Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/vAn1hXUKdqSNmKMN5EpP_udaSvg.roa
File: vAn1hXUKdqSNmKMN5EpP_udaSvg.roa (raw, json)
Hash identifier: KSkyWrBwmDHasLhukMvu07oX0o0MiqrtLLWwQJGc7Qw=
Subject key identifier: BC:09:F5:85:75:0A:76:A4:8D:98:A3:0D:E4:4A:4F:FE:E7:5A:4A:F8
Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Certificate serial: 0194F511F6A9806E690009CD8B178F6FED96
Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/vAn1hXUKdqSNmKMN5EpP_udaSvg.roa
Signing time: Tue 11 Feb 2025 12:53:02 +0000
ROA not before: Tue 11 Feb 2025 12:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215657
IP address blocks: 195.184.230.0/23 maxlen: 24
195.184.230.0/24 maxlen: 24
195.184.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:11:f6:a9:80:6e:69:00:09:cd:8b:17:8f:6f:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Validity
Not Before: Feb 11 12:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc09f585750a76a48d98a30de44a4ffee75a4af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:27:3c:d9:42:eb:4e:01:e4:44:01:8a:64:
24:66:7b:55:aa:c8:3a:bd:68:71:1d:40:cc:01:8f:
bd:20:55:03:4c:7e:95:74:0f:9b:77:1c:16:da:5b:
31:e1:4f:7b:43:f9:93:d3:2c:13:c2:56:fd:8f:de:
8a:d8:a9:70:05:95:e3:91:8f:db:a6:dc:ea:14:80:
c7:01:e1:20:cd:27:25:eb:27:2a:96:f4:3f:27:02:
eb:6f:33:2d:4a:21:4d:37:a6:16:82:28:ec:90:a2:
6c:89:c6:26:74:fb:9d:ad:73:b9:61:95:82:de:1a:
82:a6:e0:1c:0d:0d:a9:84:eb:93:12:10:c7:ec:39:
ff:14:22:32:38:91:20:fe:27:6a:2f:da:78:7d:21:
3e:ce:d8:47:02:22:62:c4:9e:ca:93:32:c6:a3:05:
88:82:20:e2:b1:6b:57:49:52:16:14:51:7a:f7:e3:
14:71:b4:ec:63:c3:a4:94:75:0d:e8:fc:37:e1:47:
68:a8:83:5b:33:bd:1a:30:59:12:0f:24:3e:1c:c3:
06:40:1c:4e:e1:37:b0:ea:ce:2d:1b:cb:16:b3:c6:
31:63:80:e6:db:37:f8:8e:dc:b4:b1:bd:e1:af:b3:
19:6a:fc:76:aa:b9:cc:e2:c8:f0:04:c6:d9:41:34:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:09:F5:85:75:0A:76:A4:8D:98:A3:0D:E4:4A:4F:FE:E7:5A:4A:F8
X509v3 Authority Key Identifier:
keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/vAn1hXUKdqSNmKMN5EpP_udaSvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.230.0/23
Signature Algorithm: sha256WithRSAEncryption
78:d9:b1:97:b6:f5:aa:9c:62:72:b1:88:e3:9c:63:0a:f1:79:
14:5a:ea:38:73:29:fd:e1:ad:32:11:a0:14:30:fb:31:b9:94:
45:7c:78:c3:e3:eb:0b:ce:ec:e0:39:b4:6c:50:35:40:d0:85:
56:7d:40:6b:cf:93:99:f7:78:68:d2:44:2f:d4:ff:81:ce:be:
04:d6:5f:3d:52:fa:30:98:fb:6f:7b:70:03:e2:6a:53:bb:a2:
be:1b:8c:2a:53:bb:21:3a:ee:2e:a1:20:6e:42:95:c1:6a:48:
ca:be:1c:d6:2c:7e:15:87:48:df:9e:58:eb:57:ce:9b:c5:82:
14:25:e1:84:a5:81:a3:ce:07:c7:92:5f:2a:9e:0f:97:52:ae:
54:54:d2:92:6a:c9:bf:e1:47:67:5f:03:17:68:95:b6:83:c7:
75:b4:b0:ec:5d:85:61:e4:07:e8:d0:e5:a0:80:21:6d:00:9a:
b4:d7:6d:91:13:ad:e5:83:58:d3:b1:8d:b8:a6:72:4a:49:62:
05:26:bc:34:ca:63:61:03:88:3f:9b:90:4c:30:90:df:c9:f2:
74:3b:94:11:a0:f4:cb:15:39:d8:7d:c5:6a:b9:96:15:4e:3c:
2c:2a:45:86:5d:71:7f:43:8c:f2:23:00:02:a8:f7:ce:dd:9e:
5e:8f:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net