Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/cV3BD5-gE9KIDxyMlti5rVaXSy8.roa
File: cV3BD5-gE9KIDxyMlti5rVaXSy8.roa (raw, json)
Hash identifier: PvTekp3dawXrC4YtfV0s/U4et5tU6tfVspZ3Sv6BzkQ=
Subject key identifier: 71:5D:C1:0F:9F:A0:13:D2:88:0F:1C:8C:96:D8:B9:AD:56:97:4B:2F
Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial: 019423693AC634816377C07107B3A7EF2115
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/cV3BD5-gE9KIDxyMlti5rVaXSy8.roa
Signing time: Wed 01 Jan 2025 19:48:06 +0000
ROA not before: Wed 01 Jan 2025 19:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2269
IP address blocks: 138.195.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:3a:c6:34:81:63:77:c0:71:07:b3:a7:ef:21:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Validity
Not Before: Jan 1 19:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715dc10f9fa013d2880f1c8c96d8b9ad56974b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:90:d5:06:7c:44:01:b9:65:a8:be:3c:d6:
3d:66:7b:00:1a:c7:65:7a:2d:84:ad:c8:c5:a0:c2:
bb:dc:6c:2b:7b:de:af:19:c0:ca:b8:ab:d3:26:39:
75:7d:42:39:a9:21:65:2f:a9:45:87:6b:56:33:73:
11:d3:10:03:ef:a9:3c:e4:38:a1:b6:f9:b7:e0:08:
0f:a7:ef:77:ce:bb:ed:19:38:41:64:f4:96:51:90:
a5:36:a5:38:e3:04:d3:04:d5:ea:30:8c:b7:5d:f0:
f3:16:14:1c:82:fe:36:9e:0d:88:28:fe:dc:df:59:
d1:c4:79:c4:51:4c:63:dc:76:d0:28:dd:55:27:11:
34:a1:44:00:47:da:bd:0b:0f:85:0c:e7:8e:0d:48:
6f:4f:fd:5c:61:8b:45:d2:3d:93:5e:0f:54:05:d3:
11:54:e8:df:ad:1b:96:5c:16:3d:a6:21:4f:d1:5f:
c9:89:ff:9d:d5:0d:9d:7e:eb:3a:62:a0:7c:04:64:
c8:82:61:82:b2:ff:3b:98:e4:13:6f:d7:d3:02:04:
83:56:a3:3a:ab:31:5e:65:b0:cc:20:e5:ce:8e:cc:
d2:c6:de:67:8a:82:09:57:39:d6:ec:9a:af:68:7e:
91:40:8f:e1:48:67:24:f1:c3:1e:aa:ff:50:70:5c:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:C1:0F:9F:A0:13:D2:88:0F:1C:8C:96:D8:B9:AD:56:97:4B:2F
X509v3 Authority Key Identifier:
keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/cV3BD5-gE9KIDxyMlti5rVaXSy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:18:a9:d4:43:82:ac:3f:a4:24:06:57:84:d3:00:a4:e0:82:
49:f7:3d:1b:1a:84:73:4d:b9:f7:bb:83:75:c9:16:be:ce:97:
fd:d0:56:f6:ee:66:2a:5f:91:1b:86:81:cb:00:74:c3:65:a0:
4b:01:43:a6:44:a7:62:89:11:80:0f:7b:f2:8b:82:d8:95:1c:
40:37:f7:a4:bb:56:fb:a4:eb:08:ea:2f:0c:be:8a:7c:14:9c:
c4:74:dd:57:27:16:f5:08:6d:ff:ca:a6:2b:15:f0:a7:c2:ff:
21:a0:56:f7:a5:ea:67:77:71:0a:d3:da:c4:03:89:44:5b:a4:
2d:62:82:b8:59:4f:62:e6:d0:26:df:f7:88:7e:f7:37:09:7a:
2c:5d:6b:0e:05:61:ae:c2:86:7b:f5:d8:5a:9f:16:fb:45:cd:
8a:85:f0:3d:bb:a0:2d:4d:58:38:f3:ef:03:f1:80:47:c3:77:
44:39:aa:5b:85:98:1c:81:77:5f:7f:eb:b4:c2:92:84:5e:3e:
cc:cc:cd:8a:94:17:4f:9d:77:9f:3a:af:49:11:0b:98:3f:70:
c6:b1:86:8f:06:05:a5:4d:45:33:70:7a:58:e7:db:54:cd:1b:
99:80:ac:a0:f2:17:39:47:67:4a:18:1c:14:c1:34:7c:a4:22:
d6:1d:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:26 2025 by rpki-client on console.sobornost.net