Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/1-V8d9umP0McsFhAezBGsGExpglU.roa
File: 1-V8d9umP0McsFhAezBGsGExpglU.roa (raw, json)
Hash identifier: CUsrGluvA/qkzyOPwb3wxAIF8Xp3/wYNAg7YgPlNKrk=
Subject key identifier: F9:5F:1D:F6:E9:8F:D0:C7:2C:16:10:1E:CC:11:AC:18:4C:69:82:55
Certificate issuer: /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial: 01961017AFA8B6505277B09410BE17007F5B
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/1-V8d9umP0McsFhAezBGsGExpglU.roa
Signing time: Mon 07 Apr 2025 11:51:49 +0000
ROA not before: Mon 07 Apr 2025 11:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 139.30.0.0/16 maxlen: 16
192.76.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:17:af:a8:b6:50:52:77:b0:94:10:be:17:00:7f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Validity
Not Before: Apr 7 11:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f95f1df6e98fd0c72c16101ecc11ac184c698255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:64:31:1f:ef:52:00:80:81:e0:f6:5e:58:
7d:a7:55:a8:a4:40:36:8b:5a:a8:85:36:eb:20:a6:
29:a1:72:df:cc:f5:dc:97:e9:d8:c7:72:8b:2d:d2:
a9:c9:0f:5d:c2:8c:1c:e7:24:ab:47:95:d6:e0:b5:
6f:cf:cb:f8:a3:d6:75:35:af:ea:8d:67:47:f2:3f:
44:6a:8a:83:d7:05:96:fb:92:63:fd:46:a5:3a:79:
08:78:a1:98:6a:79:a5:0b:ea:2b:13:4c:b7:57:9b:
c9:30:4d:50:1a:d3:6b:6f:6f:dc:31:8d:ed:24:8f:
fc:bd:d5:e9:d7:36:78:bf:5f:c1:01:a6:c8:65:9b:
c8:3e:9d:93:09:ae:e7:14:67:96:42:e3:f8:91:d8:
63:4c:de:cc:75:11:bb:3b:9b:c7:ea:cc:26:a5:29:
0b:32:ea:77:f0:21:a7:3f:56:fb:db:99:80:37:85:
3f:a0:07:9c:42:76:a6:0b:44:39:f9:aa:f8:47:67:
75:0b:81:c6:cd:27:c2:bc:b9:c8:15:80:25:e7:f9:
63:cb:b2:6f:2f:74:63:5a:f3:b5:9e:eb:04:17:03:
95:ee:2d:89:5b:a9:50:75:79:0f:35:66:20:98:a0:
5f:ed:f5:62:24:6e:96:59:78:91:94:92:11:9d:62:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:1D:F6:E9:8F:D0:C7:2C:16:10:1E:CC:11:AC:18:4C:69:82:55
X509v3 Authority Key Identifier:
keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/1-V8d9umP0McsFhAezBGsGExpglU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.30.0.0/16
192.76.158.0/24
Signature Algorithm: sha256WithRSAEncryption
63:75:2e:7a:6b:49:24:7e:25:67:ca:a1:e7:6b:99:17:f9:8f:
e1:fc:63:d7:c7:e8:ab:22:49:f9:58:b4:91:b8:30:38:5f:4f:
fd:1a:d5:c0:20:d2:ff:08:fe:f4:b4:1b:dd:89:0b:25:4e:81:
2b:ec:93:ae:0a:c8:9b:92:60:7e:13:75:98:b0:bf:29:64:68:
85:5f:05:2f:07:3c:c1:95:13:aa:23:5a:d4:a7:f4:d2:3c:44:
22:9c:e4:16:8e:43:18:8b:7d:92:f3:87:79:9c:78:fc:1a:45:
94:81:be:4c:26:b8:85:33:20:5f:c6:ec:87:f1:67:2c:20:45:
7e:3a:71:68:8f:d7:38:9a:a6:c2:24:0a:8e:db:8f:0b:c9:88:
0b:20:d0:c7:08:71:a6:9b:b4:b1:b4:50:e2:86:1f:20:40:35:
5b:b5:fa:43:c4:5b:eb:3e:00:32:2a:97:1f:13:c5:c0:45:21:
f1:9a:ad:e4:6b:fc:e0:8f:4b:31:ef:fa:15:3f:32:cb:bb:6b:
7f:e9:c1:02:ee:83:78:e2:2a:97:30:ee:96:ad:38:4e:36:4b:
5b:4a:10:40:a8:a7:b2:ea:49:df:c3:ff:02:39:c3:5a:2a:01:
22:d5:a1:a4:1b:a8:f3:40:b6:70:f9:c6:41:b1:84:56:18:2a:
bc:bc:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net