Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/m7Kif1Y2I5KjNxnWdm3X6rV3Dts.roa
File: m7Kif1Y2I5KjNxnWdm3X6rV3Dts.roa (raw, json)
Hash identifier: OEV/T4lZ4krcBc0PrDajnvNFNvtYQZdDrM13lbxPNCU=
Subject key identifier: 9B:B2:A2:7F:56:36:23:92:A3:37:19:D6:76:6D:D7:EA:B5:77:0E:DB
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0195EAC7124520AEE7813281D541BD0D6C83
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/m7Kif1Y2I5KjNxnWdm3X6rV3Dts.roa
Signing time: Mon 31 Mar 2025 05:57:49 +0000
ROA not before: Mon 31 Mar 2025 05:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 188.191.96.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ea:c7:12:45:20:ae:e7:81:32:81:d5:41:bd:0d:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Mar 31 05:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb2a27f56362392a33719d6766dd7eab5770edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:ee:3d:00:40:bb:5b:bc:75:52:27:0c:55:
33:f8:e1:d7:27:7a:18:d7:51:09:8b:ac:21:69:c4:
06:df:79:4a:cd:1c:6d:50:31:bd:2b:f9:53:d5:d4:
d8:d5:36:21:63:25:09:4b:0b:6e:93:93:01:8c:98:
ca:18:0c:9d:2e:3d:ce:68:88:87:18:79:2f:23:98:
15:53:df:ff:3a:59:f3:ad:77:f5:60:22:01:3e:cb:
18:fc:2c:38:16:a5:28:3d:f3:c4:ce:6c:73:48:43:
a6:07:84:1e:9a:98:06:21:c2:a9:ff:4a:91:3d:d5:
78:98:c9:87:2f:d6:a3:31:86:08:4b:0e:c7:37:d2:
d5:40:1c:41:64:bb:ee:c8:e4:12:bd:97:c0:65:89:
ac:3e:c4:f5:ff:9b:29:c9:1c:9c:95:2f:90:f6:1a:
c5:53:74:77:04:6a:4e:5d:8c:8a:a7:2c:17:4a:e4:
e9:ae:75:ad:4c:55:b8:72:4d:16:28:b3:cf:01:5b:
6d:d0:02:0b:6f:8d:0e:f1:5a:60:5f:71:2d:c5:70:
78:22:76:c8:1f:87:9e:9b:eb:af:63:8f:1e:ba:15:
ba:6b:15:7c:28:a7:24:24:a4:91:17:8c:7a:f3:7a:
0d:da:25:70:ee:2e:01:d7:29:72:9b:36:f8:b7:d4:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B2:A2:7F:56:36:23:92:A3:37:19:D6:76:6D:D7:EA:B5:77:0E:DB
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/m7Kif1Y2I5KjNxnWdm3X6rV3Dts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.96.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7a:73:ef:f4:15:23:32:76:a6:e3:6f:8d:17:5c:9d:9a:6a:
62:fc:6b:3f:fd:a4:ab:40:18:40:f6:f0:63:93:61:d7:23:ba:
6f:01:a3:78:56:88:76:5c:1c:b7:d9:49:b3:e4:9d:a8:51:94:
f9:c1:79:c5:8b:b2:46:2e:e4:a8:66:09:5d:37:0b:31:43:37:
82:cd:24:ce:6e:9b:6e:9f:8f:40:4e:29:4e:f8:27:a6:e6:d3:
93:87:97:4b:e8:2d:53:5f:a5:56:46:b1:15:55:97:44:19:a5:
01:f1:e1:e6:75:dc:53:5b:e0:8f:c8:d9:b2:be:7e:48:5d:3e:
b9:ae:29:cc:d5:74:cc:42:ed:d2:a7:1d:7a:4b:3b:54:a0:ad:
11:81:3a:19:b4:f2:20:d6:e4:f5:a7:7b:23:4e:a6:08:82:69:
75:54:61:77:58:9d:e1:28:07:c9:00:e4:db:cd:be:e2:54:79:
23:db:8d:a9:20:bf:8f:e9:61:98:4a:e2:00:a2:f2:6c:12:ef:
8a:35:a0:98:20:b9:a4:ae:8f:95:94:1c:a3:50:17:0e:3d:82:
90:eb:5d:5b:3b:a2:6c:d7:01:22:59:35:d6:19:d8:33:ac:f6:
8f:23:9b:15:4a:6b:a2:b3:95:e1:7a:5e:db:52:cb:ec:f7:04:
ce:7e:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:26:07 2025 by rpki-client on console.sobornost.net