Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/SWJa5dsueLRnxSbfAdzIJPGv5bg.roa
File: SWJa5dsueLRnxSbfAdzIJPGv5bg.roa (raw, json)
Hash identifier: gZ5PAdWGvsSeRpcHkVwguzrdbgVOBUIorql6INPH73A=
Subject key identifier: 49:62:5A:E5:DB:2E:78:B4:67:C5:26:DF:01:DC:C8:24:F1:AF:E5:B8
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 019426D97D6212BD5B6C165A24AE5D3936D2
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/SWJa5dsueLRnxSbfAdzIJPGv5bg.roa
Signing time: Thu 02 Jan 2025 11:49:35 +0000
ROA not before: Thu 02 Jan 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12905
IP address blocks: 195.146.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7d:62:12:bd:5b:6c:16:5a:24:ae:5d:39:36:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49625ae5db2e78b467c526df01dcc824f1afe5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:d7:f2:63:49:7e:ac:4b:97:8e:15:c1:b6:
dd:3d:a0:8e:ce:d2:45:9e:c8:fa:91:dc:6a:9f:cb:
62:03:07:53:36:98:b0:24:35:97:fb:18:83:78:72:
40:9a:95:89:d3:50:84:44:66:2d:97:2e:86:9d:b0:
85:be:c1:bd:91:3e:55:cb:4d:7b:12:c9:f4:23:e1:
9b:2b:f7:18:83:5a:a9:bd:db:c9:43:de:a7:fd:5e:
86:04:38:e3:97:45:74:0e:18:86:e6:f7:ac:e5:b7:
f0:ae:a1:c4:ac:30:6f:c3:13:54:8c:9f:26:9f:dc:
ed:05:71:59:1d:5a:3a:5c:79:71:5a:bd:9b:c3:da:
85:1c:ac:bc:ce:38:60:5c:1b:e0:37:4b:0f:60:64:
ec:db:ef:95:68:67:60:26:ac:ac:1d:48:b0:62:22:
58:27:2c:18:1e:ab:88:05:63:e0:7b:0f:e5:8a:6a:
70:23:c8:ab:b2:7d:02:4b:af:9a:cf:c7:b5:dc:f6:
17:a0:02:a0:bc:31:b5:fe:19:81:63:fd:a2:5d:d5:
64:fa:59:cf:83:5d:70:d0:a9:a7:3b:e9:14:18:fd:
ea:fe:f9:f9:3a:bf:ac:d0:67:8a:84:fd:14:97:a2:
80:19:b4:ed:ae:ef:a1:d2:5b:fa:25:5e:2b:fa:5e:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:62:5A:E5:DB:2E:78:B4:67:C5:26:DF:01:DC:C8:24:F1:AF:E5:B8
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/SWJa5dsueLRnxSbfAdzIJPGv5bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.13.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ba:15:ec:5a:c1:eb:cd:8b:7c:02:54:b2:86:20:b9:75:79:
3d:45:6e:7f:13:9a:6f:9c:f8:77:31:43:d6:1c:f3:f0:c8:f2:
6a:69:7e:34:bd:eb:a0:56:71:83:50:2b:b0:49:ec:74:ed:a7:
a3:2a:a2:36:fe:7d:fb:b5:8b:b3:17:75:7e:b5:cc:14:c4:7c:
bd:37:16:09:4d:d8:f5:77:5b:44:bf:f1:4e:7a:00:85:6e:73:
db:40:16:d8:81:c6:b0:49:71:ae:fd:0c:0f:1f:14:e8:06:1c:
70:28:4a:5f:cd:40:21:36:7b:de:ff:bc:8b:60:69:2e:44:e4:
a0:f5:89:d1:2f:ff:bd:cf:2e:4c:fb:87:68:8d:8b:22:5f:12:
4a:7c:0e:5a:d4:37:ad:af:8a:94:dd:f0:b6:da:34:c5:32:65:
c3:59:17:3f:20:91:c0:f8:98:04:f9:00:5a:58:7b:9f:c4:ef:
17:c8:0a:a7:a0:fb:41:ea:c1:9d:9a:07:56:4f:9d:47:b2:9a:
e2:87:f6:b2:2a:31:6d:84:46:b9:e9:91:14:bc:43:67:01:55:
72:92:18:9d:a4:fb:5f:c4:d1:e6:70:e9:cd:22:f3:3c:ac:40:
96:12:90:83:d3:54:70:b7:23:f9:75:f6:75:bc:17:c4:29:b5:
4d:d4:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net