Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/sRfOMDtXEOJHKDPkg1fl6drHb14.roa
File: sRfOMDtXEOJHKDPkg1fl6drHb14.roa (raw, json)
Hash identifier: OPssx4HcgdB0D4pn+Z4AVIamXsKn+0ENmWUN4IAnizk=
Subject key identifier: B1:17:CE:30:3B:57:10:E2:47:28:33:E4:83:57:E5:E9:DA:C7:6F:5E
Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial: 019424B3C846F9DC8078D20ECF82C186BFF7
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/sRfOMDtXEOJHKDPkg1fl6drHb14.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20886
IP address blocks: 194.55.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c8:46:f9:dc:80:78:d2:0e:cf:82:c1:86:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b117ce303b5710e2472833e48357e5e9dac76f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:cf:97:7c:5d:e5:21:69:3d:90:2a:c5:6e:
ae:c0:40:80:f6:6f:1a:cf:94:e9:e4:57:84:61:54:
16:db:98:d0:b0:18:5b:8f:21:da:26:d0:b8:ff:57:
b3:9f:17:37:8b:23:e8:2e:63:7a:41:51:ff:51:f5:
e7:96:0c:f1:be:a4:bd:45:14:c5:07:2e:d2:c5:66:
7f:eb:00:d0:26:73:92:dd:7f:d1:d8:c5:a2:7c:46:
f7:19:ba:bd:8d:6f:ad:9e:ad:14:46:7a:38:21:03:
35:7d:57:39:6d:61:09:fc:ff:82:01:19:03:1d:75:
1c:5d:30:84:d8:d2:e2:2d:43:6d:f1:45:7f:af:4f:
2f:22:de:14:96:07:bc:c7:ce:34:d4:46:e3:65:88:
be:cb:dc:cf:36:c5:a0:a7:06:cf:35:ce:b9:4b:b9:
f8:ac:53:d3:ab:b2:9e:89:46:f5:16:fb:d7:d6:82:
fa:a4:1f:78:ca:61:c3:45:73:22:17:1b:c0:0d:3c:
28:25:ab:26:48:f9:93:ae:06:8f:70:90:8c:87:0f:
92:af:bc:73:e6:2b:6f:84:4a:02:02:3f:88:d6:b4:
d3:1f:3e:c5:05:40:0d:f8:c7:db:cf:94:70:37:72:
03:d1:c9:8c:03:e8:61:7b:a6:2e:1b:2f:cd:9c:4a:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:17:CE:30:3B:57:10:E2:47:28:33:E4:83:57:E5:E9:DA:C7:6F:5E
X509v3 Authority Key Identifier:
keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/sRfOMDtXEOJHKDPkg1fl6drHb14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6d:2f:53:25:a2:f1:4e:fd:22:c9:7d:23:a6:2a:b0:eb:ab:
c5:88:98:b8:5a:fb:86:45:db:06:4c:87:ae:57:ef:bb:75:5e:
56:fc:08:b9:dd:a4:7c:97:f9:90:f8:1e:c0:d9:31:f8:8e:33:
f0:4b:0b:f0:a0:56:1b:fe:d3:e4:6c:ac:ba:aa:0a:72:a6:1b:
8e:09:90:bb:e8:a2:a5:22:ff:12:19:55:1b:96:14:3c:e8:0e:
fb:86:ad:67:be:21:c1:65:71:e4:e0:92:80:3f:0f:2f:9e:bd:
da:12:58:02:76:38:88:5c:83:6b:f4:02:1f:1f:eb:2b:b0:7e:
8a:ae:d7:89:15:22:5d:33:67:53:da:fc:1c:4e:ff:6f:9e:73:
04:e2:c7:69:90:bb:5a:e6:a9:38:91:97:c7:83:0e:e7:f8:a2:
24:28:f5:61:48:7d:b6:73:35:ab:e5:e2:18:17:19:66:73:0a:
f2:94:1d:a8:dd:2a:a0:7b:43:90:cf:6b:02:20:d7:6b:73:69:
28:e8:61:b1:2f:65:f7:eb:68:97:77:13:2f:56:b2:ce:4c:bd:
66:52:e7:a0:6e:cc:35:65:06:1f:d8:da:d5:08:f6:ff:b6:d3:
34:de:e3:f5:37:17:2e:5c:d0:8a:f2:8c:98:13:58:ce:28:d6:
df:55:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net