Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/eCInIDJljc296hyYtD5W8TkDML4.roa
File: eCInIDJljc296hyYtD5W8TkDML4.roa (raw, json)
Hash identifier: 748KveIKW32FuAoa2IrqedX1Io3eRBGbUpfsqc8GK+g=
Subject key identifier: 78:22:27:20:32:65:8D:CD:BD:EA:1C:98:B4:3E:56:F1:39:03:30:BE
Certificate issuer: /CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Certificate serial: 0194228DB0D7282820FBC63C150E48DA0B54
Authority key identifier: A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/eCInIDJljc296hyYtD5W8TkDML4.roa
Signing time: Wed 01 Jan 2025 15:48:18 +0000
ROA not before: Wed 01 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42648
IP address blocks: 195.248.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b0:d7:28:28:20:fb:c6:3c:15:0e:48:da:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Validity
Not Before: Jan 1 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7822272032658dcdbdea1c98b43e56f1390330be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:05:58:08:ab:4f:34:82:bc:c4:8c:01:ea:
19:1f:2e:fb:24:46:62:6b:c8:d4:2a:1c:12:ed:b8:
3b:19:6f:c9:2e:3e:16:99:49:91:01:d9:50:13:f3:
8f:b1:04:16:5f:bb:c0:aa:e7:5b:71:3a:ba:a8:d1:
ab:f0:b3:c5:a4:15:68:d0:e0:90:8e:4f:de:db:74:
76:d4:05:e0:ff:a0:e0:a0:b6:b4:18:76:bb:6b:82:
24:8b:c7:ff:00:ea:77:9e:20:18:38:d3:95:f7:e7:
9c:7d:91:3f:20:55:60:07:5b:fa:67:fd:ef:71:35:
2d:5d:30:ef:88:e2:ba:0a:c2:dc:af:3a:d7:89:c8:
ac:74:3d:80:de:a2:e6:64:91:98:d7:74:43:c4:9b:
7d:73:fc:4c:6b:72:3b:60:23:c2:0d:99:a8:09:82:
43:fb:6e:4a:1e:08:01:43:68:83:54:a3:c1:d9:75:
2c:41:c1:a9:24:20:50:6b:7c:b1:62:52:6b:50:51:
ce:7a:7e:de:b6:ab:10:53:6e:5a:df:6f:83:82:12:
d1:e5:1f:5f:97:40:92:d2:6d:ec:d2:0a:d9:11:fe:
eb:b1:5c:0b:58:2f:16:c7:3d:28:be:fa:19:73:b7:
31:0b:90:29:7f:3f:75:fc:5c:9b:e4:77:cd:e0:3c:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:27:20:32:65:8D:CD:BD:EA:1C:98:B4:3E:56:F1:39:03:30:BE
X509v3 Authority Key Identifier:
keyid:A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/eCInIDJljc296hyYtD5W8TkDML4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.225.0/24
Signature Algorithm: sha256WithRSAEncryption
26:13:dc:6c:f8:c2:cb:ec:e6:79:3c:c7:aa:f8:ae:9d:0c:24:
cd:97:ac:c5:c6:a7:f8:de:73:f8:67:ec:f9:c9:6e:84:d2:33:
a8:4c:68:42:42:5a:15:eb:a3:ad:1a:f5:d1:6c:5a:2d:2a:92:
e7:3d:30:3d:06:d5:bd:3b:98:73:c1:38:7d:53:93:62:c7:d4:
1a:6c:7a:4f:0a:ea:f0:f9:61:7f:89:48:d6:90:f7:0f:9f:e1:
23:26:d2:19:02:09:41:1b:74:66:97:5b:d8:eb:53:cc:ca:bb:
5c:86:a4:e2:12:97:45:b4:50:09:64:79:65:6e:36:be:71:d6:
94:9b:90:b1:26:f2:0b:b7:1f:78:6c:c9:08:0e:18:7b:38:80:
b5:ee:a4:1c:2e:31:ad:ab:2e:63:d0:4d:13:d9:28:02:b1:46:
2a:7b:3e:22:56:86:ea:f8:6a:53:3d:2e:08:11:7d:a1:96:67:
ea:37:16:0a:7b:57:42:c3:5e:2d:3a:9e:0c:65:e3:58:c9:e2:
aa:43:b3:a9:da:91:6a:79:d2:7c:da:82:fb:f8:ca:33:65:af:
01:38:09:24:dc:99:03:1e:68:95:27:6c:86:b9:a7:bd:7c:03:
4b:17:94:c2:2e:d5:fa:44:b5:d2:57:2e:7b:f3:45:00:68:d9:
9d:ca:b0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net