:7d:3b:d2:7f:8b:a7:09:91:c0:c7:31:07:83:
74:8d:7a:c4:87:a9:64:aa:85:13:67:20:f6:d6:6d:
d6:c6:32:fc:d4:6c:41:09:64:54:8f:34:42:2b:98:
33:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:DD:8B:B7:AB:ED:BA:50:C9:DA:83:A8:E3:21:D5:37:16:8B:67
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/1Sndi7er7bpQydqDqOMh1TcWi2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.139.0/24
188.120.127.0/24
Signature Algorithm: sha256WithRSAEncryption
20:15:a7:08:27:86:2c:75:34:36:5c:0a:20:1b:36:8d:18:af:
31:e9:5c:e8:28:30:d6:d9:d8:f5:6a:71:7e:19:d4:91:5c:2a:
c2:15:e3:02:09:ac:4e:18:6c:7b:b1:84:5f:d2:c1:93:e6:6e:
12:7d:cd:a2:a0:de:9b:ac:30:b2:b0:cb:e4:09:69:80:8b:29:
58:99:42:8b:f6:2d:88:fb:17:66:59:e2:a3:ce:65:0a:8f:5d:
e3:68:83:15:4d:c4:c4:0d:f4:1e:e6:37:51:7d:6b:fb:19:fc:
92:e5:b6:69:1f:db:77:a6:fb:ae:54:61:d2:ad:01:8b:65:92:
b4:d3:4f:04:3c:05:69:d8:5f:58:5c:47:88:c5:a4:e3:8a:0b:
ef:b6:32:c3:9a:32:7d:2e:ef:b4:9d:71:fa:b8:74:37:6e:14:
39:81:e6:09:ec:14:f4:01:9f:e1:77:8f:96:75:7c:31:6c:89:
15:1c:cf:93:eb:71:35:8c:b6:5f:35:0e:7b:f4:32:15:10:9c:
1e:0b:a6:b7:87:f5:53:08:fe:51:ff:57:8a:64:2b:c1:8f:8d:
3e:b5:8e:6d:aa:6b:15:de:52:54:65:2a:28:f7:12:51:03:7d:
53:a8:5b:1e:7e:5c:6f:d4:3d:7d:d4:2e:6b:cd:12:79:5b:39:
6e:8b:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net