Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/TEzCfvre_kNQlO-1mjIWxdip7ZI.roa
File: TEzCfvre_kNQlO-1mjIWxdip7ZI.roa (raw, json)
Hash identifier: EQul9dCLm5RmR5z5S2xFOcA4gCDhpuf1vUT9kUiOZuU=
Subject key identifier: 4C:4C:C2:7E:FA:DE:FE:43:50:94:EF:B5:9A:32:16:C5:D8:A9:ED:92
Certificate issuer: /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial: 01942747ED58C2946F0F47F5D9B01F6BB1FD
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/TEzCfvre_kNQlO-1mjIWxdip7ZI.roa
Signing time: Thu 02 Jan 2025 13:50:12 +0000
ROA not before: Thu 02 Jan 2025 13:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62153
IP address blocks: 195.85.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ed:58:c2:94:6f:0f:47:f5:d9:b0:1f:6b:b1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c4cc27efadefe435094efb59a3216c5d8a9ed92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:f7:f0:33:27:e6:b5:26:d3:db:66:db:a0:
15:32:f1:f2:e5:fa:be:8a:d3:ce:8c:ef:a9:66:0a:
f8:c2:06:1d:3c:f1:89:24:8d:4d:c3:09:cf:b5:6b:
02:84:2e:78:e0:fd:7e:a9:57:a4:12:0e:63:38:86:
fd:11:11:b0:6d:b8:31:a3:ae:c4:a9:f7:5a:19:27:
65:e2:05:39:72:9e:7a:72:f1:1e:a0:02:f8:57:40:
2d:b7:a3:d1:7f:66:81:0a:9d:4c:69:cd:b4:f4:42:
bf:65:43:42:c2:77:da:12:04:13:2c:21:ef:9f:c0:
61:da:3f:af:6b:2c:bc:94:26:38:20:33:17:2f:f8:
e4:82:08:5a:f2:b0:1d:a0:ca:9d:8d:9f:c5:1b:e5:
c6:98:77:d7:ba:fd:61:b5:f5:cd:ad:33:45:86:2b:
b7:e9:2f:c3:1f:b3:42:b2:7f:6b:14:8c:69:1d:0d:
ca:f4:5b:53:e2:bd:43:73:69:88:9a:2b:e7:8c:08:
a1:71:65:de:7b:71:c6:c5:d8:94:bf:8a:de:ee:31:
b3:45:0d:35:a0:34:0e:b5:91:94:ee:a1:23:28:aa:
29:85:66:40:ca:8a:c3:67:62:fb:72:c9:c4:eb:3b:
56:d4:53:29:6b:f7:e8:b9:54:83:27:e7:15:be:80:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4C:C2:7E:FA:DE:FE:43:50:94:EF:B5:9A:32:16:C5:D8:A9:ED:92
X509v3 Authority Key Identifier:
keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/TEzCfvre_kNQlO-1mjIWxdip7ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.249.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:4e:77:15:04:6b:ee:3b:d2:af:66:03:5d:16:b4:9d:cf:6a:
0c:7c:8c:cb:9b:41:ec:0c:04:83:ea:7b:75:d1:ac:7c:10:ba:
e7:8d:86:1b:ef:aa:42:9e:3d:af:ba:cf:91:fe:bb:f9:ab:d8:
e4:3a:46:0a:72:5b:d1:fa:a3:82:84:b6:cb:2e:c4:cb:de:0d:
a9:75:62:fa:1e:16:d0:ba:74:86:f2:de:b1:c5:46:6c:a6:ce:
cc:f6:39:fa:62:01:1e:40:d9:09:42:0c:d6:1c:f1:56:50:53:
f8:72:9d:0c:5d:65:01:3c:0f:74:bc:8c:f9:b9:81:a2:26:2b:
e9:4f:c6:88:dd:49:ad:0a:56:1b:18:e7:52:ee:6f:eb:f7:56:
8f:4a:26:6c:b4:79:c5:ed:53:91:63:5f:80:06:37:98:17:12:
45:7d:f8:25:ba:35:9f:41:9d:d8:b7:64:04:17:c5:22:98:44:
dd:8b:38:89:f6:b7:87:1c:cd:a6:7f:83:9a:39:37:e3:97:48:
35:81:dc:b9:0a:70:ce:06:c3:a3:a2:41:b2:2f:f0:1f:4a:59:
02:c9:ff:47:bf:ef:b5:1e:c9:93:83:e6:4f:df:43:98:46:c3:
67:05:e9:f0:a0:4d:e9:fe:ea:b2:cd:30:b5:8f:95:ae:37:5a:
a9:0c:38:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR+1YwpRvD0f12bAfa7H9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMmUxZTQ4NGZjYThlOTUyOGRmNmFjMTQ4MzA1NmM4ODc4
Njc3MWQwHhcNMjUwMTAyMTM1MDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzRjYzI3ZWZhZGVmZTQzNTA5NGVmYjU5YTMyMTZjNWQ4YTllZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoX38DMn5rUm09tm26AVMvHy5fq+
itPOjO+pZgr4wgYdPPGJJI1NwwnPtWsChC544P1+qVekEg5jOIb9ERGwbbgxo67E
qfdaGSdl4gU5cp56cvEeoAL4V0Att6PRf2aBCp1Mac209EK/ZUNCwnfaEgQTLCHv
n8Bh2j+vayy8lCY4IDMXL/jkggha8rAdoMqdjZ/FG+XGmHfXuv1htfXNrTNFhiu3
6S/DH7NCsn9rFIxpHQ3K9FtT4r1Dc2mImivnjAihcWXee3HGxdiUv4re7jGzRQ01
oDQOtZGU7qEjKKophWZAyorDZ2L7csnE6ztW1FMpa/fouVSDJ+cVvoC+ywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFExMwn763v5DUJTvtZoyFsXYqe2SMB8GA1UdIwQY
MBaAFBMuHkhPyo6VKN9qwUgwVsiHhncdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQt
NzlkNmY1M2M3YTJlLzEvVEV6Q2Z2cmVfa05RbE8tMW1qSVd4ZGlwN1pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zN2Y1NmUtYTIyMS00ZTAwLThlMTQtNzlkNmY1M2M3YTJl
LzEvRXk0ZVNFX0tqcFVvMzJyQlNEQld5SWVHZHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1X5MA0G
CSqGSIb3DQEBCwUAA4IBAQDKTncVBGvuO9KvZgNdFrSdz2oMfIzLm0HsDASD6nt1
0ax8ELrnjYYb76pCnj2vus+R/rv5q9jkOkYKclvR+qOChLbLLsTL3g2pdWL6HhbQ
unSG8t6xxUZsps7M9jn6YgEeQNkJQgzWHPFWUFP4cp0MXWUBPA90vIz5uYGiJivp
T8aI3UmtClYbGOdS7m/r91aPSiZstHnF7VORY1+ABjeYFxJFffglujWfQZ3Yt2QE
F8UimETdiziJ9reHHM2mf4OaOTfjl0g1gdy5CnDOBsOjokGyL/AfSlkCyf9Hv++1
HsmTg+ZP30OYRsNnBenwoE3p/uqyzTC1j5WuN1qpDDiQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net