Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/YFU0rK0Che90IboZIqxr-FhxEZs.roa
File: YFU0rK0Che90IboZIqxr-FhxEZs.roa (raw, json)
Hash identifier: +N2ECLyQEU3So4t+LKUIhIdvw7PoPWjMAcQERFvIBbI=
Subject key identifier: 60:55:34:AC:AD:02:85:EF:74:21:BA:19:22:AC:6B:F8:58:71:11:9B
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 019427B588149E1C3AF9CC6FC38B209A2B32
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/YFU0rK0Che90IboZIqxr-FhxEZs.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196876
IP address blocks: 193.105.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:88:14:9e:1c:3a:f9:cc:6f:c3:8b:20:9a:2b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=605534acad0285ef7421ba1922ac6bf85871119b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:15:a8:31:4c:0e:ba:cb:6a:7e:4c:f4:0e:
f7:2b:0c:c9:66:e4:23:0e:31:b3:44:88:a1:97:d8:
f0:9f:99:1b:16:98:01:d4:11:92:63:8a:ad:c3:c8:
2b:c5:e0:1e:e7:45:f7:c7:c4:48:a5:78:83:12:0a:
2f:ad:fa:b7:ed:e1:7d:bd:9b:23:5b:99:dd:5f:f6:
10:96:35:3c:12:48:27:07:ff:b6:ed:99:01:aa:06:
db:8f:44:d1:84:aa:54:2b:c2:e5:05:60:b0:70:08:
1d:f9:3e:87:e8:04:76:52:bd:eb:f2:2f:1e:c0:f9:
10:00:62:d8:70:86:14:d4:52:e4:4a:a8:d6:0e:9e:
1a:72:86:dd:a2:cf:ee:88:8f:44:63:c3:a8:6b:12:
c6:e6:ee:2f:50:a2:3e:b7:3e:cf:a1:bd:73:0f:10:
a8:12:a3:df:2b:50:df:af:20:b7:62:4b:fc:53:87:
32:ea:a2:e2:cd:6f:6a:22:70:62:28:88:73:33:38:
cf:2b:75:2f:f9:59:84:ff:4f:6e:15:c0:e0:96:4e:
dd:98:4c:9f:5b:45:5f:38:75:19:51:34:94:4d:13:
57:d5:06:b2:7c:2a:f5:cf:64:e6:6a:c5:3a:27:fb:
9d:9d:63:1b:e7:b7:47:d2:a4:5f:89:a4:42:0c:06:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:34:AC:AD:02:85:EF:74:21:BA:19:22:AC:6B:F8:58:71:11:9B
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/YFU0rK0Che90IboZIqxr-FhxEZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.148.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0b:d4:67:46:a5:92:3f:4a:1a:7b:20:f4:c4:56:ac:c0:87:
e1:8e:e4:4a:68:36:5f:2c:86:09:b5:2b:86:b5:95:f7:96:e6:
1f:55:f9:5d:f3:8c:03:f0:ad:51:14:16:a5:95:5c:37:71:b1:
98:1a:06:df:53:21:12:a5:7b:93:5c:fd:67:25:5b:a5:53:93:
59:b5:77:df:96:ab:0c:b1:e3:3a:7d:f3:12:c0:37:2b:d9:6e:
9c:80:6b:75:8e:6c:f4:75:89:29:80:47:48:82:b1:cd:dc:18:
f2:b8:33:ef:97:ca:bb:5a:dc:17:8e:62:97:aa:de:80:7d:27:
ee:dc:28:58:4e:c8:7d:5b:d2:d2:ca:e2:1c:be:bb:12:05:fd:
1c:67:9b:38:51:94:d7:c2:e9:15:03:b0:54:f3:31:37:32:fb:
a9:a6:b6:fc:f8:79:7d:6d:48:3c:74:a4:64:ff:d3:03:c0:25:
dd:e4:be:5b:bf:a1:d4:dc:c2:c8:e5:cc:99:82:4f:ae:aa:8c:
22:bb:3a:c3:78:c4:1f:8b:59:0f:46:fa:3b:34:41:9f:c7:08:
57:c6:54:29:c3:5c:4f:ee:cb:26:09:d2:52:a2:78:bb:e7:17:
b4:fc:33:b3:9d:ae:f6:6a:49:a1:67:6e:82:a5:68:35:f5:8a:
ef:91:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net