Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/nVpf1vf-3MlX3vy05eetzuTS1T0.roa
File: nVpf1vf-3MlX3vy05eetzuTS1T0.roa (raw, json)
Hash identifier: 0iLJZExlZp+rGVWLBSUP7kgQ4VbbNI/2SquglEMp0WM=
Subject key identifier: 9D:5A:5F:D6:F7:FE:DC:C9:57:DE:FC:B4:E5:E7:AD:CE:E4:D2:D5:3D
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 0195D7069D966BB12F96D7381484261B0D0D
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/nVpf1vf-3MlX3vy05eetzuTS1T0.roa
Signing time: Thu 27 Mar 2025 09:54:49 +0000
ROA not before: Thu 27 Mar 2025 09:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12481
IP address blocks: 5.100.232.0/21 maxlen: 21
5.100.233.0/24 maxlen: 24
94.142.144.0/21 maxlen: 21
212.103.192.0/19 maxlen: 19
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:06:9d:96:6b:b1:2f:96:d7:38:14:84:26:1b:0d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Mar 27 09:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d5a5fd6f7fedcc957defcb4e5e7adcee4d2d53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:06:5a:3b:b8:00:49:3e:fc:b3:dc:63:ae:
23:81:21:31:b2:84:47:f8:93:70:c4:e1:aa:c8:e2:
fb:18:a9:13:c6:a9:2d:58:4c:0f:2a:ab:e1:70:88:
24:6d:ef:45:7c:b5:4a:47:e0:57:79:d1:09:a3:84:
f4:b3:74:36:2d:4f:7a:82:fd:ae:b4:f0:da:2a:1f:
16:72:34:c6:2f:d3:da:69:b8:0e:1e:31:38:e2:6b:
9f:ae:2c:2c:24:6a:47:75:3a:d1:fe:b2:20:3b:48:
cf:b9:eb:06:f2:0e:54:1d:bd:8b:1a:26:c1:68:55:
2b:b4:21:41:df:9a:12:fe:62:bf:4e:ff:98:ed:bb:
ed:d6:c6:65:25:6f:7f:80:a2:88:ca:58:df:9d:09:
6d:ee:62:6d:af:00:e6:f9:73:5a:89:97:95:2c:9d:
64:73:3c:a1:13:5c:ae:33:96:6a:3b:ff:82:a9:e7:
7d:da:04:bf:0e:ff:b0:e8:70:b6:24:98:37:81:d3:
dd:35:35:d1:11:66:98:44:6a:e8:dc:b9:71:47:0e:
49:dd:85:94:31:73:29:42:b6:0c:9c:0e:bd:0a:33:
4b:76:bc:e3:89:10:7f:f5:90:0a:ba:e3:65:f8:9e:
d8:e2:62:9c:f3:24:59:50:de:3b:3f:87:a9:8d:87:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5A:5F:D6:F7:FE:DC:C9:57:DE:FC:B4:E5:E7:AD:CE:E4:D2:D5:3D
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/nVpf1vf-3MlX3vy05eetzuTS1T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.232.0/21
94.142.144.0/21
212.103.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:91:5c:5d:90:f9:bd:f0:d5:1a:d6:89:4d:1e:14:36:f0:48:
04:8c:d5:f6:75:30:20:b4:fa:77:6a:3b:3f:49:6c:04:f4:44:
2d:74:a0:2c:12:e4:02:f9:4d:2d:18:cb:b7:14:01:2d:b7:a8:
ec:5e:2a:68:cf:c1:e0:a3:3f:77:f5:6e:e6:0f:bf:53:d4:b2:
e6:02:a5:53:60:56:3a:c4:2f:c4:16:b4:27:b9:4d:ff:35:a3:
19:b3:f2:85:e1:7d:d9:a5:45:2e:69:37:00:7b:1a:78:b1:fc:
32:c4:ed:3c:49:40:da:ac:27:33:fb:ed:80:a4:3f:25:e5:e2:
7c:5c:07:61:c9:93:52:03:94:de:d6:f5:99:e5:79:f7:0d:07:
f0:98:06:cb:0c:aa:22:f8:52:ce:34:96:43:45:cf:e2:18:57:
fb:6a:60:55:22:aa:d0:1e:2c:c1:84:5c:b9:76:09:46:bb:27:
bb:c0:29:a7:67:71:d9:05:43:fc:d7:52:4e:48:c7:e9:04:c1:
07:43:4b:2f:a3:11:d1:d4:db:c2:9f:94:ce:99:d0:bc:89:34:
40:49:fe:14:85:4f:4a:6a:73:bf:96:1c:e4:15:46:99:af:04:
eb:ea:e3:19:53:88:46:4f:53:05:cf:90:01:89:ca:b6:06:ca:
7a:74:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:22:36 2025 by rpki-client on console.sobornost.net