Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa
File: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (raw, json)
Hash identifier: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=
Subject key identifier: E4:45:81:CD:D7:A9:9B:C9:B5:F8:5C:39:82:09:01:56:76:1E:A3:74
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 01942444D1B8A2C73282B32E5E4D3C5DDF98
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa
Signing time: Wed 01 Jan 2025 23:47:57 +0000
ROA not before: Wed 01 Jan 2025 23:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29019
IP address blocks: 195.47.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d1:b8:a2:c7:32:82:b3:2e:5e:4d:3c:5d:df:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e44581cdd7a99bc9b5f85c3982090156761ea374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:99:77:ab:41:b4:6b:5b:b6:8b:89:29:45:
b8:22:a1:78:62:8e:10:75:ad:86:08:e4:62:b9:27:
27:e1:54:02:a4:5d:f7:91:db:19:a4:92:17:df:84:
72:42:da:e4:21:71:ca:9b:af:fc:b2:0b:f3:5b:3e:
b9:ac:ba:60:ee:3c:bf:9a:e1:d3:db:36:3e:c2:90:
37:95:fb:10:a5:14:10:74:a4:77:61:8a:01:06:a5:
be:d7:77:b0:e9:9e:ac:64:dd:d8:b8:45:7e:8a:f2:
ba:12:50:14:ac:d4:35:30:4c:40:cc:a7:b3:00:dd:
be:1d:e0:e2:22:a9:04:0e:10:a1:22:44:55:d2:84:
c9:4f:fa:36:1a:83:01:72:1f:0e:8a:cf:f5:cf:5a:
70:be:d0:1b:ab:b3:ba:3c:8c:51:d9:59:95:67:ea:
22:21:34:59:0b:f7:d4:80:67:ff:67:db:dc:80:43:
3a:22:af:9f:15:7c:56:59:5e:3d:d1:52:7c:6b:9b:
cd:00:75:93:68:a0:3e:44:31:73:db:a0:9a:e4:58:
4e:d7:77:9b:cb:1a:19:bf:a3:54:08:a6:80:df:c6:
aa:c4:e8:5c:e6:b9:84:29:f3:d4:15:67:52:1a:70:
27:d4:4f:82:6b:b4:c9:61:c4:74:56:43:d3:7d:ed:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:45:81:CD:D7:A9:9B:C9:B5:F8:5C:39:82:09:01:56:76:1E:A3:74
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.237.0/24
Signature Algorithm: sha256WithRSAEncryption
62:64:89:e3:be:4e:a4:3a:25:a3:f7:bb:d4:c0:fd:44:14:a4:
43:e7:37:63:c9:71:99:41:34:0c:28:90:c3:a7:c6:32:73:a8:
c1:8e:25:86:92:51:d8:89:53:a3:6d:59:c4:af:0f:8f:5e:63:
82:a7:d7:e3:05:fe:ee:d4:cb:a4:4f:b8:45:ff:fc:37:00:36:
56:a3:c8:9c:f5:85:21:22:71:43:9a:f0:9f:73:9c:3d:f7:90:
1c:b7:d8:07:fd:f0:db:59:d4:48:83:ce:eb:ef:79:aa:80:d1:
be:72:48:a4:59:58:fe:d7:05:76:e0:cd:4a:dd:e8:23:08:b1:
45:ef:3e:e7:cc:b9:fe:ff:da:68:46:67:da:ba:97:9c:43:2e:
0d:19:b7:83:a9:e2:ec:af:17:d2:89:63:ee:95:4b:26:75:74:
a1:3b:41:f8:e5:14:70:5f:9a:2e:ce:38:80:32:24:b9:61:e4:
a9:6e:8c:be:97:8a:62:5c:e0:5c:37:ca:cd:77:3e:c2:fc:ea:
74:8e:bc:14:cf:7e:c7:28:23:35:ee:f7:04:f7:3e:a4:88:01:
52:a1:4f:0c:94:94:2a:00:d5:32:06:9d:ad:be:0e:75:09:f2:
b9:64:e8:14:2b:0f:82:b9:55:db:4f:63:75:e3:da:52:7f:b7:
35:13:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net