Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/sV9tAEvP7CI_ytsSrwY5KYVQ0uo.roa
File: sV9tAEvP7CI_ytsSrwY5KYVQ0uo.roa (raw, json)
Hash identifier: z6QhtjWTggxEC3vWBAoujIqlOU7iqRgtEA7A/CNef2E=
Subject key identifier: B1:5F:6D:00:4B:CF:EC:22:3F:CA:DB:12:AF:06:39:29:85:50:D2:EA
Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Certificate serial: 01941FFA4EBEB86A674E35335D714A3CAEB8
Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/sV9tAEvP7CI_ytsSrwY5KYVQ0uo.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28925
IP address blocks: 195.222.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:be:b8:6a:67:4e:35:33:5d:71:4a:3c:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b15f6d004bcfec223fcadb12af0639298550d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:88:f5:35:fb:26:a3:73:26:05:e0:14:8e:
39:57:a7:1a:27:b7:a2:3d:57:e0:49:7a:8f:09:f3:
e5:72:c1:3e:fe:44:4a:fe:cf:ae:f6:6a:59:e9:0a:
28:35:49:1a:a3:3c:63:f2:4c:67:4e:a9:54:08:fd:
4f:fe:7e:41:47:58:9a:9c:04:f6:21:fb:61:43:35:
a0:1a:f4:59:61:50:77:4f:4a:19:8a:45:c1:ca:b3:
68:bb:e6:7c:4c:cb:86:14:40:81:f1:6a:50:a4:aa:
18:b9:29:eb:9b:9a:57:37:41:c8:95:65:8e:ee:18:
40:1d:b0:5a:7e:1a:08:95:8f:a0:e9:41:23:bd:c1:
fc:26:20:eb:0a:0c:27:c1:b1:02:66:9a:03:ed:ae:
2b:0b:bc:e7:8a:4b:10:57:f5:77:05:07:5c:7c:7d:
b9:73:c0:c2:26:da:a6:91:1f:69:4f:47:62:8e:f5:
6b:cc:5f:91:d7:92:5b:6d:72:36:7f:03:05:d2:c3:
ca:9e:81:1f:40:cf:8d:66:cf:63:c5:e5:27:a0:97:
66:2b:17:f2:1b:8a:06:0c:81:e3:41:15:cd:2f:6f:
93:16:07:97:61:fa:1a:12:fb:73:cf:be:09:9f:49:
fd:d4:6c:3a:1b:5f:c7:f6:11:e6:56:5c:b2:31:9f:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:6D:00:4B:CF:EC:22:3F:CA:DB:12:AF:06:39:29:85:50:D2:EA
X509v3 Authority Key Identifier:
keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/sV9tAEvP7CI_ytsSrwY5KYVQ0uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.222.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:b4:de:9a:0c:3b:35:67:84:b6:0d:0f:2d:79:2a:10:91:bc:
d5:80:2b:64:0f:2a:e7:cd:98:97:87:53:b9:5e:9d:66:e2:5d:
cd:b2:a9:cd:3c:26:00:6f:d7:10:85:48:41:10:92:b0:20:72:
52:1e:cc:2f:d6:3b:45:08:37:93:b5:98:eb:41:b9:a0:c7:d7:
09:6b:6d:76:75:4f:64:6a:87:96:32:fe:0f:fb:3b:90:6f:25:
b4:66:35:cc:49:50:a5:24:f2:33:37:37:1b:f1:8d:63:f9:f4:
83:1a:1f:43:41:8a:36:56:5b:57:98:3e:d5:1b:5d:70:e2:45:
a6:be:fe:8c:b6:ce:79:22:3a:97:33:14:6f:0d:fb:19:be:1b:
f0:b0:9b:e4:ac:d7:43:f0:ee:9f:8c:10:85:5f:a8:1d:f0:d0:
53:2c:18:d4:e8:a8:f3:34:5c:e3:10:aa:6b:23:7c:cf:c0:b9:
13:d7:86:5a:76:74:b2:dc:45:81:23:6c:bd:32:97:78:54:53:
aa:0d:cb:f0:eb:b0:a0:94:b0:62:74:bc:72:2a:a4:85:bb:6e:
58:17:8a:10:3a:e8:11:b7:a6:ac:35:83:54:b2:c7:53:02:03:
7f:e5:7f:dc:fa:f5:09:c4:09:00:4f:3d:97:18:63:5d:03:cf:
0a:e5:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net