Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa
File: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (raw, json)
Hash identifier: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=
Subject key identifier: B5:1D:E9:34:F0:CD:79:86:67:C2:A0:F4:B2:FC:C3:93:71:6D:F2:97
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 01941FFA6FC73E8B88311C901A741119ABF9
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29044
IP address blocks: 195.68.196.0/23 maxlen: 23
195.68.196.0/24 maxlen: 24
195.68.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6f:c7:3e:8b:88:31:1c:90:1a:74:11:19:ab:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b51de934f0cd798667c2a0f4b2fcc393716df297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:6f:bc:12:fa:69:17:e3:48:8c:53:f8:37:
d7:45:87:2a:62:3f:9e:2f:ae:59:4d:89:9c:2b:4b:
bc:b2:45:4f:ec:94:1d:cb:09:2e:6d:10:d2:1c:bb:
82:52:c3:9c:4c:ee:c3:bd:52:02:06:e3:ec:44:3d:
f8:4d:39:4a:84:57:f9:f4:79:39:f7:09:73:c2:05:
cb:54:ce:61:5e:e8:92:d5:ed:e5:86:40:b5:76:f3:
9e:0e:39:bf:84:48:7b:8f:52:5f:3d:87:a4:14:98:
b0:98:38:c4:b3:b6:60:77:2f:9b:95:06:51:6e:52:
f7:2a:a0:b6:ff:15:68:ff:9d:33:69:2b:99:59:54:
3c:71:58:8c:d5:f5:44:ba:a1:9c:86:a4:5c:a3:c4:
49:b7:83:a8:ae:e8:04:b7:11:a5:c1:39:5b:c5:b2:
9c:6d:c1:44:f3:c7:67:8e:80:ed:f6:9e:20:cc:8f:
54:c9:45:0a:29:e7:e7:22:0d:57:e3:1e:bb:a2:58:
30:78:3a:27:84:9e:ed:4d:2e:e8:d8:b2:9f:90:41:
b5:07:a1:f8:a4:27:95:28:f4:69:f1:59:3c:58:4d:
a3:b5:ff:ba:0e:69:ff:f3:4e:02:94:50:01:5f:53:
7c:e6:4a:70:aa:02:4d:2e:4c:e5:f2:63:82:60:16:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1D:E9:34:F0:CD:79:86:67:C2:A0:F4:B2:FC:C3:93:71:6D:F2:97
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.196.0/23
Signature Algorithm: sha256WithRSAEncryption
37:85:2d:32:fb:fe:41:13:d0:29:ce:d0:0a:43:bc:51:40:32:
03:f6:cb:16:0e:d8:fe:4c:c3:bd:98:31:99:b6:32:26:ef:57:
a6:11:b1:5c:81:63:fd:2f:2f:2f:d5:4a:fa:f9:a1:c7:1d:d8:
39:aa:00:09:8f:66:20:66:05:c3:b7:9a:fd:5d:ff:9e:2a:fc:
e5:f7:2f:fe:f1:34:3c:0f:34:9d:72:c5:ae:bb:a5:4e:75:d0:
dc:b9:e8:9e:73:fd:7d:1c:4f:ef:c8:b9:aa:70:37:2f:b2:7f:
d0:e7:c3:69:30:6d:40:f7:49:24:81:27:14:47:c6:e7:17:b3:
1b:6c:b0:a7:19:8c:12:42:b3:b0:f6:93:15:38:e0:c3:a1:60:
8e:fb:2a:24:9f:af:e0:a1:14:4e:f4:dd:ce:d6:3b:95:26:90:
79:ee:46:dd:80:3e:c3:da:8e:fc:48:cc:f2:95:aa:f6:c2:df:
6e:29:9e:2c:5f:af:c4:2a:8a:6a:24:f4:87:a5:55:56:db:db:
d8:59:c3:eb:88:f5:64:43:d5:31:91:90:42:2b:51:a7:2d:6c:
f3:35:ee:9c:a4:ff:4a:22:d5:f7:44:c0:97:4c:89:39:70:03:
db:20:ef:be:0c:5a:e9:10:6e:e5:ff:37:a3:9c:7e:a4:ab:5d:
a0:bc:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net