Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa
File: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (raw, json)
Hash identifier: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=
Subject key identifier: A4:F4:66:32:75:5F:27:BC:5D:A9:48:C9:80:F4:64:14:78:DD:0A:5F
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019426D9E3D444D4AB19CE6BDCEE5C7FFC22
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202475
IP address blocks: 193.57.52.0/24 maxlen: 24
193.57.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e3:d4:44:d4:ab:19:ce:6b:dc:ee:5c:7f:fc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4f46632755f27bc5da948c980f4641478dd0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:16:c0:a2:89:61:32:35:d6:57:80:2d:32:
49:18:25:63:9b:87:8b:13:e6:af:39:89:b8:df:cc:
b4:54:92:1d:d4:b1:6a:45:d2:16:ab:8e:d4:07:d6:
25:29:05:2a:fc:67:ce:29:1e:ce:ac:a6:4b:9d:1a:
33:f0:ec:ef:82:60:d7:4e:a1:70:a2:17:23:60:03:
85:45:c2:4e:0b:f4:20:ec:a6:e9:40:bb:9d:36:c5:
49:8d:19:e4:6b:93:5a:03:b7:81:80:cd:1f:c2:54:
54:de:c0:96:6c:56:6c:d5:29:2a:f1:36:c3:94:84:
91:24:c0:20:68:46:3d:5f:1a:a5:50:d7:4e:1f:ba:
55:ec:5f:b9:92:b2:12:cb:d8:54:ad:b5:84:db:cc:
16:e4:31:aa:c4:41:e4:ca:4c:df:78:d3:0d:a5:e5:
36:75:73:8f:37:2a:f9:83:df:69:a4:ee:23:9c:54:
c5:c6:74:5c:74:1e:b1:65:af:e3:b4:22:61:e6:9a:
14:7e:14:13:3b:f1:fd:1b:c4:c2:45:cc:1d:bf:3e:
4c:5f:eb:7b:63:df:d5:91:58:ed:97:44:ad:ab:ee:
ec:93:9b:cd:52:e1:c8:d8:90:83:26:ff:ca:7f:4b:
5b:d8:d2:0d:d1:3b:7b:50:8e:82:eb:c6:5b:85:cc:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F4:66:32:75:5F:27:BC:5D:A9:48:C9:80:F4:64:14:78:DD:0A:5F
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:b0:13:f3:32:f2:54:c9:0c:99:25:82:ad:93:4f:a9:7e:f6:
6d:91:43:10:d4:34:2c:82:2d:25:a1:b9:a1:21:36:e7:c7:f3:
6b:d5:89:12:e7:d8:ff:5c:ec:a3:db:cb:8c:f0:ab:15:33:6f:
57:37:b9:e8:31:89:c3:53:bb:63:56:51:ae:80:d7:65:4a:41:
4a:e8:0d:44:f2:7c:2d:9a:5a:34:cf:fc:02:ff:f8:8c:e9:4c:
0f:fc:55:68:05:c8:8e:b7:fc:fe:04:ef:52:d8:8d:ab:27:2a:
58:5f:b7:04:bf:9c:c8:9d:e0:51:f5:be:93:b8:fa:73:6b:e8:
19:87:65:3f:f5:a8:f0:e8:d3:ad:8b:61:e4:f1:00:77:da:4a:
2d:e5:79:b6:af:3e:6a:e2:c9:64:6f:87:69:21:c9:ed:fd:02:
3d:06:8e:48:a6:67:cb:fd:98:27:3d:65:5a:02:81:f8:af:5b:
58:3e:78:e7:0d:ea:c0:8c:a9:70:7a:b1:66:e3:d5:94:47:e5:
45:d3:a7:e8:bb:97:f7:d7:66:54:92:1a:de:46:95:ba:fa:53:
1c:59:96:d8:a6:b7:15:1c:c9:24:e3:ff:ec:3f:c0:64:07:a5:
da:1a:57:ee:cf:58:70:ce:c3:e4:42:9a:27:75:61:a1:cb:f6:
e7:cf:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net