Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/1-nnyIMUn3fhhCGC-D-gP0F3cqEo.roa
File: 1-nnyIMUn3fhhCGC-D-gP0F3cqEo.roa (raw, json)
Hash identifier: nfA7AP7Kn3mops0IdhqDXV8NM9fBW2I0VcSnl9x1rKI=
Subject key identifier: FA:79:F2:20:C5:27:DD:F8:61:08:60:BE:0F:E8:0F:D0:5D:DC:A8:4A
Certificate issuer: /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial: 0194228E1D5C7D85FDCC37F050BE10BE1FD0
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/1-nnyIMUn3fhhCGC-D-gP0F3cqEo.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20740
IP address blocks: 193.109.4.0/22 maxlen: 22
194.29.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1d:5c:7d:85:fd:cc:37:f0:50:be:10:be:1f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa79f220c527ddf8610860be0fe80fd05ddca84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:48:0e:1a:a4:04:f7:04:d1:40:52:53:9e:
97:e3:b2:0d:40:f2:49:42:58:e7:c2:77:a6:91:7d:
25:cb:c2:b7:b1:45:12:01:b5:61:9b:62:52:73:10:
56:23:9e:9d:77:20:67:84:71:76:43:0f:cf:e2:0e:
6d:f2:c9:42:50:7b:9b:16:20:cf:33:20:e5:3f:5b:
c7:1f:1b:98:1f:b0:fc:88:8e:70:d3:43:b5:04:4a:
29:03:62:35:73:61:13:ad:5f:ef:db:65:d1:79:71:
09:f2:13:e7:14:b1:da:0d:12:af:ad:2c:af:b8:fc:
1c:95:91:2e:3e:c4:80:11:de:39:6c:3d:00:a3:12:
50:b3:65:4c:6b:b4:60:4c:49:9d:d5:83:61:54:11:
b2:51:55:c8:ba:c4:d3:cd:71:fa:93:7c:3a:07:ed:
f0:0d:ff:16:d1:3e:77:8b:5d:ba:ef:5d:87:68:16:
90:27:ab:a0:06:73:fb:75:23:dd:4e:47:73:d0:2c:
96:bd:44:61:68:80:fc:1a:1f:37:2f:59:56:4f:63:
57:41:78:ca:e3:10:1f:ee:d6:c7:af:de:92:7c:ca:
0c:f4:13:06:09:e4:7c:7d:22:df:5a:0c:cd:e6:c7:
de:74:bb:c1:2c:b9:1f:44:69:4c:01:5b:42:82:33:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:79:F2:20:C5:27:DD:F8:61:08:60:BE:0F:E8:0F:D0:5D:DC:A8:4A
X509v3 Authority Key Identifier:
keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/1-nnyIMUn3fhhCGC-D-gP0F3cqEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.4.0/22
194.29.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:07:4c:67:76:7c:ca:2d:4b:31:64:c8:72:80:e1:6f:77:e3:
b3:9b:1b:92:59:f4:cc:10:55:08:75:51:00:8e:62:1b:0e:f5:
55:8c:4f:79:b2:89:a3:49:46:a9:cb:dc:3e:2a:b3:3c:3a:d0:
94:31:a7:3a:41:a5:d0:0d:ec:b0:63:aa:f6:29:71:61:67:ad:
6a:7b:71:41:3e:58:bf:cd:74:b6:20:c6:ee:c2:ec:cd:82:53:
5f:cb:74:0d:fd:35:aa:84:0e:e5:aa:8f:a8:d0:62:3e:47:49:
29:86:ff:51:da:41:e9:f0:4e:18:0f:9b:41:ce:3c:26:c4:8d:
89:e3:ac:43:b5:a8:a8:25:94:ca:13:44:26:ac:4e:3d:84:01:
2b:e5:04:38:3e:86:68:b5:64:da:ff:8f:0b:d8:06:6e:c6:88:
96:30:d1:a7:39:09:ed:b3:fc:62:7b:75:3b:3d:6e:24:d1:ac:
ca:0c:d4:05:7b:f0:56:b9:ea:5d:c6:58:d7:6a:a3:a9:4f:c1:
f6:54:f6:c9:39:eb:ae:65:05:05:9d:c5:05:85:0b:d7:48:38:
bf:b7:54:05:ff:0a:cf:64:e4:88:d5:53:1e:cc:76:4e:36:a4:
3d:fd:2d:03:1f:09:3c:01:ea:e3:b9:32:82:32:18:35:31:ed:
0a:34:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net