Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa
File: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (raw, json)
Hash identifier: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=
Subject key identifier: BC:C7:D8:01:54:90:E0:26:89:F6:1A:8E:9A:65:21:66:65:4C:FD:77
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 01942444970E554BD116009D316624D917B5
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12508
IP address blocks: 164.40.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:97:0e:55:4b:d1:16:00:9d:31:66:24:d9:17:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcc7d8015490e02689f61a8e9a652166654cfd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:d1:b2:ea:a5:34:aa:98:e8:3d:b5:60:7b:
42:9c:33:db:c1:e7:76:24:bc:c0:d9:bd:a3:18:49:
51:03:de:16:50:06:b1:b2:70:61:1f:97:de:42:80:
88:95:05:ae:f8:ca:81:3a:62:97:2b:f4:a3:c3:31:
27:d9:cc:1d:17:be:11:ae:55:97:21:00:58:ab:c3:
cd:99:66:21:b2:28:0e:9a:b9:4e:07:c9:d1:7b:81:
d6:40:bf:fc:7b:fb:24:93:7a:59:af:e7:49:17:a1:
d1:62:8b:79:b1:20:8b:22:25:12:97:0f:45:32:78:
0a:ad:c4:be:4a:67:ef:7c:21:fe:14:80:1d:ae:00:
62:85:b7:da:a8:b7:4d:da:74:a5:e2:0f:be:02:c7:
43:22:78:a1:ce:ab:35:c9:2d:cb:38:25:8b:d2:19:
88:30:1e:e0:52:9a:36:73:e5:1d:3d:0f:16:75:8c:
a4:71:9a:70:16:0d:18:2c:78:84:66:93:ea:03:72:
35:71:24:6f:0c:d8:d7:ed:36:67:27:6b:db:13:6e:
af:ac:c7:ba:d3:89:60:f4:94:32:d5:de:4f:9f:28:
cf:e8:e1:ee:f4:92:e5:49:d0:d2:01:f5:52:68:f7:
e8:ea:50:77:f6:7c:db:d1:0c:04:63:1a:1a:98:17:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:D8:01:54:90:E0:26:89:F6:1A:8E:9A:65:21:66:65:4C:FD:77
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.168.0/23
Signature Algorithm: sha256WithRSAEncryption
34:5c:41:f8:eb:21:ee:b1:30:dd:2d:09:76:51:ad:c6:c4:dc:
1e:ed:8d:b6:67:36:54:e3:b4:75:6c:c9:d0:55:cb:11:d3:b3:
d2:40:39:d9:93:9a:c1:13:87:89:8a:48:d6:b2:a7:e8:20:c0:
1e:e6:33:48:2a:aa:c8:70:53:c4:68:ca:21:25:82:2a:36:0b:
ee:06:e4:4c:77:14:40:3f:8e:5d:7f:48:33:79:9f:53:e1:34:
18:7c:10:34:76:27:6f:1e:c2:68:76:bf:45:63:45:b3:b1:f4:
ba:53:aa:b1:a7:79:0a:dc:ae:70:44:ad:4d:11:16:32:c7:a2:
1e:5a:42:00:8e:3e:33:1f:91:9b:ec:c0:5f:1f:b0:a9:f8:be:
54:17:19:91:86:b0:4f:d9:f7:33:d4:2e:f9:c8:9e:a0:3b:71:
d2:ad:86:cd:fe:ef:ca:f9:e9:2b:c5:ec:a2:b3:a2:24:97:e6:
c9:48:b3:d0:e8:52:dc:07:9a:98:67:7a:31:53:ee:4c:e5:f7:
d8:26:a3:f5:82:eb:c3:d4:c9:7a:ed:d7:24:3f:b0:33:4c:f7:
0b:78:c6:b4:2e:d2:0f:69:fb:c5:22:bc:89:6d:cc:33:54:2c:
4a:a6:cb:30:0e:6a:35:56:50:02:30:d2:f4:4a:9c:da:39:63:
56:8a:85:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net