Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa
File: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (raw, json)
Hash identifier: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=
Subject key identifier: 49:E3:AE:0E:D1:E9:32:73:5E:76:85:96:47:76:02:C0:01:52:A3:A4
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 01941F8C7120D66D72C048160F3848384F23
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25297
IP address blocks: 195.234.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:71:20:d6:6d:72:c0:48:16:0f:38:48:38:4f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e3ae0ed1e932735e768596477602c00152a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:34:0e:8e:59:2f:ab:cd:1d:71:6f:50:eb:
3c:79:b7:c1:b2:a2:a0:7d:47:8b:0b:5b:0b:cb:12:
2f:91:ee:bd:3e:ca:d7:26:d0:28:a0:45:e3:79:51:
05:19:73:1b:ef:98:f3:0f:4a:89:80:8a:45:b7:47:
db:3a:a6:e2:3f:7f:4a:07:1e:76:97:aa:cc:a3:90:
bd:6a:ac:6e:ef:2c:60:66:b8:d8:12:85:82:ba:d9:
30:d1:9b:ae:2e:2f:31:39:12:e5:eb:06:42:b0:a1:
59:00:dc:21:c8:4d:a4:85:9d:8d:46:1b:40:ab:e8:
54:84:70:7a:00:bc:25:40:8a:56:2f:90:f6:da:dd:
1a:49:1f:b8:dc:2f:49:1b:13:c6:4c:ca:9a:47:df:
d5:a1:c4:e6:04:4e:4c:fa:14:29:20:d3:4a:0d:37:
45:60:e0:ff:d8:49:98:89:ec:91:55:0f:47:08:69:
ed:e1:e8:58:4e:2f:2a:82:72:25:af:80:37:5e:1e:
1d:66:17:2a:b4:dd:68:9c:eb:c6:0a:e5:70:90:9c:
0b:1a:88:0a:29:a9:8b:92:b3:82:e2:c9:26:89:56:
b0:81:c9:33:12:1c:67:d2:92:fb:87:45:cd:1e:c7:
9f:5a:38:6f:23:3e:ad:8d:4b:ef:f4:7b:70:d5:af:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:AE:0E:D1:E9:32:73:5E:76:85:96:47:76:02:C0:01:52:A3:A4
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d9:89:05:7d:af:7f:cf:36:86:28:25:88:9f:9f:1b:12:ef:
29:2c:2f:45:a5:4f:a9:36:29:18:c1:1e:ae:80:21:75:33:86:
57:c8:41:04:ef:e4:fc:43:d0:b1:fa:08:e0:85:e7:66:3b:56:
82:43:20:ae:28:f0:b5:67:f6:01:35:a2:9a:33:ae:f7:9f:15:
b9:ad:66:5c:9e:30:d1:bf:16:6d:de:9d:10:a9:af:05:67:7d:
1e:c5:eb:58:91:88:81:00:84:d1:f5:d0:59:63:4c:26:0d:5d:
66:16:16:10:4d:2f:6b:3d:9a:d7:38:89:d2:bb:f2:f0:ae:ac:
ed:ac:41:52:90:e1:0f:8b:a9:8f:83:15:1d:3d:31:83:2f:9b:
c8:15:5a:8f:32:d0:6c:e7:f1:1f:f3:6b:3d:c3:a0:07:04:3f:
96:5b:2d:bd:c4:a1:68:2b:3e:6f:51:98:8f:27:fe:5c:1a:81:
2e:e5:65:d5:19:d0:a0:4b:78:e4:c5:d4:07:bc:cd:24:c4:91:
3b:bc:06:96:34:cf:31:32:ec:3f:ad:a6:e2:63:66:ce:82:00:
61:67:49:cc:d4:0a:21:95:b0:26:ae:ad:1a:b1:5b:db:0e:a1:
3e:8f:ff:ab:9f:c0:6f:e9:3c:ba:14:c2:7a:31:fb:c5:95:fe:
a1:d4:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net