Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/KfVGrrJYfyAf1ioL1wUbST77ZGc.roa
File: KfVGrrJYfyAf1ioL1wUbST77ZGc.roa (raw, json)
Hash identifier: 6wDGYAdbjHeb0jIyTRUSvJfvhrmfOqr3R3ir+lFRzkY=
Subject key identifier: 29:F5:46:AE:B2:58:7F:20:1F:D6:2A:0B:D7:05:1B:49:3E:FB:64:67
Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial: 01942368F8085F0968E22908D97EFA251798
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/KfVGrrJYfyAf1ioL1wUbST77ZGc.roa
Signing time: Wed 01 Jan 2025 19:47:49 +0000
ROA not before: Wed 01 Jan 2025 19:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48971
IP address blocks: 195.225.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f8:08:5f:09:68:e2:29:08:d9:7e:fa:25:17:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Validity
Not Before: Jan 1 19:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29f546aeb2587f201fd62a0bd7051b493efb6467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:35:de:9d:61:0a:be:56:da:b2:c7:3c:cc:28:
39:46:ad:af:04:a5:08:e7:1f:1d:07:5b:fd:26:67:
e6:b6:89:05:f7:30:f3:e2:ba:66:da:be:91:7b:43:
43:7b:79:4a:69:c1:f6:50:a9:18:ca:e5:55:e3:6e:
14:19:79:a9:c9:be:15:b6:46:a2:ff:02:af:86:93:
10:b1:f5:b4:6b:f7:73:12:2a:77:db:8d:b6:b6:32:
b9:65:ae:f6:2b:96:04:96:e9:2f:31:e9:21:cf:30:
c7:74:1d:1a:a9:bf:37:88:53:19:ab:04:6d:f8:3d:
c7:75:70:9c:bd:3b:c9:4d:fe:87:c2:c8:56:d9:6f:
f5:d8:07:5c:21:7e:0b:cd:47:9e:92:db:23:5f:c5:
dc:b3:7a:21:05:cf:23:59:c6:c8:e2:a9:82:55:88:
e4:00:99:1d:62:60:93:0f:90:5e:73:98:0f:51:f0:
d8:c6:9e:57:6d:bc:32:c1:0c:ec:48:03:45:75:10:
36:9b:b3:33:91:b9:89:a4:e6:69:64:65:9c:01:bf:
7a:83:fd:70:35:7f:f4:33:c5:ca:70:fc:91:2b:de:
35:31:4e:01:0a:37:2f:26:b6:bc:e3:f4:b1:47:04:
be:bd:1c:20:97:6c:7d:64:3b:3d:08:4a:b5:0d:f6:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:46:AE:B2:58:7F:20:1F:D6:2A:0B:D7:05:1B:49:3E:FB:64:67
X509v3 Authority Key Identifier:
keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/KfVGrrJYfyAf1ioL1wUbST77ZGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.116.0/24
Signature Algorithm: sha256WithRSAEncryption
16:9f:2a:2a:67:a7:84:61:44:f4:20:4b:56:0b:14:ff:42:b0:
9c:40:76:28:98:cf:07:39:55:19:3a:15:fd:b6:b2:6c:18:88:
ef:56:65:dc:34:b2:60:25:3d:05:ec:fa:30:45:57:5a:72:cc:
95:e5:13:20:b4:56:23:8b:a0:2c:81:b3:75:9d:61:d6:f3:4d:
62:01:ea:a7:24:0b:ab:3c:2f:35:25:3c:4a:57:62:8d:57:62:
e5:b4:5f:8d:66:04:92:fa:7b:b5:f6:2b:03:f3:cf:d5:bd:41:
60:d2:64:b3:7c:11:ae:16:5c:e2:7a:99:b1:2e:73:60:59:b3:
b8:aa:50:ee:7a:5d:fe:66:fb:23:2a:33:98:fe:28:de:bd:2f:
4e:d2:0b:5b:d5:dc:e0:be:64:cd:4e:44:63:19:b1:06:58:9d:
b0:9a:f3:7a:70:cc:0b:c3:19:17:76:2a:f3:63:50:b8:5d:a8:
d7:f7:b2:45:6d:c4:75:9e:f7:aa:9f:32:4b:33:07:39:5a:7e:
47:d6:31:b2:b6:eb:79:57:d0:91:24:5c:a2:cd:fb:95:cc:63:
98:af:c1:f7:4a:5c:76:64:f0:a7:0f:2c:d0:0d:25:c8:a7:71:
b8:5c:3a:54:18:b2:82:d1:1e:61:47:f2:08:60:ab:db:9c:e9:
9a:5d:e0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net