Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/VaSnvGehSBiCY3r20anmzbVCVxc.roa
File: VaSnvGehSBiCY3r20anmzbVCVxc.roa (raw, json)
Hash identifier: mj1GZ2Tpt8ALCYTlIoKPu1wF44ZKzGxmdnQYidmfMkk=
Subject key identifier: 55:A4:A7:BC:67:A1:48:18:82:63:7A:F6:D1:A9:E6:CD:B5:42:57:17
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01961FE60B242975A75B6C9A9AB5F814812A
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/VaSnvGehSBiCY3r20anmzbVCVxc.roa
Signing time: Thu 10 Apr 2025 13:31:31 +0000
ROA not before: Thu 10 Apr 2025 13:31:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 194.15.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:e6:0b:24:29:75:a7:5b:6c:9a:9a:b5:f8:14:81:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Apr 10 13:31:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55a4a7bc67a1481882637af6d1a9e6cdb5425717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:3f:51:53:e6:92:4b:d7:2d:4d:5f:45:3c:
0e:36:d6:60:cb:21:d1:0d:3c:be:22:f2:83:83:b8:
19:c2:98:05:a3:58:3f:4c:37:f6:3c:bc:02:34:d1:
9c:67:05:bd:27:09:2c:83:56:67:5d:b2:65:ae:75:
78:71:c6:04:e9:d7:f5:10:5d:8e:07:3d:76:7d:c5:
ee:df:d2:cf:fc:d4:47:21:60:4e:22:65:70:cc:00:
09:e6:f5:17:d5:19:c9:06:e8:6f:42:2f:cf:2e:e7:
d9:e5:72:8d:d7:1a:a8:51:c2:45:8f:98:cf:42:0e:
0f:ff:7c:22:89:03:89:09:ed:ea:a4:4d:09:eb:b5:
7a:37:2b:ed:dc:2d:3f:08:62:6e:1f:b2:0c:67:d1:
5b:0d:be:a9:9f:34:74:99:8c:f8:57:eb:e4:af:57:
70:2c:f1:5c:60:28:4b:4d:7f:66:09:ce:52:5b:f8:
77:11:99:92:4f:a3:81:57:13:eb:e9:54:70:e3:67:
87:84:2c:df:82:97:a6:9d:d9:68:98:6b:ae:b1:94:
5a:dd:00:13:04:9d:d3:d3:f8:98:9c:df:5a:ef:5c:
1e:60:09:39:6c:05:2a:53:d3:5c:06:31:19:21:5f:
4f:9a:0b:f8:85:bd:68:fb:66:0f:8f:01:2d:c2:64:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:A7:BC:67:A1:48:18:82:63:7A:F6:D1:A9:E6:CD:B5:42:57:17
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/VaSnvGehSBiCY3r20anmzbVCVxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5b:83:d0:28:0c:90:ce:bd:d3:ab:69:92:2e:bc:89:df:66:
50:23:7e:cc:a4:98:34:e8:bf:d0:86:be:09:e9:68:62:bb:b1:
d1:92:14:64:a9:b1:dd:1a:f1:dc:76:ba:fd:12:0c:ad:f3:5d:
f6:6f:d8:0b:fd:7f:b5:53:29:37:b0:8b:94:bc:fe:68:31:fe:
a9:8b:5d:fb:36:5c:2c:0e:2c:6b:c9:72:c9:3b:91:ce:88:65:
25:d2:7a:7c:2f:c7:07:ca:5a:a4:67:95:6b:0d:55:b2:ef:3b:
40:86:ce:9c:0b:7d:91:b6:81:44:8e:4a:17:f7:73:b6:f1:7a:
9b:84:96:24:1e:e9:44:c9:40:3c:a8:5c:76:4a:27:f9:81:d4:
b1:f0:ba:f7:59:ca:2e:e0:74:bb:97:9a:45:26:de:f6:0e:e0:
93:52:de:8d:5e:7e:be:99:f2:4b:68:75:57:4f:a2:bf:a3:ab:
13:2e:36:36:e8:15:db:a8:0f:fc:4e:e0:79:52:85:45:b5:36:
96:0c:49:d5:58:cc:b6:2e:67:e0:3a:42:bd:54:53:7f:bf:26:
8c:d8:0d:54:76:91:7f:dd:77:56:a1:ba:ba:2d:cb:79:a6:dd:
5e:5c:5b:91:fd:f4:71:a5:4e:12:de:5e:d4:0c:65:b7:4e:7b:
d1:ac:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net