Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/OV34MDvIRVxone0w5cHEhw4n-7g.roa
File: OV34MDvIRVxone0w5cHEhw4n-7g.roa (raw, json)
Hash identifier: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=
Subject key identifier: 39:5D:F8:30:3B:C8:45:5C:68:9D:ED:30:E5:C1:C4:87:0E:27:FB:B8
Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial: 019423D6EDFF4CB6601CCC5EE4BEBCF42AFF
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/OV34MDvIRVxone0w5cHEhw4n-7g.roa
Signing time: Wed 01 Jan 2025 21:47:55 +0000
ROA not before: Wed 01 Jan 2025 21:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20956
IP address blocks: 193.238.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ed:ff:4c:b6:60:1c:cc:5e:e4:be:bc:f4:2a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Validity
Not Before: Jan 1 21:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=395df8303bc8455c689ded30e5c1c4870e27fbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:8d:ac:ac:d3:dd:7d:15:8b:f7:42:b5:fa:
f5:d1:9d:75:eb:07:bf:79:6d:8d:cd:4b:d0:49:17:
7a:92:6c:ef:e3:2b:1c:1a:aa:5f:26:48:a4:05:56:
7f:2a:f5:38:0a:0b:43:c9:16:c0:8d:ee:9b:0d:08:
cc:07:b5:94:fd:02:0e:79:5e:75:8d:a8:4a:9a:41:
fd:de:28:d9:57:33:9a:00:98:87:b8:0e:ff:7b:98:
b7:6a:2a:ca:cb:50:e6:f6:4b:ed:98:3b:17:95:a0:
26:e9:e3:4f:1a:ad:6a:16:79:f6:8b:29:06:2c:ff:
22:4e:2a:4e:a9:ba:4d:77:9f:1d:b0:47:6e:4b:48:
66:7b:4d:ac:1f:89:b4:2c:45:43:9b:58:13:57:1d:
cd:ad:c6:89:3a:28:75:e4:06:6c:6a:31:8c:a4:cf:
b1:e3:66:68:08:ba:ba:37:db:35:ca:da:bd:be:61:
bc:c7:9d:87:e1:91:43:62:67:54:a9:09:35:4e:f8:
03:61:b4:63:74:f1:fa:dd:0a:b1:e7:90:51:76:f0:
57:69:c7:cc:9f:f6:1f:54:9e:2b:c3:04:a7:35:9f:
23:d0:53:af:13:bc:bc:08:5f:0c:75:3e:13:31:87:
8c:4a:f3:91:63:12:56:b3:a0:8d:b8:e1:0e:39:92:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5D:F8:30:3B:C8:45:5C:68:9D:ED:30:E5:C1:C4:87:0E:27:FB:B8
X509v3 Authority Key Identifier:
keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/OV34MDvIRVxone0w5cHEhw4n-7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a4:87:26:5c:15:37:34:b2:12:f4:d6:76:af:38:a1:d2:08:
e6:58:c0:41:d0:9c:a3:a0:20:75:5d:5a:0e:dd:e5:53:28:eb:
b5:36:29:f8:0c:c2:cf:ed:d6:16:16:65:5b:f8:43:34:86:e2:
99:32:a3:07:f6:a5:72:58:ef:8e:e9:b4:52:f1:fd:d7:d5:95:
15:c0:5d:8d:14:4e:fe:8b:2e:7f:7a:c9:9a:57:b8:b0:de:38:
51:d1:83:a8:a2:22:30:85:fd:ad:c5:02:6e:c9:5b:be:58:cb:
95:81:da:56:3b:60:69:e2:03:3f:05:7d:d5:d5:f7:6c:e6:68:
9b:b8:9e:b3:8c:68:7e:f8:00:95:d3:cd:43:1f:c9:f0:46:ac:
f7:55:3b:d6:cd:fe:83:ce:10:92:3d:c5:1b:8f:70:7d:87:5f:
e9:8a:9b:11:dd:13:be:e1:a1:60:ae:52:66:55:b8:e2:ce:48:
dd:ba:e1:b9:7c:33:b8:e7:f5:70:88:82:a4:bd:43:a8:17:f5:
dd:2c:d0:1e:46:9e:a2:24:c8:d4:d9:0c:b2:76:49:11:dc:85:
05:6d:a3:c8:d9:50:d8:b0:01:35:9e:54:5c:00:5a:3e:2c:4e:
e5:c3:22:42:f7:07:17:3a:d6:ce:c3:b1:c0:0c:55:1c:11:82:
aa:ad:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net