Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/KTueJxojN50dmJRK4T-lWfMfx34.roa
File: KTueJxojN50dmJRK4T-lWfMfx34.roa (raw, json)
Hash identifier: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=
Subject key identifier: 29:3B:9E:27:1A:23:37:9D:1D:98:94:4A:E1:3F:A5:59:F3:1F:C7:7E
Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial: 0194258F91460E7F5F4C5B48740B3CCE7058
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/KTueJxojN50dmJRK4T-lWfMfx34.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44880
IP address blocks: 192.101.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:91:46:0e:7f:5f:4c:5b:48:74:0b:3c:ce:70:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=293b9e271a23379d1d98944ae13fa559f31fc77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:83:5e:d5:14:c3:79:a4:d8:02:48:4f:8d:
d7:2e:fc:b6:c6:c8:0c:2f:9a:89:5b:f9:20:9e:a6:
27:5f:38:a5:07:ec:07:ec:d1:a8:98:2c:89:24:2d:
39:14:da:3e:e1:c1:2f:1e:07:74:8a:c7:0b:55:31:
b5:25:6b:4b:5c:97:1a:78:da:f0:c7:3f:52:3a:4f:
21:03:88:9d:c3:17:d3:84:05:93:68:a9:65:ab:65:
9a:94:19:7a:4e:e9:b7:6f:44:e7:97:b3:e4:48:27:
a5:95:e5:cb:23:d7:07:0f:4e:65:2b:ca:0c:07:26:
9b:fa:a7:9b:6d:5b:f1:b3:5d:62:12:14:a1:6d:66:
f2:35:56:30:fe:b5:e6:fe:42:7f:9d:45:a3:82:a4:
e5:15:44:48:24:f4:51:38:72:4a:00:df:58:be:13:
a2:c8:9d:4d:91:48:c9:ed:f7:5c:ff:fb:f2:36:0f:
c2:4e:20:a5:f1:6a:51:58:12:88:1f:ef:8a:37:8b:
c5:c3:d9:8e:31:9e:3c:be:54:2c:fa:c2:d5:9f:1e:
15:2b:ae:4c:e9:2e:81:6c:70:4d:25:88:7e:3d:12:
53:7f:8a:bd:0a:bb:22:79:81:8f:12:fe:03:89:fc:
63:09:42:e8:41:51:d8:84:14:ac:bf:fe:7d:55:0f:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3B:9E:27:1A:23:37:9D:1D:98:94:4A:E1:3F:A5:59:F3:1F:C7:7E
X509v3 Authority Key Identifier:
keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/KTueJxojN50dmJRK4T-lWfMfx34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.101.75.0/24
Signature Algorithm: sha256WithRSAEncryption
88:89:3b:85:d0:0d:6d:98:d1:5a:c8:2a:61:2d:55:62:b8:26:
aa:ac:6e:93:77:14:03:26:77:6a:8a:05:2b:79:e5:2f:5f:9a:
ed:08:c6:cf:20:2a:0b:51:41:0d:fc:ef:a0:a1:88:b7:73:65:
46:29:4b:a4:f7:20:80:59:67:06:8a:dd:bb:dd:5c:21:60:a2:
38:7d:c3:a2:0c:48:c0:f0:8d:48:ea:5a:87:ef:0e:3d:ca:9d:
22:2c:95:b1:b2:3d:7b:74:70:1f:e6:2f:e2:52:8d:73:36:fe:
80:83:ae:7d:3b:0c:95:79:ef:7a:dc:d0:8d:3d:ea:90:a6:d8:
e7:0f:43:b4:f9:4d:1a:b7:7e:6f:9b:a0:54:dc:37:14:04:c8:
2c:a9:34:4e:53:b5:cb:c0:d0:a1:bc:c5:70:23:60:b6:8c:6f:
f7:24:be:94:99:5e:a5:d0:02:cf:ef:ae:f5:81:42:0b:61:e4:
f3:e7:e2:21:a4:a6:ac:dd:ac:1d:d5:39:48:9d:18:2a:e1:b6:
c7:25:69:35:9b:65:06:2f:0f:60:87:86:3b:85:67:57:ce:96:
60:3f:bf:c9:8b:21:c1:b3:30:9a:0c:b9:47:18:d8:93:26:fe:
17:bb:5f:d5:f1:ce:8f:a3:8f:ae:74:e0:f2:df:3d:3d:f9:f4:
ff:a9:07:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net