Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/3JlcQxD2NXWLaEj6J42YSdi1quE.roa
File: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (raw, json)
Hash identifier: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=
Subject key identifier: DC:99:5C:43:10:F6:35:75:8B:68:48:FA:27:8D:98:49:D8:B5:AA:E1
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 0194266B2F5BF48A509C9BB70496CF20CC44
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/3JlcQxD2NXWLaEj6J42YSdi1quE.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 194.0.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2f:5b:f4:8a:50:9c:9b:b7:04:96:cf:20:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc995c4310f635758b6848fa278d9849d8b5aae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:80:af:60:b6:f0:1e:46:e6:78:8c:c4:fc:75:
67:71:4a:03:b4:37:8e:ad:37:5b:34:fe:07:d7:a4:
77:19:70:1a:3a:2a:88:10:60:90:26:36:81:53:7b:
be:1c:e2:54:e3:52:27:97:46:ce:94:fa:e9:c4:4c:
5d:8a:ed:e9:eb:04:3e:86:53:53:b4:e8:48:6a:d4:
cd:2f:f7:6e:4e:96:05:be:7c:70:04:ea:65:a8:2f:
62:cb:62:b8:62:69:de:a0:d0:d5:5b:ad:0b:54:80:
02:52:c8:33:a0:7c:91:a5:53:d3:cc:22:d0:8e:fa:
40:fa:33:fa:f2:6a:da:4d:8a:c9:6b:61:de:74:d8:
f8:53:31:ad:54:63:8c:83:f4:99:38:42:d1:1c:6e:
c9:ac:e1:d8:15:01:1e:9f:cc:8e:da:60:76:7f:83:
ed:a9:34:07:07:63:1b:cd:79:51:fb:4a:49:16:3b:
41:b9:be:8a:f2:81:5c:8d:78:01:19:28:16:ef:95:
15:f0:cf:c0:0a:9b:27:88:e9:ab:72:76:34:0d:1d:
49:0f:c6:6d:fd:fb:29:f9:17:8e:cf:a3:e4:5f:0b:
31:8c:c8:a6:be:1d:87:93:63:cb:4b:be:16:23:28:
71:70:26:88:4e:29:8d:c1:9b:f4:10:6c:36:47:7d:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:99:5C:43:10:F6:35:75:8B:68:48:FA:27:8D:98:49:D8:B5:AA:E1
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/3JlcQxD2NXWLaEj6J42YSdi1quE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.216.0/24
Signature Algorithm: sha256WithRSAEncryption
48:cc:c9:43:bc:3e:19:9f:b6:b2:fd:d5:9a:f1:79:c1:b9:aa:
03:e0:7d:42:34:bf:69:ec:18:90:71:e8:7e:75:38:45:c6:a2:
02:6d:67:09:ce:f1:23:c4:1e:fd:1f:b2:14:4c:65:d3:f3:5d:
b8:15:d9:b3:16:43:b5:a3:dc:f5:64:c4:4d:a3:ae:40:36:b7:
6e:fe:db:ba:67:12:84:87:1a:27:90:bd:c3:81:b7:18:0e:8c:
02:16:9e:c4:23:f4:93:8a:d6:01:3f:db:88:e9:2f:fd:49:e1:
1a:b1:ae:2f:ae:48:ea:93:39:0d:ae:92:ae:e3:fa:66:5a:6b:
10:fd:2e:09:09:2d:1b:8e:da:32:a7:32:3b:65:a5:91:35:39:
ab:a1:f0:77:02:3d:d0:c2:91:85:02:77:4a:85:96:3c:10:4c:
fd:96:fe:38:2b:4b:c6:11:f0:f8:f7:56:24:11:7c:aa:45:69:
c8:42:6f:5c:5b:4e:0a:86:0b:99:9f:e2:8a:c6:81:3e:ba:fb:
d8:ba:8e:4f:69:fb:b5:7c:5f:79:dc:c4:bd:0b:21:45:69:b7:
ca:6a:a9:e3:38:8e:ac:1d:e2:0a:59:60:3f:b8:6d:0c:9f:a2:
1c:d3:a2:66:5e:77:f9:9e:dc:83:6b:a6:73:07:1b:d8:57:72:
85:50:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net