Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/v_98mZARWXkG0c7MrFhUfz1ZnSk.roa
File: v_98mZARWXkG0c7MrFhUfz1ZnSk.roa (raw, json)
Hash identifier: CoGKVro1tI7BKUl2OeE8GJuS6b7gkbb5BZSSNbzRr+I=
Subject key identifier: BF:FF:7C:99:90:11:59:79:06:D1:CE:CC:AC:58:54:7F:3D:59:9D:29
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 0194228DEE64F00DFC747B33807D76715B2F
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/v_98mZARWXkG0c7MrFhUfz1ZnSk.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47377
IP address blocks: 194.107.123.0/24 maxlen: 24
195.66.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ee:64:f0:0d:fc:74:7b:33:80:7d:76:71:5b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfff7c999011597906d1ceccac58547f3d599d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:36:34:cf:04:02:e4:80:b5:84:81:36:66:
5a:93:b4:2a:59:cf:de:27:57:e0:ba:5d:32:d9:df:
90:48:7d:a5:33:e9:d7:ec:86:83:ee:b4:69:af:af:
1e:27:2c:fe:a6:88:7f:68:5a:e2:7a:02:94:dc:77:
cb:58:0a:9a:77:93:b2:bd:8c:c8:63:02:1e:95:d5:
eb:72:e2:7b:a3:67:14:b6:95:47:f4:21:f9:ed:a4:
7c:46:26:a1:95:04:a0:12:94:7b:84:d2:b5:bb:93:
47:01:81:0a:5d:65:f8:35:1f:6e:34:17:b1:60:a1:
12:42:86:b1:6d:c9:b4:5f:9f:b0:0d:4f:3c:ba:2e:
6e:10:c0:68:65:3a:33:3e:92:7f:14:3c:ea:81:62:
ac:68:1f:c8:d1:40:78:b3:4d:bd:5d:43:26:27:1e:
8c:e7:64:ce:4a:56:a7:f4:1b:8b:c5:a6:1b:bc:57:
3b:2d:f6:ff:a9:0e:ab:21:e7:84:9f:4f:98:20:61:
93:f0:e8:ef:cc:f1:b3:a2:e9:da:f3:f3:57:f4:58:
1a:12:2b:18:ff:f1:91:23:2a:88:97:da:9b:2c:08:
03:a5:a4:71:ba:b9:37:a5:5c:f7:60:7a:80:5f:2b:
6a:3a:4d:82:14:e7:ea:2e:50:79:7d:9b:d0:67:05:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FF:7C:99:90:11:59:79:06:D1:CE:CC:AC:58:54:7F:3D:59:9D:29
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/v_98mZARWXkG0c7MrFhUfz1ZnSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.123.0/24
195.66.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a3:46:bc:26:9e:8e:c8:27:63:e5:f1:70:24:cf:cf:6c:d9:
54:ed:36:64:e8:24:0f:b3:6f:aa:8a:9b:9c:ea:28:d1:d5:69:
86:84:c8:9f:13:e4:5f:b1:df:02:c3:81:c1:05:10:bc:1e:31:
df:55:89:2c:24:27:48:02:c1:4d:46:a3:c8:03:fa:28:a3:16:
31:48:d4:5e:b1:d5:f9:6c:82:1b:fe:32:e4:61:68:e5:70:e3:
97:1f:64:d9:df:c0:ea:2a:99:96:23:26:c9:68:42:a4:e5:96:
0b:0c:a9:95:65:88:d2:62:2d:76:3d:ee:b3:74:b2:e6:e6:03:
88:d1:79:1a:86:19:8f:0a:87:7b:08:c3:a3:f3:0d:3f:cf:bc:
e1:ef:f8:6b:fa:81:46:cb:4c:ed:c2:9e:15:98:53:88:23:80:
ae:be:2e:3b:59:4c:50:83:6a:22:33:84:56:ec:8b:d8:39:11:
26:7c:e2:3f:ac:bb:b0:68:eb:f9:ac:88:0d:bf:f7:08:74:a6:
fc:03:87:7a:dd:85:5b:7a:3a:b4:75:62:8f:61:00:5c:47:0e:
62:2a:42:f0:fd:06:b8:5a:14:50:df:33:86:cc:d1:34:70:3c:
ef:bc:ee:db:2f:f5:19:ad:44:e9:da:e7:5b:f3:c7:6c:6b:b5:
e7:dd:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net