Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/eVw30aYw8PRhfFZw4dMd0Whk59A.roa
File: eVw30aYw8PRhfFZw4dMd0Whk59A.roa (raw, json)
Hash identifier: JkDjfjPCyMxcq4MYYOfAPVOc6bE+PI6e43zkk8H6tQ0=
Subject key identifier: 79:5C:37:D1:A6:30:F0:F4:61:7C:56:70:E1:D3:1D:D1:68:64:E7:D0
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 0195B3502906C91F05814B5D6AEF3945BCBD
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/eVw30aYw8PRhfFZw4dMd0Whk59A.roa
Signing time: Thu 20 Mar 2025 11:28:49 +0000
ROA not before: Thu 20 Mar 2025 11:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208125
IP address blocks: 45.158.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:50:29:06:c9:1f:05:81:4b:5d:6a:ef:39:45:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Mar 20 11:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=795c37d1a630f0f4617c5670e1d31dd16864e7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:dc:af:51:36:de:a6:7b:4c:b4:ed:11:a8:
d3:5c:60:31:92:fc:ec:01:81:37:1e:37:ac:d5:98:
e9:84:38:af:ff:e9:c7:3b:32:39:a3:23:de:8d:53:
27:73:04:54:a7:cf:d2:e7:1c:a9:a1:57:4b:7b:42:
d1:bc:f2:24:eb:74:d8:d4:3a:a2:33:33:76:64:87:
f5:e1:e5:12:82:01:f8:bb:a0:00:f2:35:ed:6e:19:
ab:36:c2:9b:e8:8b:d6:86:a0:08:6d:e3:8a:5b:43:
4a:0e:f9:6b:5d:ab:f1:a8:0a:e4:fc:00:66:dc:3e:
43:ee:7e:db:5a:b1:4a:75:54:30:4a:68:4d:25:5f:
bf:79:3d:c7:4e:cc:46:95:72:9e:b8:9b:95:c9:86:
1f:b0:63:fb:49:da:3d:d0:c7:67:d7:e3:3d:00:36:
e9:c0:6d:bd:18:66:44:76:61:96:bf:89:0e:f0:b6:
15:66:16:25:68:14:79:cc:3d:32:30:b8:6e:f1:b3:
ca:97:3c:4e:f8:a2:9d:03:c4:3d:d4:00:d2:29:b7:
5a:9e:e6:60:e3:b9:35:8d:aa:ef:19:1a:62:9c:f4:
47:a4:32:e9:a4:dc:5c:a9:99:0c:84:1a:9d:14:5d:
83:e5:e2:22:27:a0:9d:9d:cb:b2:1f:ad:68:b4:44:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:37:D1:A6:30:F0:F4:61:7C:56:70:E1:D3:1D:D1:68:64:E7:D0
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/eVw30aYw8PRhfFZw4dMd0Whk59A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.96.0/22
Signature Algorithm: sha256WithRSAEncryption
75:19:b1:29:d0:af:28:20:e2:b6:e5:7d:47:b4:e9:6c:02:b4:
76:35:1b:0c:15:6e:87:68:33:b6:6c:12:db:cc:d2:5a:95:eb:
23:97:70:eb:63:22:e3:d7:c1:cb:0a:b1:ed:1b:bd:e1:19:9e:
cd:80:92:b3:e5:51:d9:6a:bf:22:c0:5d:59:00:7c:f5:16:ba:
17:93:89:0a:7d:a4:7b:ee:87:2c:ea:e7:ad:a2:2e:c8:90:93:
ab:5e:ab:37:c8:eb:9e:8d:60:e2:bd:81:57:3a:06:a1:20:16:
73:64:7e:0c:d6:15:95:99:17:52:f9:19:ad:77:c3:e8:2f:28:
dd:d6:45:17:ab:19:3c:0f:43:b5:29:70:d2:7f:18:4a:87:02:
a7:cc:cf:3e:59:94:c1:ac:e8:15:4e:d2:3f:44:3b:62:ef:1e:
27:da:fe:6c:86:e2:2c:a1:d0:78:df:b9:bc:c7:15:ca:46:e8:
a5:24:60:55:7d:08:f6:1d:bd:87:15:e9:50:fa:30:f5:bd:a8:
da:14:ac:94:5e:27:8d:48:7a:ea:15:61:e6:53:8f:db:12:40:
70:3d:8e:13:dc:c4:54:d7:6a:2c:ee:9f:f7:6c:63:6f:ca:a5:
c8:bb:23:a7:91:56:85:da:fd:6a:87:ff:a8:46:47:77:e9:2d:
c5:18:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net