Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/eB_uZek_fqPGjETG2XngQEB0wTM.roa
File: eB_uZek_fqPGjETG2XngQEB0wTM.roa (raw, json)
Hash identifier: Tw25sLw41S+zwW08IxDUoLL22O/Sm4wSUNtTT1V4kPY=
Subject key identifier: 78:1F:EE:65:E9:3F:7E:A3:C6:8C:44:C6:D9:79:E0:40:40:74:C1:33
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 0194610AB166E1080B27D12CFCF1E6B88CD9
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/eB_uZek_fqPGjETG2XngQEB0wTM.roa
Signing time: Mon 13 Jan 2025 19:01:18 +0000
ROA not before: Mon 13 Jan 2025 19:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 193.104.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:0a:b1:66:e1:08:0b:27:d1:2c:fc:f1:e6:b8:8c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Jan 13 19:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=781fee65e93f7ea3c68c44c6d979e0404074c133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:24:88:dd:89:72:19:e1:c8:87:db:bb:c5:
1e:61:a8:2f:4c:04:e2:d1:40:1c:17:1d:8e:66:dc:
4d:29:97:72:d2:ff:38:89:e9:a4:6b:45:03:5c:ee:
7c:12:09:3d:db:ef:ad:26:b7:59:de:6d:d5:b7:2a:
00:3b:31:70:9b:ca:0f:2d:61:fd:a1:f5:0d:e2:70:
4d:a2:4c:80:05:14:cf:1d:2f:a0:84:41:ae:c8:cd:
c7:71:67:5e:ae:7e:b4:77:4d:e8:b8:22:bd:b0:01:
03:6a:48:81:26:ea:21:19:6b:a2:53:37:8f:ca:89:
ff:aa:e2:d2:b1:8c:46:6a:d3:e3:88:17:c3:3d:10:
cc:b5:64:4e:42:bf:27:bb:32:62:40:5d:7d:d9:f2:
21:5f:39:a5:ea:2f:a5:f3:b2:ab:75:79:a4:2e:2a:
ef:0e:6c:5a:3c:ae:51:b1:dd:ea:2b:23:fd:f8:0b:
4c:31:0d:ef:40:2b:12:31:6d:e0:dd:43:5c:f5:c4:
27:d5:a0:0a:ee:2c:08:f8:e9:a3:bb:fa:fd:61:d5:
db:dd:e2:d5:fa:88:e7:15:63:07:a8:42:39:8c:17:
51:6b:71:73:a6:74:48:f9:c8:2a:01:76:35:6f:0d:
2e:b9:04:c3:6e:d2:0d:bb:e8:c3:0d:5b:55:29:02:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1F:EE:65:E9:3F:7E:A3:C6:8C:44:C6:D9:79:E0:40:40:74:C1:33
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/eB_uZek_fqPGjETG2XngQEB0wTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.245.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ce:ff:b8:47:bf:69:89:d8:19:0f:49:4d:8a:a7:68:c4:5c:
e3:a6:66:a2:ca:19:c5:c4:c0:da:75:7a:41:31:2a:b9:5a:11:
0e:68:8c:ce:ac:b6:8a:c5:d8:ac:b5:00:20:f7:b2:1b:07:09:
4f:0f:2c:9c:d6:97:62:95:b6:b9:fb:3f:5b:c5:58:18:90:ba:
b1:c0:f7:a9:40:71:2e:b3:7a:9a:28:5b:79:b7:f1:13:9a:33:
3e:35:60:af:92:cb:ea:27:72:a2:7a:b2:cb:ff:72:e2:99:bf:
02:9f:07:ed:f9:0e:69:69:59:4f:88:6b:07:15:1e:46:fa:eb:
71:75:83:44:42:ce:dd:eb:4d:bc:c9:7f:03:1a:a3:83:7b:99:
d8:24:0a:48:37:25:21:c0:6e:30:2f:03:ab:9a:28:4a:4f:5a:
94:cb:6f:da:4e:ff:02:94:04:15:dc:06:0e:e4:ab:85:f9:9b:
65:16:ab:0d:bf:43:41:31:29:38:eb:51:40:fe:d2:23:b7:22:
c7:6f:cb:6d:42:78:2b:e8:72:c9:bc:bb:e9:05:4a:29:b2:66:
a0:a4:c5:fa:0a:76:3b:16:38:f0:94:40:55:a7:51:3a:5e:4a:
98:c5:a6:ce:8c:3c:31:b0:cd:5b:a1:f5:cb:f7:63:2f:f8:55:
3b:6c:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:09 2025 by rpki-client on console.sobornost.net