Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/l-VXPhXSd9oDrwdeFBV0TfekxRI.roa
File: l-VXPhXSd9oDrwdeFBV0TfekxRI.roa (raw, json)
Hash identifier: J5Ti7dTZ3X/5jS4aqunQYVcXN1Efh318fTK/MczMR4M=
Subject key identifier: 97:E5:57:3E:15:D2:77:DA:03:AF:07:5E:14:15:74:4D:F7:A4:C5:12
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0195F77F9A0EEE2FC58EA6B57F8EBF401979
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/l-VXPhXSd9oDrwdeFBV0TfekxRI.roa
Signing time: Wed 02 Apr 2025 17:14:49 +0000
ROA not before: Wed 02 Apr 2025 17:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213795
IP address blocks: 185.164.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:7f:9a:0e:ee:2f:c5:8e:a6:b5:7f:8e:bf:40:19:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 2 17:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97e5573e15d277da03af075e1415744df7a4c512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:28:b9:45:5c:35:34:7a:c9:cc:9b:28:c0:
3d:ee:e0:cf:87:46:db:17:b3:5c:ab:39:e9:6b:4e:
01:6e:73:46:fe:ce:0a:9b:17:bf:73:48:f1:d6:ef:
da:31:93:91:56:35:dc:b8:e4:a3:4b:14:bb:13:79:
78:dc:e9:b2:d3:c2:dd:15:8a:a0:ee:53:69:7d:3b:
d7:bb:a0:e7:9d:f4:59:8b:44:26:ba:30:4d:36:98:
28:ce:41:93:28:b2:b8:60:e6:21:a2:c0:8a:59:ea:
1b:11:b1:c7:80:09:36:93:bd:60:ef:e4:dc:9e:ea:
07:89:02:f7:52:86:59:3b:fd:ad:d4:34:e3:23:7a:
4f:3e:7e:d4:7d:4c:16:1d:a7:5b:0d:83:4b:a2:ee:
a8:eb:4c:9d:45:17:9e:06:03:9a:f3:cf:e6:99:30:
f9:55:b2:30:10:f6:6d:11:7f:69:ba:dd:a5:6d:29:
ba:56:fb:f7:18:97:e5:ba:7a:10:52:30:50:82:fc:
fe:f6:11:a2:a9:b8:b5:af:a8:8e:4c:72:71:14:27:
95:c2:23:c2:fd:4d:30:ea:4e:3e:53:29:d0:ef:cf:
7e:5e:18:aa:12:1a:58:eb:fd:75:a9:a0:6e:5d:2c:
e0:b5:86:a8:82:27:00:b1:bd:6e:c9:48:b4:f8:d2:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:57:3E:15:D2:77:DA:03:AF:07:5E:14:15:74:4D:F7:A4:C5:12
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/l-VXPhXSd9oDrwdeFBV0TfekxRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
Signature Algorithm: sha256WithRSAEncryption
80:cb:6c:70:f1:18:ca:43:4b:82:e0:9f:7f:10:c5:ab:e7:db:
1f:22:a6:4b:f1:1d:53:ac:d4:11:71:53:a5:41:bc:04:4a:23:
f8:2b:bd:35:97:df:a1:e5:7a:f0:61:9f:b9:a2:52:a5:46:93:
b9:eb:85:f3:5a:5a:61:09:d5:ec:f9:ff:41:05:bc:3f:cd:42:
99:3a:f4:be:a9:2f:a9:02:c3:ad:e7:0f:94:99:3f:2b:69:32:
89:8e:38:2a:b2:0d:4c:85:fe:9b:60:63:d6:b2:03:3f:1d:8a:
96:e1:ae:31:85:5f:ff:8a:3b:e6:0f:c3:0d:b4:5d:64:93:11:
18:3e:81:79:b4:1e:2f:59:77:76:df:5e:0d:d5:73:07:94:2b:
44:c3:19:d7:a7:de:a2:41:cf:12:9a:e3:3a:2a:06:5a:02:a6:
06:df:f5:2c:6d:66:ec:d5:56:5f:98:66:f1:3d:90:86:34:ea:
d3:fd:78:4c:4d:60:3d:d8:99:a2:3f:ab:6d:df:9f:b9:04:4f:
4c:87:fe:6e:52:0f:19:2f:93:0a:f3:79:6c:d1:6c:99:c7:7c:
6d:e7:1a:6d:62:f4:f1:50:c4:d0:3a:f2:cd:de:c6:f2:d9:5e:
ca:97:45:00:b8:c6:dd:0a:78:08:46:b2:94:23:44:6c:68:d3:
41:4c:fb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net