Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/shq45UEehLHlmhOeyI4UV2c2u0c.roa
File: shq45UEehLHlmhOeyI4UV2c2u0c.roa (raw, json)
Hash identifier: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=
Subject key identifier: B2:1A:B8:E5:41:1E:84:B1:E5:9A:13:9E:C8:8E:14:57:67:36:BB:47
Certificate issuer: /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial: 0195BD5836442943343A7BDF84C89749602C
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/shq45UEehLHlmhOeyI4UV2c2u0c.roa
Signing time: Sat 22 Mar 2025 10:13:49 +0000
ROA not before: Sat 22 Mar 2025 10:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41680
IP address blocks: 194.88.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bd:58:36:44:29:43:34:3a:7b:df:84:c8:97:49:60:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Validity
Not Before: Mar 22 10:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b21ab8e5411e84b1e59a139ec88e14576736bb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:5b:5a:a1:28:d1:b9:1f:f6:c9:f3:5c:18:
85:0b:06:6a:a8:7a:b4:4d:09:6e:30:b4:f1:8b:b3:
02:a2:c8:ba:13:7e:b7:04:d6:45:d5:78:74:d2:9f:
8d:3b:dc:ec:87:1c:98:ab:a0:cc:13:49:93:65:fd:
8b:09:de:3d:08:48:8e:9b:51:0f:45:fe:90:7a:ec:
9b:04:eb:a9:70:81:8b:b1:27:fe:4a:7f:98:69:14:
6d:6e:c4:80:f1:5f:0e:89:2b:ab:01:78:02:b7:a0:
23:1b:32:03:5b:ff:20:6a:48:16:44:16:50:ec:2b:
80:9f:03:df:31:26:39:1e:ec:1b:5c:ab:c5:a7:a3:
f8:ce:d8:32:88:d3:28:11:13:64:20:3e:c6:07:e5:
a2:f8:dc:18:e0:5b:0b:f6:cf:4b:ed:df:12:b5:1e:
1d:2f:37:32:2a:00:6e:b3:35:3f:27:39:bc:82:ad:
22:c1:27:aa:d2:3b:04:03:b7:d5:39:5c:95:2c:98:
b8:82:ff:62:6e:d6:f1:55:2c:95:d6:2d:1f:42:ef:
b2:87:fc:c1:17:20:d8:a1:84:7c:ff:c9:0c:c7:75:
17:f5:f6:7e:b8:9c:54:5d:5e:1e:8b:8f:24:61:99:
08:55:fe:44:62:c4:55:db:04:16:ab:ad:9e:4a:36:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1A:B8:E5:41:1E:84:B1:E5:9A:13:9E:C8:8E:14:57:67:36:BB:47
X509v3 Authority Key Identifier:
keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/shq45UEehLHlmhOeyI4UV2c2u0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.4.0/24
Signature Algorithm: sha256WithRSAEncryption
85:31:f2:60:1d:50:45:76:15:fc:f1:4e:5f:af:f9:76:7b:a6:
3f:51:b1:4e:19:d7:5c:67:9f:4d:2a:00:4c:42:ee:69:ef:1d:
ce:e5:c4:b8:eb:12:50:6d:77:29:91:09:dc:ad:bc:c9:a6:64:
2b:ed:fc:db:4c:af:87:c5:4b:83:45:64:76:d6:9c:c7:c9:cf:
69:dc:6f:b5:71:12:37:79:72:07:fe:00:de:46:3d:25:b0:43:
e2:bb:68:ef:7d:92:d4:c0:24:a4:fb:59:13:60:11:92:bf:5f:
2d:32:72:d3:7e:fe:8b:e0:3d:05:75:6f:3e:03:84:88:fa:97:
bb:79:e1:ce:09:2e:a4:ac:4b:4d:29:73:40:4e:ac:f4:cc:0c:
3e:11:27:4c:e2:d0:3e:9c:65:d6:5a:22:62:77:97:b6:01:a0:
87:89:49:5e:95:1f:26:22:62:0b:87:28:f5:de:8b:95:a8:a6:
44:b0:fb:56:9d:01:43:78:3c:13:78:6a:ae:7f:a8:d4:3d:f3:
94:d5:28:9b:b9:c3:02:c1:a7:2e:7c:53:f2:0b:8b:2e:74:90:
0a:c3:d6:e7:d5:df:8e:49:9f:8f:7a:3e:38:7f:4d:94:6e:ff:
4d:75:88:45:ee:6a:2a:f6:c2:4d:77:18:e3:c1:17:e7:50:5f:
3f:f3:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net