Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/VxmO12w306gaXQmH0gdTcOIKrpc.roa
File: VxmO12w306gaXQmH0gdTcOIKrpc.roa (raw, json)
Hash identifier: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=
Subject key identifier: 57:19:8E:D7:6C:37:D3:A8:1A:5D:09:87:D2:07:53:70:E2:0A:AE:97
Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial: 019489202EAB61FC7A6DBFD51091F1A01408
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/VxmO12w306gaXQmH0gdTcOIKrpc.roa
Signing time: Tue 21 Jan 2025 13:49:35 +0000
ROA not before: Tue 21 Jan 2025 13:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214095
IP address blocks: 94.231.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:20:2e:ab:61:fc:7a:6d:bf:d5:10:91:f1:a0:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Validity
Not Before: Jan 21 13:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57198ed76c37d3a81a5d0987d2075370e20aae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:ea:2c:5c:76:34:3e:4d:b6:a3:6d:21:06:
1d:b0:18:2e:5d:4e:d1:85:d2:7c:7a:50:a8:6e:0b:
50:7b:68:5d:b8:67:04:ff:d2:32:15:dc:00:68:85:
f5:a9:9e:04:1b:38:5d:42:79:5a:aa:07:42:94:5c:
c9:0b:c6:70:be:59:e3:5a:28:4c:f4:12:ea:86:ae:
7d:8a:83:90:e0:80:56:1c:9a:f5:b2:22:e0:83:20:
5c:7e:dd:71:a0:89:18:4a:40:62:1e:d4:0c:62:2d:
f8:90:41:1c:4c:63:2e:75:c4:d3:a1:c1:a1:1f:e5:
5d:69:3e:c2:bb:31:56:a8:d4:24:4e:38:35:73:fc:
22:9c:23:b9:4a:5e:37:89:35:e6:bc:55:bb:a7:aa:
b3:0e:41:b4:4d:5e:69:22:0e:16:3d:e9:2c:73:9c:
c2:b8:b2:68:3b:a1:c0:ea:a5:6f:c4:21:8a:a6:b4:
81:cd:26:5a:f2:ae:64:65:48:61:32:30:13:6a:cb:
69:b6:f1:2b:86:c4:8d:e1:6b:c9:e2:9b:72:b3:fd:
49:24:f0:5b:75:f2:5d:09:51:9b:51:4f:cf:67:56:
46:0e:db:6a:fc:57:28:0a:1d:56:92:05:ca:dd:c5:
ae:38:5d:75:61:45:0d:67:00:ad:9b:14:7a:a7:8c:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:19:8E:D7:6C:37:D3:A8:1A:5D:09:87:D2:07:53:70:E2:0A:AE:97
X509v3 Authority Key Identifier:
keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/VxmO12w306gaXQmH0gdTcOIKrpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.192.0/24
Signature Algorithm: sha256WithRSAEncryption
70:36:0b:0b:25:86:28:6e:af:ca:0d:be:37:57:90:e3:1a:a1:
d6:48:ca:80:fa:69:fd:d7:b7:33:07:a4:70:0b:32:ff:23:31:
a6:4f:d0:f9:30:42:9e:4e:74:c4:08:fc:70:51:df:11:de:9e:
a4:03:09:9e:7e:28:71:30:20:51:c3:f7:19:89:77:1d:a9:d9:
c2:a4:f7:d2:57:6f:df:77:fe:70:35:28:3e:4b:67:ee:3d:02:
17:ad:ad:6a:6f:c1:83:3a:5a:33:38:f3:44:7a:34:f5:88:0d:
f8:8e:0b:a3:35:33:cd:03:fd:24:19:75:e6:31:89:de:76:6f:
2f:d8:02:3c:ac:87:2b:fc:87:92:e6:66:12:66:0d:7e:37:9e:
db:b4:f7:f5:85:f7:6c:8c:51:88:26:27:c9:f1:33:f7:b0:03:
e7:6d:ee:c5:3d:3f:f1:45:23:84:13:7d:0a:07:f2:f4:77:9b:
1a:f5:2f:44:76:f7:01:c9:e6:5f:00:f0:bc:b5:ea:36:b4:75:
d9:e3:d1:3f:e3:1e:74:75:3f:6b:4d:22:e9:2e:34:94:7b:10:
40:6b:0b:33:a9:39:f1:5e:b0:84:27:f4:38:76:9a:b0:f2:27:
8f:a4:d4:dc:01:4b:26:06:6a:96:e7:72:10:89:b8:cd:fd:b1:
29:8b:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net