Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/kXJd78RsJ79BG_LY-HKE3xW9xTQ.roa
File: kXJd78RsJ79BG_LY-HKE3xW9xTQ.roa (raw, json)
Hash identifier: Ff8IU/0K89U686a3qz0aLt9a8lnUt29LLnlbj61soko=
Subject key identifier: 91:72:5D:EF:C4:6C:27:BF:41:1B:F2:D8:F8:72:84:DF:15:BD:C5:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 01941F8C30CCFA637E7CE3BBECF1718ABED9
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/kXJd78RsJ79BG_LY-HKE3xW9xTQ.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202395
IP address blocks: 195.226.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:30:cc:fa:63:7e:7c:e3:bb:ec:f1:71:8a:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91725defc46c27bf411bf2d8f87284df15bdc534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:67:38:f9:57:07:e6:1b:cf:31:8a:8b:fb:8c:
80:0b:dd:90:47:81:a7:d9:7a:e9:62:dd:b9:39:e9:
d9:5e:ef:6c:8b:52:70:a5:77:11:a2:06:1e:79:74:
6d:5d:e5:01:51:fb:30:d8:0e:17:8e:96:c5:07:4e:
c0:cd:3f:23:e1:4f:dc:07:b4:dd:95:e9:63:a0:da:
ab:59:0a:79:bc:e8:c3:cf:7b:97:6a:e1:23:b3:ee:
64:db:7b:fe:0e:e2:bc:df:25:3b:06:e8:63:03:38:
c9:34:dc:32:c4:d5:5c:bd:3a:f2:b6:d2:96:62:d2:
44:75:e4:59:95:e7:75:4b:ec:86:a2:97:f9:83:ce:
71:98:53:12:d6:0c:14:59:29:be:1e:02:b7:07:1f:
77:54:80:e4:88:47:25:8c:74:c6:48:15:d3:da:2e:
69:fe:a1:b4:70:ae:37:e8:2f:cf:83:b9:cd:54:97:
61:d3:4b:ae:7e:45:de:8d:7f:57:02:48:db:78:06:
a0:61:ec:d3:ab:63:7a:17:5c:6c:77:45:36:f2:a2:
6a:82:45:de:5f:ef:17:40:83:ac:a3:3f:93:6f:2f:
6a:95:34:4f:b7:07:ed:c9:ae:87:29:35:25:ae:9d:
f2:6f:17:11:34:35:20:ae:79:9d:ee:de:4b:9e:10:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:72:5D:EF:C4:6C:27:BF:41:1B:F2:D8:F8:72:84:DF:15:BD:C5:34
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/kXJd78RsJ79BG_LY-HKE3xW9xTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.220.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:2e:c7:93:f4:87:73:44:0a:e2:8f:b5:58:ab:b6:29:19:ab:
75:3a:00:ac:e5:91:46:3c:0b:fb:97:ac:9c:85:cd:b0:d9:b1:
16:71:92:e7:a1:ec:d1:ff:36:b7:da:38:78:9a:c8:e8:8b:91:
aa:3c:cc:2f:02:c6:93:52:69:6e:41:d1:f0:75:9c:5d:f8:b0:
6a:0c:42:7a:18:ed:94:28:bb:ad:97:7f:e0:b0:b5:92:b0:d7:
64:2c:6e:a4:b9:c6:bb:c8:e7:7f:54:ac:19:98:b4:e6:21:5a:
14:ab:79:66:7e:b9:7d:a7:e8:45:53:37:cf:6d:01:82:c8:26:
37:16:b7:f5:df:94:d7:48:ac:a2:fb:74:25:61:5f:e6:43:8e:
1a:b2:50:9a:eb:0b:6f:2b:6f:bd:11:ae:f4:cd:44:53:7f:3c:
90:02:c2:ec:ac:8a:6f:e2:cf:f4:4c:4f:bd:9b:5a:6c:5c:69:
11:64:fc:c1:68:e2:44:ad:68:f7:67:bc:8a:9b:49:7a:33:96:
d8:39:dc:3a:f9:39:5f:1c:3e:03:30:73:9d:5a:50:8e:5f:23:
d7:25:24:45:56:fd:54:a8:7c:5b:90:d2:6b:a9:d2:7d:eb:dd:
a0:01:b2:d0:15:2a:fc:0a:79:d1:05:c4:c2:1c:99:e7:8f:a4:
38:18:91:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDDM+mN+fOO77PFxir7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMjhmNTc3NDZhMDA1YWU3NWE4ZjVmOWU5MmY3ZDIyZDYx
YzhkMzQwHhcNMjUwMTAxMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTcyNWRlZmM0NmMyN2JmNDExYmYyZDhmODcyODRkZjE1YmRjNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mc4+VcH5hvPMYqL+4yAC92QR4Gn
2XrpYt25OenZXu9si1JwpXcRogYeeXRtXeUBUfsw2A4XjpbFB07AzT8j4U/cB7Td
leljoNqrWQp5vOjDz3uXauEjs+5k23v+DuK83yU7BuhjAzjJNNwyxNVcvTryttKW
YtJEdeRZled1S+yGopf5g85xmFMS1gwUWSm+HgK3Bx93VIDkiEcljHTGSBXT2i5p
/qG0cK436C/Pg7nNVJdh00uufkXejX9XAkjbeAagYezTq2N6F1xsd0U28qJqgkXe
X+8XQIOsoz+Tby9qlTRPtwftya6HKTUlrp3ybxcRNDUgrnmd7t5LnhCrlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJFyXe/EbCe/QRvy2PhyhN8VvcU0MB8GA1UdIwQY
MBaAFO0o9XdGoAWudaj1+ekvfSLWHI00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQt
YTdlYjM4ZDQ4Yzc4LzEva1hKZDc4UnNKNzlCR19MWS1IS0UzeFc5eFRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQtYTdlYjM4ZDQ4Yzc4
LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LcMA0G
CSqGSIb3DQEBCwUAA4IBAQDBLseT9IdzRArij7VYq7YpGat1OgCs5ZFGPAv7l6yc
hc2w2bEWcZLnoezR/za32jh4msjoi5GqPMwvAsaTUmluQdHwdZxd+LBqDEJ6GO2U
KLutl3/gsLWSsNdkLG6kuca7yOd/VKwZmLTmIVoUq3lmfrl9p+hFUzfPbQGCyCY3
Frf135TXSKyi+3QlYV/mQ44aslCa6wtvK2+9Ea70zURTfzyQAsLsrIpv4s/0TE+9
m1psXGkRZPzBaOJErWj3Z7yKm0l6M5bYOdw6+TlfHD4DMHOdWlCOXyPXJSRFVv1U
qHxbkNJrqdJ9692gAbLQFSr8CnnRBcTCHJnnj6Q4GJGz
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net