Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/V1VyWKK4g97snYUaOwHJAFP_MdQ.roa
File: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (raw, json)
Hash identifier: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=
Subject key identifier: 57:55:72:58:A2:B8:83:DE:EC:9D:85:1A:3B:01:C9:00:53:FF:31:D4
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 01941F8C30E7E4BAB31DD01A769D1C211057
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/V1VyWKK4g97snYUaOwHJAFP_MdQ.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13278
IP address blocks: 195.234.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:30:e7:e4:ba:b3:1d:d0:1a:76:9d:1c:21:10:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57557258a2b883deec9d851a3b01c90053ff31d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:30:84:3f:7f:05:b5:1a:b8:92:68:e2:70:
ab:0a:92:41:c1:ab:d2:3f:3c:5a:86:21:aa:a7:df:
b0:3d:55:e1:d4:c1:c1:81:0f:29:9e:fe:c6:b7:c0:
06:e5:53:9c:ce:b3:96:5e:06:d5:ee:30:31:94:a9:
44:66:b4:f6:1f:eb:05:88:d6:5b:ca:d2:a2:42:70:
9e:ed:47:10:e9:4f:30:3b:b3:04:59:ae:ff:f5:28:
03:bb:45:cb:aa:8f:4b:cd:97:4c:07:ba:71:a5:fc:
82:83:a8:62:9e:60:19:e2:9b:2d:27:5f:c8:5b:76:
d8:7b:f9:97:c7:14:78:cd:d0:94:ec:09:70:44:52:
f9:a4:2b:08:33:8e:29:65:34:dc:ea:23:6e:66:a1:
1b:3c:f3:d5:47:bf:37:98:7d:30:cc:ea:02:78:c5:
36:e6:7a:d9:d0:b9:52:26:7b:02:cc:fa:97:97:00:
25:ec:f5:93:62:16:c2:8f:28:98:26:d8:47:6d:71:
cf:ad:35:94:21:64:7a:2e:f8:15:6b:4a:40:5a:34:
8e:9f:c1:2c:e0:e7:8d:a2:54:f9:76:fa:24:a0:f5:
1e:47:2f:21:08:83:70:02:31:5c:c8:1e:4e:c2:00:
8b:54:12:e6:5e:41:95:40:97:3d:f9:20:c7:c1:e6:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:55:72:58:A2:B8:83:DE:EC:9D:85:1A:3B:01:C9:00:53:FF:31:D4
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/V1VyWKK4g97snYUaOwHJAFP_MdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.165.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f6:fb:a2:09:d4:b2:87:0b:8e:03:7f:03:3f:30:80:0f:e2:
5b:7c:d3:b1:37:c0:47:6c:ca:98:87:48:0c:ed:4a:bf:ef:11:
5f:f4:ab:35:3b:62:dc:49:dd:20:a5:66:20:01:f4:80:7f:36:
7e:d9:9a:d4:de:ac:00:84:b9:7f:d9:60:91:6f:10:c6:1a:ea:
68:17:a1:44:09:c3:fb:4d:6f:4c:e7:02:93:63:8c:de:af:da:
8b:8e:1f:c7:e9:b0:09:23:41:44:e8:4e:f8:b5:22:35:5e:3b:
a8:72:0a:32:6a:5e:0a:dc:1d:e6:4c:27:cc:3f:08:b4:d2:fc:
93:22:8d:7d:7a:2c:af:a0:5b:b0:39:73:cf:01:16:39:b2:0a:
78:cc:8a:d9:4a:1b:1a:00:0c:37:d3:a5:74:1b:69:ab:4e:e9:
3e:31:d2:76:f3:f4:04:0b:a3:f5:91:aa:ca:65:04:25:eb:61:
9c:dd:da:11:17:3f:6d:ba:fb:3d:0d:b6:bb:1c:04:9a:7c:10:
75:bd:41:b2:b5:4f:4a:3c:63:72:3c:aa:41:26:98:ac:a5:55:
a7:49:6a:55:ab:09:93:3f:82:d7:fa:12:7a:be:83:4c:5f:8f:
ed:72:79:36:9f:0d:d8:2e:87:cf:a5:67:37:e2:c2:a9:d1:8d:
f4:a7:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net