Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/nNMaXspw-MfqxfuqJhcYFV82jgA.roa
File: nNMaXspw-MfqxfuqJhcYFV82jgA.roa (raw, json)
Hash identifier: gu+ocwTZMdArCv67tGJH3aJs58XUzblrFVAVRYDEBOQ=
Subject key identifier: 9C:D3:1A:5E:CA:70:F8:C7:EA:C5:FB:AA:26:17:18:15:5F:36:8E:00
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 0195F153678F6FF3E359B043B259D55156DA
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/nNMaXspw-MfqxfuqJhcYFV82jgA.roa
Signing time: Tue 01 Apr 2025 12:28:49 +0000
ROA not before: Tue 01 Apr 2025 12:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 195.210.104.0/24 maxlen: 24
195.210.105.0/24 maxlen: 24
195.210.106.0/24 maxlen: 24
195.210.107.0/24 maxlen: 24
195.210.112.0/24 maxlen: 24
195.210.113.0/24 maxlen: 24
195.210.114.0/24 maxlen: 24
195.210.115.0/24 maxlen: 24
195.210.124.0/24 maxlen: 24
195.210.125.0/24 maxlen: 24
195.210.126.0/24 maxlen: 24
195.210.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:53:67:8f:6f:f3:e3:59:b0:43:b2:59:d5:51:56:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Apr 1 12:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cd31a5eca70f8c7eac5fbaa261718155f368e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:6e:34:56:12:ff:8b:53:cf:06:51:c9:14:
74:6a:fe:60:5e:79:3e:1b:81:4f:88:ae:60:fe:28:
b3:28:fd:86:f2:d9:1d:20:c3:ba:c9:cc:8f:d7:6b:
d6:f0:59:a1:67:6d:59:06:4a:81:50:ef:b4:ed:d0:
49:45:cb:04:1a:66:8f:82:79:cf:42:51:7f:85:f6:
b8:5c:91:e4:77:84:8d:6f:2c:0f:c9:87:f1:e7:41:
fd:50:7f:1c:89:0c:56:8d:fb:3a:eb:f9:3d:56:4f:
f1:6e:c8:f6:5f:8c:83:fa:32:f9:a9:a0:db:39:ad:
4e:b8:7d:e6:b2:ca:7c:27:46:ef:f5:a9:33:4f:38:
3a:94:97:05:c1:b7:56:ff:af:87:ee:4a:39:1b:16:
5e:63:9f:b0:97:50:97:12:33:62:a6:d0:37:5a:0f:
44:1b:00:05:64:a5:0d:59:20:9f:2c:e9:a1:d7:05:
00:07:3b:46:00:46:6d:57:34:cc:31:da:9c:4f:b3:
ec:84:3d:86:46:20:49:8c:40:39:f1:31:22:0e:65:
77:e9:95:0f:de:b6:82:ff:e2:8f:e4:5d:ea:9c:37:
00:8e:9b:87:0e:29:51:28:46:88:62:ec:3a:11:8c:
1e:4d:72:c7:1f:b0:ee:fc:07:70:de:a3:38:0e:3f:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:1A:5E:CA:70:F8:C7:EA:C5:FB:AA:26:17:18:15:5F:36:8E:00
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/nNMaXspw-MfqxfuqJhcYFV82jgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.104.0/22
195.210.112.0/22
195.210.124.0/22
Signature Algorithm: sha256WithRSAEncryption
02:24:7e:d9:f6:fe:b9:b8:a8:78:8a:8f:6c:6f:7b:dd:d2:05:
68:e4:eb:0f:c3:90:c5:ee:f7:91:59:df:06:b3:78:bc:b7:60:
4c:91:2c:1d:cc:9e:30:cf:4d:d5:65:75:25:df:e2:ff:1a:3e:
45:4b:23:18:b3:d8:ed:fa:10:d2:71:db:4e:dc:5c:91:51:82:
22:ec:51:c8:6e:cf:5d:29:c8:09:a3:8f:5c:1d:62:ed:dd:9a:
90:17:d5:77:69:76:e0:4b:5d:e7:3b:34:ff:57:fa:ed:7f:31:
07:cf:3d:a9:34:be:86:84:8b:56:18:40:bc:41:17:c9:2f:9b:
56:9e:c1:0e:8a:d7:c3:b8:2c:3c:78:f6:e2:63:d2:0d:bf:eb:
cf:08:92:75:2b:24:fe:f8:cc:80:49:4a:31:d0:65:a4:dc:8d:
2a:fd:49:5d:88:8a:27:ad:30:46:79:99:86:95:06:df:e0:4d:
ae:b7:4a:32:c1:90:a1:75:9f:dd:ef:bd:e5:73:9f:8e:fe:22:
37:a5:1c:a6:9e:1a:b8:ed:3c:82:e5:1d:93:42:1e:f0:9d:b9:
b9:f9:c0:72:46:53:68:82:75:48:c8:15:b5:ac:8b:0b:f4:e2:
f2:7f:53:91:18:df:61:1f:b8:a1:83:a5:db:a6:52:52:9a:87:
30:33:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net