Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/yIEPYCgadoB6X07AnuVv3-Sl8cU.roa
File: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (raw, json)
Hash identifier: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=
Subject key identifier: C8:81:0F:60:28:1A:76:80:7A:5F:4E:C0:9E:E5:6F:DF:E4:A5:F1:C5
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 01942143BAE62CD46D70656A17A35C4A32B5
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/yIEPYCgadoB6X07AnuVv3-Sl8cU.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57464
IP address blocks: 194.93.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ba:e6:2c:d4:6d:70:65:6a:17:a3:5c:4a:32:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8810f60281a76807a5f4ec09ee56fdfe4a5f1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:c5:ef:a2:c3:d3:5f:3a:f5:b8:fc:c8:99:
12:f7:e6:f6:cb:f0:eb:94:d4:4f:62:20:52:b8:0c:
b0:61:f2:37:08:13:61:4b:97:d4:dd:43:70:74:f5:
3c:32:44:f8:28:3f:84:84:06:a7:8f:31:aa:85:c7:
ca:18:b0:19:4e:6a:c5:0a:d5:4b:5d:0c:4b:6d:ee:
61:18:6b:3d:bd:b4:4a:3d:ba:c9:fe:b2:82:e9:f5:
ae:36:d4:a5:a2:35:ec:cc:a3:53:bc:0e:4e:14:c1:
5d:ea:30:73:25:69:fc:e4:a4:d2:99:03:b3:f4:5b:
a0:8e:b1:b8:d4:19:c9:3e:02:8b:97:db:cd:b2:a6:
7c:d0:56:53:3c:2f:5d:06:a4:97:d9:3d:c8:37:fa:
a6:f3:1e:ac:73:55:82:d0:b7:73:a8:4c:1f:72:50:
e7:35:79:3d:a7:c3:0c:0c:74:1b:f4:e1:97:6a:f8:
1e:b2:68:11:00:70:31:09:5b:75:d7:0b:ac:96:1c:
16:5f:28:59:30:db:d5:02:da:14:c7:b5:2b:2b:26:
df:90:10:43:02:96:43:19:7f:a5:07:21:05:74:fd:
60:a6:70:af:36:f3:b1:41:4f:80:3e:64:a9:48:88:
c8:eb:ae:a3:58:d6:54:d8:b4:be:62:24:27:35:9b:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:81:0F:60:28:1A:76:80:7A:5F:4E:C0:9E:E5:6F:DF:E4:A5:F1:C5
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/yIEPYCgadoB6X07AnuVv3-Sl8cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.100.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f6:ba:5d:3d:68:ed:a1:7a:6b:70:73:43:e0:0f:fa:1f:b3:
19:c4:a4:b1:16:c7:d8:ad:5e:b0:0d:d8:1f:2f:91:99:79:2e:
5d:45:93:49:14:36:9e:a3:ad:69:09:ec:6b:f8:ce:d9:4d:29:
7d:da:15:45:90:c1:0d:b0:3d:d4:28:2c:86:15:7f:fd:e0:b0:
1b:7a:92:1b:e5:4d:72:7f:8d:f1:c7:fe:9a:4d:68:d5:75:0f:
cf:bd:68:54:37:8d:0c:86:f5:33:2e:e1:dd:ab:65:26:c9:7c:
ef:aa:a5:0b:0a:01:11:ba:c9:bf:ec:ff:81:04:d8:64:86:2c:
e0:e2:6f:a7:0a:4a:88:16:b5:2e:aa:7e:e2:cb:52:05:d0:41:
55:61:f8:ab:d7:cb:73:fc:44:34:63:14:5c:fd:97:7d:bb:f1:
d7:5e:97:9d:9b:7a:e2:30:68:03:cd:a9:39:7c:1c:5e:10:96:
d3:23:39:ff:ec:f0:42:cc:ba:b3:53:73:26:ad:14:8a:a9:fa:
b6:62:e9:12:01:7c:52:9b:08:3d:05:34:57:ee:72:9a:a8:0f:
cd:52:ae:12:32:51:35:25:e2:ef:81:03:20:13:e8:32:f4:42:
fe:72:1a:35:df:e8:4f:f6:c7:1b:e9:39:38:2f:e4:09:83:d6:
72:64:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net