Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/L99cT_8YQtbahh4i-nNP79DcPFA.roa
File: L99cT_8YQtbahh4i-nNP79DcPFA.roa (raw, json)
Hash identifier: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=
Subject key identifier: 2F:DF:5C:4F:FF:18:42:D6:DA:86:1E:22:FA:73:4F:EF:D0:DC:3C:50
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 01942747B9991338742FD70A57D93686CD79
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/L99cT_8YQtbahh4i-nNP79DcPFA.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202332
IP address blocks: 194.147.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b9:99:13:38:74:2f:d7:0a:57:d9:36:86:cd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fdf5c4fff1842d6da861e22fa734fefd0dc3c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:8f:e7:88:81:20:ad:26:d2:23:e5:1e:59:
6e:8e:e9:89:34:37:f2:91:90:11:5b:05:d4:51:04:
07:f2:b0:0f:43:cf:2a:37:3f:4e:df:d3:9e:0e:39:
da:c2:1f:11:2c:f3:51:29:98:8b:36:b8:90:4c:23:
89:b5:92:38:e2:35:29:da:08:7d:4a:99:c2:10:09:
55:84:8b:7a:1f:2a:cf:64:c3:6c:ce:81:6c:65:bc:
8a:58:1b:e5:56:38:6f:63:18:a7:43:5c:d6:b4:69:
cc:b2:10:53:09:6f:11:47:93:c6:cc:c9:f4:30:be:
3f:99:21:ec:d8:11:1c:4c:31:8d:b2:ae:a0:4e:93:
6e:89:04:da:e1:dd:b4:f0:d1:51:f4:8a:d5:94:64:
83:01:65:f0:2a:0b:29:32:db:29:73:b9:49:3e:ba:
e1:dc:67:a3:8d:50:db:25:e3:04:00:45:a1:0c:ff:
cf:3c:cd:2b:b1:e9:99:7b:0a:84:5f:31:dc:c0:28:
5c:f7:8f:fc:5e:ed:ca:bb:b3:9f:8b:8f:bb:c1:15:
a2:81:62:f3:86:57:4a:af:e0:cf:33:0c:65:b7:92:
6f:a1:4f:90:b7:1f:46:c6:0c:da:ba:6b:73:90:f2:
ea:da:5f:9c:dd:2f:15:49:3e:43:21:33:41:b9:b0:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:5C:4F:FF:18:42:D6:DA:86:1E:22:FA:73:4F:EF:D0:DC:3C:50
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/L99cT_8YQtbahh4i-nNP79DcPFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
83:a7:bd:a8:82:d2:17:be:c5:26:8f:6e:5d:f9:a0:88:63:d7:
f4:58:4a:88:3e:5a:3a:c3:b9:4d:17:e5:3f:a6:42:d4:0a:bd:
ab:f7:c2:73:dd:8a:eb:ce:6e:b1:36:96:02:02:9d:66:49:97:
73:30:4a:77:fc:84:d6:7c:37:0f:fb:be:86:22:3f:72:08:62:
77:f4:b7:c4:9e:68:6c:cb:15:84:d9:af:50:5b:86:b5:dd:aa:
af:8d:a4:0d:2c:d2:2c:07:cd:c7:41:a3:69:6f:2c:b6:18:41:
1a:8c:cb:3e:58:d6:83:c3:11:16:04:31:bc:25:f6:8b:a3:f5:
6e:72:ae:af:c3:af:da:8b:90:58:83:a6:cf:5d:f9:85:3c:a7:
17:3f:93:a0:80:6d:56:64:73:3a:26:45:8e:e7:40:2d:45:fd:
0c:f0:24:b3:78:01:6e:24:37:e0:a3:be:30:41:16:cd:ad:90:
dc:17:cc:42:ec:29:83:1c:a4:7c:85:ff:d7:ee:07:22:da:f5:
30:94:80:d5:d0:cd:76:33:8f:09:6f:bd:ef:bf:98:f8:b6:20:
96:4d:cc:05:60:8a:3d:92:b9:09:eb:39:21:4b:71:ca:28:3e:
30:b2:b7:61:e8:02:42:79:0a:64:15:13:a3:c9:24:7d:de:6a:
8b:f9:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net