Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/n5ezRtY4HdRn5eOQaSjM39yuOLw.roa
File: n5ezRtY4HdRn5eOQaSjM39yuOLw.roa (raw, json)
Hash identifier: 7DnT8ONh2IhPxXugcMnND4xb2A+XWyVQLCBzgtEEbM4=
Subject key identifier: 9F:97:B3:46:D6:38:1D:D4:67:E5:E3:90:69:28:CC:DF:DC:AE:38:BC
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019584C1C6445CCA6C70D719F44599BBA1DB
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/n5ezRtY4HdRn5eOQaSjM39yuOLw.roa
Signing time: Tue 11 Mar 2025 10:30:46 +0000
ROA not before: Tue 11 Mar 2025 10:30:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199816
IP address blocks: 194.180.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:c1:c6:44:5c:ca:6c:70:d7:19:f4:45:99:bb:a1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Mar 11 10:30:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f97b346d6381dd467e5e3906928ccdfdcae38bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:73:23:6e:45:6c:87:01:d1:d6:85:81:f3:
fc:79:fe:f3:a8:7e:b2:5c:8d:1e:57:5e:82:c4:72:
41:5d:b7:96:fd:3e:b2:88:83:6f:af:3f:af:0c:7b:
c1:af:77:f4:24:6b:78:c9:06:1d:0e:4e:34:bd:51:
16:92:4e:c9:b1:4a:73:f1:49:07:8e:d9:45:f3:7e:
02:b6:76:61:d1:b3:af:9c:25:c6:c7:b8:f4:b8:2b:
2e:83:18:35:bd:42:77:a1:db:2c:bf:e2:ca:e0:65:
db:b0:15:2c:f3:4a:c4:6a:f2:9b:7e:76:c6:49:c7:
3a:cd:d4:62:86:88:0d:ec:11:33:67:24:ef:7c:5f:
e9:f8:c9:88:71:69:e9:a8:c1:cc:84:dc:c4:46:74:
af:8a:4a:6d:8c:2c:8b:e1:be:13:99:c7:98:0a:3c:
85:00:b7:47:fd:64:f8:e3:ab:39:d7:fc:44:54:a3:
71:53:ff:63:95:f1:c5:56:05:92:c3:65:82:b0:6a:
1c:f9:68:3d:c8:1a:03:c7:df:0e:e0:a9:b4:34:3d:
8e:93:d4:69:29:28:68:e7:0b:4e:c7:5a:f5:01:f0:
ac:de:92:82:2d:63:6b:a0:d4:58:ad:81:4d:aa:76:
6b:cf:3e:47:97:94:12:06:9f:48:12:80:20:39:9a:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:B3:46:D6:38:1D:D4:67:E5:E3:90:69:28:CC:DF:DC:AE:38:BC
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/n5ezRtY4HdRn5eOQaSjM39yuOLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.219.0/24
Signature Algorithm: sha256WithRSAEncryption
07:2f:c9:cc:82:7b:54:e2:53:d3:cc:a7:ef:27:37:ae:2e:96:
f1:27:13:3f:7f:5a:0b:ce:ac:6b:ab:08:ab:d2:4e:4d:4c:22:
d9:27:8e:cf:0c:7f:50:96:bb:e6:54:0c:17:c2:f8:a7:45:47:
ec:2b:75:27:85:fe:0f:20:b3:47:26:37:55:dc:92:e1:2c:b9:
a4:22:8c:02:e4:f4:a6:ab:a9:89:a6:3a:72:c8:96:71:13:9c:
f8:c3:63:78:34:1a:0a:ee:12:75:71:a1:64:c2:6f:0c:7b:09:
89:26:89:79:0d:29:05:39:7a:32:94:98:03:30:71:41:f3:21:
4e:9a:1a:55:0d:2f:49:e8:54:a4:4a:32:57:cb:39:dd:65:40:
d5:3e:96:ab:8e:9b:92:0f:b4:2f:3d:71:9b:c6:bb:05:ef:7b:
86:df:63:62:6c:ab:3c:7c:11:c4:6c:a3:68:c9:9f:68:5d:ef:
75:2a:59:4e:9f:50:de:62:8f:f2:04:90:a6:f1:d8:29:f4:3e:
92:b3:69:89:d3:0c:94:c1:a5:f2:4f:1c:78:9c:a6:ea:e9:7a:
44:7c:72:8c:e7:f8:e5:e1:f7:f4:49:4b:77:1e:0c:f1:c7:b5:
fe:26:d6:5b:79:8b:e1:ec:94:53:82:99:dc:9f:c9:6b:a4:74:
4e:93:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net