Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa
File: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (raw, json)
Hash identifier: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=
Subject key identifier: D1:35:FA:6C:6D:C0:5B:73:AB:B7:E4:6D:F2:A0:9C:D5:34:75:DA:13
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 0194236A23FC99F1741F164A6758C02A6BDF
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 195.177.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:23:fc:99:f1:74:1f:16:4a:67:58:c0:2a:6b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d135fa6c6dc05b73abb7e46df2a09cd53475da13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:f0:fc:b1:71:78:ca:1d:82:74:fd:0c:f4:
13:32:89:6f:18:13:51:1f:aa:b7:d2:00:a2:dd:76:
fb:1f:d7:7f:9b:70:33:33:97:10:f3:0d:fa:ff:fc:
8f:70:c1:47:01:ab:9f:e3:54:b3:5f:dc:85:9c:0c:
ca:2a:ef:43:3c:d4:85:b1:8c:08:5d:2f:c0:e3:8f:
b4:01:64:e6:dc:d6:09:c0:a2:9b:32:ce:89:ab:57:
9d:a2:b1:b8:08:34:0c:08:b1:c8:11:cc:80:b1:70:
49:72:e2:41:32:a5:df:be:d6:5c:59:ad:7a:f1:66:
74:3a:eb:e2:19:83:e1:c8:79:46:49:27:37:e6:d3:
57:b1:d3:9d:64:25:49:c0:b9:8b:e8:27:6e:7a:b8:
a3:a2:8e:a4:7b:83:ea:a1:db:8f:8f:41:e9:4b:cd:
c9:3a:45:60:05:19:f2:a8:91:fd:50:4b:06:ad:f3:
8d:37:2d:92:2f:bf:e3:21:e6:61:c4:c3:c8:d9:18:
a6:54:67:30:31:3c:49:99:85:f2:b1:f1:87:1d:85:
69:e5:6d:fa:b0:96:19:5f:bd:24:91:71:e9:78:61:
59:c6:18:1a:7f:12:0d:82:3c:de:2b:4a:aa:6f:7a:
f4:c9:d3:49:c6:2c:ca:5b:34:bb:35:8e:b0:53:ba:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:FA:6C:6D:C0:5B:73:AB:B7:E4:6D:F2:A0:9C:D5:34:75:DA:13
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d7:3a:0f:35:0c:f5:ba:23:16:e6:66:87:66:54:cf:af:4a:
a1:73:a6:27:a0:cc:73:e4:ff:df:5b:4a:a8:68:15:cb:d6:20:
12:20:e9:18:6f:69:e1:04:d0:04:66:9e:cd:62:71:f2:63:f0:
0e:58:e1:b0:cc:bb:f0:79:17:88:da:26:74:41:41:39:95:cd:
ea:fc:25:1a:09:49:ca:5f:88:8b:0a:bb:95:d2:8e:95:a5:7f:
7a:c3:6a:f6:6d:3b:d1:f7:b8:8e:48:40:1c:10:25:c6:20:46:
c3:ac:48:96:9e:c8:3f:a3:19:c4:fd:e3:ce:87:6a:25:09:45:
46:ae:56:34:0b:42:00:30:d2:93:8c:62:64:41:2d:26:17:53:
08:fb:7f:d5:b9:23:44:58:e4:dc:c7:14:5b:13:25:d3:c2:72:
06:15:ad:c1:06:77:0b:f6:b0:7f:0c:6e:d1:8a:c6:20:69:8b:
51:a7:59:a4:9a:9f:ee:c0:f6:f9:3b:66:9a:5f:be:e3:79:cc:
19:cf:f0:74:83:a2:63:89:a0:8d:28:79:bd:57:9f:c0:67:b7:
b7:e2:73:74:28:7b:17:c4:5f:91:35:d6:24:d3:71:b5:bb:20:
9e:56:ec:da:29:3e:22:49:ea:8e:49:8a:b6:03:83:cb:d8:fa:
87:bf:76:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:10 2025 by rpki-client on console.sobornost.net