Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/xlkcSwD0mmtZPgi3xXKhycAWYyM.roa
File: xlkcSwD0mmtZPgi3xXKhycAWYyM.roa (raw, json)
Hash identifier: BAhCmE0YHR0xQbs06CAdD0yavtNQmtlINBJ1oX8Gqn8=
Subject key identifier: C6:59:1C:4B:00:F4:9A:6B:59:3E:08:B7:C5:72:A1:C9:C0:16:63:23
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143C52CDA4F6EC6A7D192CAECBF1BB4
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/xlkcSwD0mmtZPgi3xXKhycAWYyM.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213088
IP address blocks: 195.187.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c5:2c:da:4f:6e:c6:a7:d1:92:ca:ec:bf:1b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6591c4b00f49a6b593e08b7c572a1c9c0166323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:64:61:64:e7:96:1b:18:fc:5b:2f:6e:f0:
ae:09:c8:9a:5b:34:cc:c5:cf:43:3b:95:65:97:27:
d1:42:15:2d:bf:c2:e3:d0:7e:d1:52:f5:fb:21:22:
39:d6:bb:ad:0e:e9:dd:3b:43:4f:df:68:c5:1f:24:
c0:00:3d:e0:41:3a:e9:4c:f6:a7:d2:fa:21:2e:fd:
fd:06:cc:48:a8:3f:a7:64:f7:02:68:99:5b:20:1f:
b7:8b:bd:71:37:f0:3e:0c:4e:37:2e:80:c2:b4:8f:
1d:8c:89:83:68:aa:7f:39:62:55:fc:e7:29:3f:3b:
62:3b:90:6e:f9:bc:28:8e:a0:b0:d6:83:d2:1b:f4:
df:8b:d7:3d:76:2c:37:09:46:76:2d:78:12:f3:97:
a2:00:01:9b:26:2a:e0:60:ed:6f:ff:c8:88:2a:35:
2c:77:64:6f:ae:91:c9:51:86:1f:4b:e5:6d:20:e6:
99:fb:02:5b:d2:d4:09:91:73:cd:8d:ec:df:67:19:
f9:86:a1:f5:d6:10:63:ef:b6:1e:b1:a8:b5:76:34:
8a:6a:98:ed:d0:da:f1:ad:93:6b:98:7e:df:ec:c1:
96:37:73:19:c8:74:bc:88:59:b8:0d:25:77:c1:fd:
4d:95:32:12:c1:aa:ed:6b:1d:d6:85:4c:5b:79:8f:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:59:1C:4B:00:F4:9A:6B:59:3E:08:B7:C5:72:A1:C9:C0:16:63:23
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/xlkcSwD0mmtZPgi3xXKhycAWYyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.76.0/24
Signature Algorithm: sha256WithRSAEncryption
75:58:2e:4e:2b:f0:90:fb:70:75:75:17:44:73:5c:4b:32:5a:
37:22:f5:3f:e7:04:b7:bf:ae:71:83:04:b3:45:19:a0:0a:2f:
39:57:09:c8:39:a9:8b:55:b8:65:c1:c2:6d:06:09:39:e8:2a:
43:bf:4a:73:82:8f:a0:a9:a0:9b:63:de:5a:e5:92:0a:fb:48:
c6:e2:2f:13:84:7f:93:bb:8a:e8:5c:09:bd:c0:b6:0f:09:5e:
bc:d0:5b:29:5e:e8:a0:88:60:07:02:01:10:c5:b0:3d:44:5a:
37:7d:04:22:70:86:9d:59:b8:25:cb:6a:95:e2:c3:3c:f6:56:
d5:46:0b:57:91:81:7b:c4:ec:d9:b3:cb:de:a0:60:c4:b1:04:
f0:bc:4f:a7:e4:c7:97:cc:fb:d9:e2:a6:27:b4:bf:13:8b:76:
14:cb:a8:1e:10:0b:8e:16:b5:d5:d8:ae:a2:28:eb:a0:16:37:
ef:0b:49:4e:91:1f:99:69:a2:4e:09:17:7a:ad:18:ed:c0:79:
8f:14:28:1a:5b:40:2e:58:ea:9d:bb:01:c0:7d:04:7b:5f:37:
15:3c:0d:f4:20:cf:5a:f1:48:80:15:0a:64:72:1c:48:a1:7b:
2b:98:f8:f4:f1:b8:93:e7:46:d5:f8:29:39:e0:a3:07:5e:8b:
c3:f8:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net