Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa
File: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (raw, json)
Hash identifier: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=
Subject key identifier: 55:F7:88:82:3C:F4:03:10:C3:CD:39:10:4D:7E:68:23:A4:85:44:70
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 019427B699671C098E9F1FD55DB64C73F9B5
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa
Signing time: Thu 02 Jan 2025 15:51:05 +0000
ROA not before: Thu 02 Jan 2025 15:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215618
IP address blocks: 217.195.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:99:67:1c:09:8e:9f:1f:d5:5d:b6:4c:73:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Jan 2 15:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55f788823cf40310c3cd39104d7e6823a4854470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:eb:8a:34:4c:01:d2:81:ec:39:5b:d6:46:
66:63:57:e2:9c:e2:87:56:fa:9d:8b:88:64:bb:b9:
8e:ed:df:d6:c2:0c:e8:16:25:cf:82:cb:82:d0:ed:
6d:63:8d:0f:aa:b6:bd:1a:09:4a:23:34:53:01:5e:
72:de:30:45:09:a6:0a:e3:f4:0a:95:94:6b:b9:41:
08:14:fa:eb:61:2f:9b:48:b2:83:11:cc:b8:cc:6b:
97:b6:be:f2:f3:2e:e2:c1:bf:c4:72:d4:24:64:7a:
f0:7a:81:9a:76:24:e1:75:38:02:08:dc:17:0c:23:
27:d7:b5:bc:f9:6a:7b:5e:f1:ef:6b:fa:85:15:c8:
a4:96:25:79:92:7c:fe:76:f6:e9:b6:90:f4:22:77:
9d:57:c5:44:6f:11:b6:44:3a:5c:f1:08:13:46:69:
e8:3c:80:2d:e2:98:ba:12:6e:9b:f9:4b:a8:fa:60:
57:c8:df:56:5f:4a:25:09:bc:60:7f:ad:91:10:bf:
0f:46:26:25:5a:52:d5:9e:34:7b:da:9f:21:10:a7:
3a:ff:2b:2a:7e:0a:a8:1a:4b:b0:8c:b1:9b:5c:07:
96:25:1e:8c:2c:0a:4c:5c:f3:05:d7:57:6d:f3:db:
a1:fb:5d:1a:a9:88:8c:54:34:03:19:3b:8c:e6:68:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F7:88:82:3C:F4:03:10:C3:CD:39:10:4D:7E:68:23:A4:85:44:70
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.195.202.0/24
Signature Algorithm: sha256WithRSAEncryption
32:50:cc:15:37:3c:b5:20:6a:9e:37:83:cc:6d:a9:86:55:35:
f8:f6:5c:10:6f:21:d9:0d:19:c8:5d:63:4c:89:23:d7:52:a4:
1d:26:74:c5:bc:c5:6e:a6:a9:d6:78:77:8c:6f:ce:f8:25:86:
30:bf:c7:24:34:bb:59:b8:c2:18:79:01:cf:7c:cb:b6:57:ed:
2b:a3:65:e8:8e:5f:88:bd:69:d3:e4:73:2d:f2:ce:73:9f:30:
ac:33:83:f8:d2:3c:2d:1f:65:a2:d0:34:32:96:41:ff:07:d0:
72:9c:c2:49:17:54:20:c9:1e:40:46:b1:f1:51:a9:2f:b9:c8:
e4:fd:d6:39:22:a0:cf:96:fb:bc:99:00:3e:9b:ad:84:1b:b9:
5f:9f:57:35:cd:49:5f:75:24:72:c2:4d:04:4c:e2:f6:24:a7:
06:6d:c4:c4:d3:b5:c2:12:42:9a:32:f2:7c:50:13:7d:09:44:
78:b8:59:0f:ab:8a:9b:b5:c4:ce:d6:db:1c:36:d5:ea:ea:72:
40:7f:d4:eb:86:26:0d:85:88:5e:6f:9c:f2:58:72:65:db:0c:
59:f8:2d:37:f0:ca:2d:27:ff:71:b4:e3:2d:7a:76:79:e1:e0:
c6:55:21:2d:84:65:f7:8a:ac:b7:83:34:69:55:cc:d2:0d:b3:
46:2c:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net