Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VStKidfgHs7-HOXxdKQIpBaDyJc.roa
File: VStKidfgHs7-HOXxdKQIpBaDyJc.roa (raw, json)
Hash identifier: OXzIoAgQIeAOMjveNy7JRfbxDaLYSsxpq7ixy/06x2U=
Subject key identifier: 55:2B:4A:89:D7:E0:1E:CE:FE:1C:E5:F1:74:A4:08:A4:16:83:C8:97
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01960F451E636B23DB538A69A7205AFC6FCA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VStKidfgHs7-HOXxdKQIpBaDyJc.roa
Signing time: Mon 07 Apr 2025 08:01:49 +0000
ROA not before: Mon 07 Apr 2025 08:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 195.177.93.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
2a01:7120:6::/48 maxlen: 48
2a01:7120:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:45:1e:63:6b:23:db:53:8a:69:a7:20:5a:fc:6f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 7 08:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=552b4a89d7e01ecefe1ce5f174a408a41683c897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d1:49:a8:4b:d1:ee:0d:4d:74:ef:c2:5e:7e:
1a:4e:f0:8f:1a:6e:8b:8b:d6:e8:fd:d9:af:4f:81:
ce:12:0a:2a:32:c9:ee:87:10:67:2a:c7:b9:88:42:
5c:41:10:b6:82:be:eb:98:32:20:73:5e:bb:c3:00:
38:f0:e7:81:ca:aa:24:c7:3a:ef:9e:c3:41:15:2a:
10:2a:7c:2c:aa:7f:0f:9b:6b:8a:7e:f3:92:a4:72:
bf:c0:00:62:38:c6:40:fe:d3:bb:de:fd:2c:e3:43:
b7:71:8a:8a:1c:cf:cf:e6:7d:29:cd:9e:94:a7:a2:
ef:d7:aa:f0:6f:41:13:9b:2b:6f:5f:61:e4:6a:64:
d2:1e:dd:a4:f5:32:52:73:57:f0:51:91:6d:53:a3:
aa:26:84:6f:ad:e9:2e:1d:98:d8:1b:08:ed:e2:49:
50:7a:ff:65:53:f3:83:ae:b0:66:18:1f:73:08:0b:
ce:06:e2:9d:f6:27:67:c1:6c:38:9e:28:b9:33:c0:
94:43:12:e8:69:67:95:6a:dc:88:18:9f:85:c5:ae:
0a:6b:7f:d0:d8:0e:68:93:47:7c:8f:c7:1e:09:b1:
1a:e3:46:b3:31:f6:28:d6:63:f6:17:49:ef:c9:6c:
41:c8:af:a8:86:dd:74:ed:89:d5:f2:ba:2f:64:a0:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:4A:89:D7:E0:1E:CE:FE:1C:E5:F1:74:A4:08:A4:16:83:C8:97
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VStKidfgHs7-HOXxdKQIpBaDyJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.93.0/24
195.211.188.0/24
IPv6:
2a01:7120:6::/47
Signature Algorithm: sha256WithRSAEncryption
77:e5:4d:eb:68:68:ca:cc:9d:93:bf:4d:58:05:27:83:05:1c:
58:36:7e:15:05:a2:58:2f:4e:f2:e0:ff:5e:98:27:c4:43:6a:
91:db:8a:1f:12:de:a6:8a:fb:3c:b1:0e:62:44:a6:1f:11:18:
0a:02:c2:1d:fd:f0:44:00:73:ee:7e:d4:77:30:a1:16:6f:25:
82:2b:e2:fb:83:99:c0:46:6d:e8:e9:60:36:e1:3b:74:d9:cb:
7f:4b:44:b2:c8:b1:8c:f9:6d:d9:92:a4:93:9e:fc:63:64:1d:
be:ff:1d:e7:c8:5e:f8:0e:9d:c9:d3:e4:f3:48:a5:2d:89:f2:
a5:e2:c2:81:f9:30:de:91:e9:be:97:45:4d:20:94:89:ee:93:
a2:a3:49:ec:1c:f1:e7:99:d2:ea:91:1e:49:56:04:d8:cf:91:
16:4c:cd:74:61:e0:95:2c:bd:c8:d4:69:25:59:ff:d9:e2:2b:
22:09:16:c8:4e:bf:a7:74:aa:38:e2:51:e5:f1:dd:a8:38:e9:
22:76:d0:2c:08:ac:a0:ad:27:ee:ba:7d:b7:fd:44:e7:7d:dd:
54:90:0a:25:d8:02:d4:d6:16:da:66:4e:8f:e8:0c:26:3c:2a:
d5:68:26:7c:95:7e:2d:45:bd:71:ed:ee:1f:14:41:ec:6b:db:
32:25:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net