Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/1-Na5cdjkknnPjBDa8CSwg969ti4.roa
File: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (raw, json)
Hash identifier: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=
Subject key identifier: F8:D6:B9:71:D8:E4:92:79:CF:8C:10:DA:F0:24:B0:83:DE:BD:B6:2E
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 01942444889F7C973A445A6E76D2FC9A1A39
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/1-Na5cdjkknnPjBDa8CSwg969ti4.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60855
IP address blocks: 195.42.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:88:9f:7c:97:3a:44:5a:6e:76:d2:fc:9a:1a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8d6b971d8e49279cf8c10daf024b083debdb62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:9e:20:6c:9d:5b:f9:95:41:db:71:9c:cf:
6a:f6:a9:5d:8b:77:d5:e1:e1:a0:04:3f:3c:1b:bd:
4a:f1:1b:5d:93:45:11:d8:5a:fe:44:0f:16:f7:f8:
18:59:12:09:9c:ef:28:16:59:f6:5c:33:85:79:c1:
c5:a8:aa:ad:90:35:f2:32:58:ce:d4:4f:2c:fd:88:
3e:2d:6f:68:ae:fe:2e:4a:2b:b5:e7:77:f8:4e:9d:
6b:a4:80:30:e3:34:37:e4:47:56:fd:5f:f3:04:79:
29:44:2d:88:6e:b7:7d:31:0b:c4:98:2b:b6:27:aa:
69:6f:19:49:ba:5d:57:0a:cb:a3:9f:55:e3:3b:96:
bb:9c:b3:3f:0c:5b:4e:2a:34:ba:25:53:f6:c8:68:
92:08:81:36:a9:e4:35:83:2f:e1:42:e8:6c:47:52:
f8:14:c5:58:eb:20:b6:19:de:21:ce:24:66:69:54:
c3:49:35:02:3f:e9:eb:9c:44:b8:d1:95:0b:6e:40:
89:e3:6c:eb:74:51:94:e9:75:f5:a4:e7:82:07:0f:
b0:53:ca:26:13:bd:71:21:17:65:5a:fa:3f:af:d2:
22:85:28:df:2b:ea:d9:fc:3c:39:b4:d9:91:b0:b3:
f1:9a:2b:86:eb:85:c5:70:6c:5a:96:4f:7b:c4:3c:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:B9:71:D8:E4:92:79:CF:8C:10:DA:F0:24:B0:83:DE:BD:B6:2E
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/1-Na5cdjkknnPjBDa8CSwg969ti4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.231.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0f:36:da:6c:fc:0f:9a:38:8d:41:41:32:cc:05:f7:b3:c6:
e6:a5:45:82:a4:78:0f:bc:23:47:e0:76:b9:7e:07:85:e6:6c:
46:68:22:fc:a3:16:41:38:b7:8b:67:39:86:93:1c:2d:94:b2:
7e:0e:82:9f:99:a9:4d:4c:f0:2e:29:4a:ce:71:f1:5b:46:b8:
c0:10:f4:96:95:75:76:97:cd:73:98:3e:90:43:82:b9:19:2c:
7a:9f:4b:b8:60:ba:eb:ea:fc:10:36:98:52:87:5a:da:65:75:
71:da:38:e0:92:81:12:e2:d9:15:83:d9:be:67:db:70:2f:96:
07:0c:34:ef:21:d6:f9:cf:47:ee:c5:c7:da:d5:1c:58:43:7b:
e9:48:32:7e:29:7e:3d:c9:f4:f6:98:c3:99:fe:ff:38:e8:f4:
66:54:ea:10:d6:4a:1b:04:e4:3b:de:de:b3:5c:e3:92:f2:e5:
c6:a2:9d:53:97:9f:d0:af:76:68:4d:21:4c:c5:f3:92:fc:25:
ad:35:c3:70:4b:35:04:c0:49:c1:be:8a:99:44:55:bd:03:4b:
2b:55:9c:99:39:de:1b:4f:bb:d8:b6:f2:66:4e:99:83:74:08:
ce:51:d0:f4:04:2e:5a:95:7a:c1:73:bc:a4:fe:ce:af:d0:5a:
31:3d:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:19 2025 by rpki-client on console.sobornost.net