Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/vNNjSoCVrZSrdxYzePjoq6gxkng.roa
File: vNNjSoCVrZSrdxYzePjoq6gxkng.roa (raw, json)
Hash identifier: tERdg9hn/xkrqVt1JcH/usznbLFRttftraLG/JPUhH4=
Subject key identifier: BC:D3:63:4A:80:95:AD:94:AB:77:16:33:78:F8:E8:AB:A8:31:92:78
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01952CB2FDF982D87FA5355CC9892711CA8F
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/vNNjSoCVrZSrdxYzePjoq6gxkng.roa
Signing time: Sat 22 Feb 2025 08:08:02 +0000
ROA not before: Sat 22 Feb 2025 08:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12510
IP address blocks: 194.39.131.0/24 maxlen: 24
194.39.133.0/24 maxlen: 24
194.45.236.0/24 maxlen: 24
194.55.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2c:b2:fd:f9:82:d8:7f:a5:35:5c:c9:89:27:11:ca:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Feb 22 08:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcd3634a8095ad94ab77163378f8e8aba8319278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:88:f8:cc:df:87:5e:d1:cc:a0:59:f1:56:
55:63:4e:d6:a9:59:17:ea:85:29:4d:d8:2d:cd:ee:
fd:42:67:94:b1:df:22:20:2a:1c:d3:f5:73:a5:0c:
2a:af:34:a8:29:db:1c:23:77:6d:23:a5:fb:35:e3:
38:ab:b9:11:da:a4:f1:b6:4f:a7:27:e4:e9:fa:48:
61:f6:c9:75:70:32:82:20:15:a7:36:d3:01:d9:55:
e4:4d:5c:9c:20:dd:cb:9b:4c:69:3d:e0:fa:4e:72:
f6:c6:c0:e1:ed:e4:9e:80:d8:62:78:43:5f:30:64:
8f:7c:2e:fc:af:9c:5b:c7:89:57:25:43:3f:7b:fe:
a8:54:ed:aa:9d:29:0a:54:ed:14:94:37:29:79:2e:
84:4f:82:98:fe:47:f3:d8:c8:88:fe:3a:e5:6c:a1:
a5:99:09:a4:38:4b:ba:be:de:3b:0f:7f:72:fe:c4:
bd:93:b9:02:2d:e8:5e:98:a2:da:0d:01:b2:7a:31:
82:10:dd:e9:32:1f:7e:45:5c:22:70:76:ee:73:54:
73:97:e8:b8:e7:bf:8a:fd:8c:30:ba:20:f2:6e:21:
22:14:ba:09:99:01:33:77:6e:8b:fa:b4:f6:7e:6c:
6e:69:06:ef:23:95:1f:5a:cc:8e:ed:d1:9b:ca:3f:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:63:4A:80:95:AD:94:AB:77:16:33:78:F8:E8:AB:A8:31:92:78
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/vNNjSoCVrZSrdxYzePjoq6gxkng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.131.0/24
194.39.133.0/24
194.45.236.0/24
194.55.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:75:27:83:4d:a4:e3:3f:98:41:f2:d9:50:12:45:d9:ef:20:
d0:41:09:fb:92:80:26:21:62:97:b4:79:3d:4b:81:d8:6f:c3:
b6:b0:3a:83:ce:38:af:36:ac:54:66:65:dc:f7:70:57:c2:fc:
62:fd:57:20:2c:1a:5d:3e:80:4d:fa:b6:b8:23:65:29:20:20:
ed:d0:8a:cf:2a:99:82:c7:d3:19:bf:a8:b3:f4:23:28:c8:36:
77:a7:e9:28:63:95:22:db:e4:98:08:59:b8:6d:45:1a:d4:26:
d3:23:2a:e6:ff:60:47:c5:86:b8:e1:52:8b:2b:e0:fb:48:dd:
95:2f:f6:0e:6f:a1:27:4d:51:9a:99:35:85:29:9d:98:64:ff:
71:4b:c5:3a:bc:a7:03:86:83:d5:9f:18:5b:58:d1:71:30:f0:
22:ef:15:87:e2:b6:30:5e:ba:f0:8b:30:f1:a7:a5:f8:1e:98:
6d:e1:93:cb:66:ee:06:1f:52:f2:ff:d1:0a:bd:c6:a6:bf:c6:
a2:bd:a7:6a:29:22:8e:09:6f:2c:c1:9a:ad:de:52:b1:06:e4:
ae:de:da:eb:7b:62:5e:1f:c1:fa:bc:19:6c:17:a7:a0:da:87:
ff:a7:9d:04:b6:01:30:71:65:74:73:13:82:57:2f:aa:59:79:
14:9a:a4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net