Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/PiaUkjBgWAFNEjTeKFPT2Fu427o.roa
File: PiaUkjBgWAFNEjTeKFPT2Fu427o.roa (raw, json)
Hash identifier: OFwmkif/FibMMVEP1oJQBqp4iJ7geOuCgE69T1lZ0sQ=
Subject key identifier: 3E:26:94:92:30:60:58:01:4D:12:34:DE:28:53:D3:D8:5B:B8:DB:BA
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0195E293C4CB07EE52A03B9CC53B104A20F4
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/PiaUkjBgWAFNEjTeKFPT2Fu427o.roa
Signing time: Sat 29 Mar 2025 15:44:49 +0000
ROA not before: Sat 29 Mar 2025 15:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 213.182.198.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e2:93:c4:cb:07:ee:52:a0:3b:9c:c5:3b:10:4a:20:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Mar 29 15:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e269492306058014d1234de2853d3d85bb8dbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:2f:85:1c:2d:4f:c0:5c:8e:db:6a:a5:97:
dc:90:47:cf:e5:42:f8:74:d5:89:53:54:3f:53:2f:
e3:05:62:44:3c:31:3f:f7:b3:23:c1:53:2e:86:a2:
ac:57:bc:9d:7c:ac:db:a3:8f:01:60:d7:17:14:8f:
5f:95:6e:c6:c7:d5:e6:8e:a8:54:5c:02:fd:88:d0:
e6:aa:5c:e2:3f:a9:3b:45:f4:19:1c:15:4b:9b:e8:
75:b4:f7:76:d9:24:0f:f6:ab:8f:98:bd:af:24:95:
c2:1b:21:fa:6a:45:b1:7e:ae:8f:c6:f9:fb:a1:ce:
92:ab:32:d4:b3:be:92:6f:b8:0f:c8:d4:96:5b:6f:
81:9b:10:1a:a4:0d:bd:8a:56:fa:ed:85:74:14:08:
a5:4e:e6:a1:5c:ea:9b:9b:cd:0e:1c:05:27:9f:13:
74:56:22:5f:78:b1:8a:37:b1:47:85:92:d2:c7:95:
cc:5a:0b:8c:92:06:84:db:8b:d9:5e:b6:37:52:4a:
fc:68:7d:de:89:55:4f:e9:c1:e3:b5:ca:53:fc:79:
bf:17:2b:54:02:90:cd:2b:01:7a:72:1e:b3:cf:ba:
e0:42:96:d5:f3:7c:29:f8:6e:5c:c8:64:8e:ef:3f:
0e:96:9e:35:09:97:34:0c:df:15:86:4d:0d:c8:3e:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:26:94:92:30:60:58:01:4D:12:34:DE:28:53:D3:D8:5B:B8:DB:BA
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/PiaUkjBgWAFNEjTeKFPT2Fu427o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ff:8e:46:ad:de:88:05:64:3f:92:20:e3:21:98:88:82:5d:
90:32:be:e6:77:a8:47:fd:45:2a:e2:7d:ae:7d:3f:10:c0:b2:
75:4f:9e:80:36:03:70:96:a9:cd:16:f7:5d:bb:6a:aa:3e:df:
ac:f0:c1:a0:98:4a:ed:1a:13:0d:ba:93:ea:19:c0:27:a8:0b:
a9:db:6d:b9:73:52:c4:e6:62:47:ef:ea:7b:04:10:51:9d:37:
6a:e7:7b:55:a9:b9:41:2e:aa:c3:14:53:e9:64:a7:45:fa:36:
72:e5:8d:b9:3e:b4:03:d7:df:b0:6e:22:05:53:25:77:1c:62:
36:40:9c:87:89:56:a1:a8:18:90:26:86:79:7e:4e:c2:32:69:
9d:59:56:bf:f7:ca:cd:a1:18:54:0b:62:0e:27:3c:58:90:b3:
db:6d:2f:f8:61:cb:b6:dd:63:db:a2:6b:6c:5b:26:6f:86:a2:
a9:e3:57:b3:42:a1:cb:f4:85:79:9e:7d:cd:a8:66:fe:38:03:
f2:2f:6e:2d:50:1b:96:bc:99:8b:55:e2:14:cd:4b:7f:c4:ef:
b3:c3:bd:ff:65:7c:ee:97:b8:44:85:e0:fd:90:d5:9d:a4:2a:
c8:1d:50:d6:8d:2d:4f:98:77:a1:8f:67:4f:ab:77:5c:1e:e2:
ea:72:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:28:29 2025 by rpki-client on console.sobornost.net