Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/visWSJlNcMrC3jJZFirSko7YGBQ.roa
File: visWSJlNcMrC3jJZFirSko7YGBQ.roa (raw, json)
Hash identifier: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=
Subject key identifier: BE:2B:16:48:99:4D:70:CA:C2:DE:32:59:16:2A:D2:92:8E:D8:18:14
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 019425FC27D2BF288021A2D9F890C6AEAA9E
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/visWSJlNcMrC3jJZFirSko7YGBQ.roa
Signing time: Thu 02 Jan 2025 07:47:49 +0000
ROA not before: Thu 02 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198968
IP address blocks: 164.138.208.0/22 maxlen: 22
164.138.212.0/23 maxlen: 23
164.138.214.0/24 maxlen: 24
164.138.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:27:d2:bf:28:80:21:a2:d9:f8:90:c6:ae:aa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be2b1648994d70cac2de3259162ad2928ed81814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:62:39:31:e4:dd:3d:a6:01:5b:2c:91:3e:
6e:c7:da:4a:cc:16:2d:0e:36:c9:80:29:bb:16:00:
a9:77:d4:ee:1d:77:e3:a2:8f:9f:86:ed:ec:22:8a:
91:7c:83:d1:23:8b:c1:c5:46:d4:20:ed:b4:55:1a:
40:77:1a:bb:06:9e:fb:f1:bc:34:79:77:c8:af:b8:
24:9e:ec:20:49:8d:9f:1b:c5:11:10:5d:f6:ed:2e:
31:f3:b7:3b:44:75:9b:d1:09:5b:a2:7a:de:4c:ff:
d5:26:d7:4c:e8:57:b1:64:99:95:ba:fd:ce:3c:05:
a6:ad:b0:b5:56:89:08:70:74:c5:fe:d5:0e:b2:e8:
11:4c:de:ad:2a:e2:05:c3:9b:ec:34:40:66:8d:0e:
ea:7a:08:0a:5c:d0:7c:2d:48:39:19:16:77:51:56:
2a:5b:c8:f3:96:33:64:b6:4a:10:8c:dd:01:e3:6a:
dc:7a:e7:18:e6:4f:5e:d9:b9:aa:68:f1:64:36:84:
7b:62:02:4e:63:bb:f0:89:fe:fa:f7:ef:55:99:16:
0c:ba:0b:83:95:4d:6e:84:56:5f:d3:aa:81:9f:2b:
7b:c6:86:0c:da:2b:ed:02:e5:c2:15:a2:ca:50:53:
cd:9e:36:da:96:4d:f2:78:ed:ff:c0:ec:58:5f:ca:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:16:48:99:4D:70:CA:C2:DE:32:59:16:2A:D2:92:8E:D8:18:14
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/visWSJlNcMrC3jJZFirSko7YGBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.208.0/21
Signature Algorithm: sha256WithRSAEncryption
98:af:16:b3:aa:2d:83:ae:37:b1:99:92:24:c0:08:bc:4f:c8:
04:8d:a4:6f:f6:6e:92:87:26:23:0e:c8:2f:a8:9b:60:ad:49:
9d:6a:85:ea:8c:9d:8c:ea:07:25:ac:5d:9e:76:e9:16:3e:b1:
f3:42:c7:1d:9a:b9:2c:98:c1:e3:c2:28:23:23:f0:4f:3a:6e:
b5:a0:79:34:64:44:c6:a8:0d:3b:0f:25:7c:ea:29:97:07:ae:
62:13:29:2e:82:ca:9e:7e:bb:00:0f:e2:6f:5d:72:53:59:59:
8a:fd:51:ef:0d:5a:a9:15:cc:71:c0:a6:ee:dc:0e:1e:0a:08:
aa:6e:62:09:ce:bf:3c:7e:6b:c6:c9:ee:ab:08:07:8b:45:c4:
80:61:2f:cc:34:bf:73:94:bf:c5:e3:4a:a8:76:fe:3b:da:aa:
d1:12:35:89:ea:28:bd:7c:a3:af:51:cf:11:3f:73:48:b2:1b:
c2:7d:ec:75:2d:e9:d2:34:0d:23:90:77:c4:0b:36:89:74:fd:
e5:cc:6a:c2:5b:bc:9e:d3:f4:8a:a7:60:b9:98:80:93:0e:ff:
fd:df:85:66:bb:2e:f5:98:3f:b8:cb:fe:c7:18:fa:fc:d2:e0:
43:b6:79:9a:52:5c:90:9f:0b:fa:d2:fa:1c:73:e8:d4:67:c9:
9a:3a:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net