Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/NEV_-oCqja9NUg4iDlmgfjuQWbE.roa
File: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (raw, json)
Hash identifier: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=
Subject key identifier: 34:45:7F:FA:80:AA:8D:AF:4D:52:0E:22:0E:59:A0:7E:3B:90:59:B1
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 019427B6200EF1AE6A1B80E3FBD93969B30B
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/NEV_-oCqja9NUg4iDlmgfjuQWbE.roa
Signing time: Thu 02 Jan 2025 15:50:34 +0000
ROA not before: Thu 02 Jan 2025 15:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47698
IP address blocks: 195.47.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:20:0e:f1:ae:6a:1b:80:e3:fb:d9:39:69:b3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Jan 2 15:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34457ffa80aa8daf4d520e220e59a07e3b9059b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:45:20:ef:7c:28:d5:23:88:ea:f9:38:0b:
ce:c6:0e:ed:55:a8:81:21:4e:6c:9c:f9:43:5d:75:
19:29:60:a3:f8:c8:53:79:5d:6e:8b:60:70:05:bd:
96:32:87:6c:0e:e2:c3:73:24:ae:0d:5b:5d:61:27:
77:66:c3:21:09:e2:ec:47:f8:f6:4b:cf:52:22:f1:
f5:b1:e7:2b:64:e3:e3:cf:c8:c3:ea:d7:22:05:2d:
07:67:f2:2d:0d:64:5f:4e:44:44:11:ec:cd:fa:e0:
3d:96:e8:72:4f:b9:44:76:d1:51:05:97:c9:61:d0:
7e:71:a1:4c:40:60:e6:40:cc:7d:23:61:10:c3:d2:
84:6a:10:7e:2f:81:56:a9:ff:46:5f:9d:0a:74:22:
4c:c8:51:f1:13:48:e1:5f:9f:96:66:eb:bb:95:ee:
aa:b0:d7:99:e3:2b:56:8a:6a:50:07:67:8f:0d:c7:
30:d4:9c:0e:db:5d:d5:bb:b3:8a:ef:75:bc:f7:5f:
48:0c:73:ef:ca:30:bd:8c:e9:63:24:ba:f4:92:dd:
0a:38:74:04:5f:0f:57:2a:07:d3:21:16:07:8f:23:
55:a8:1e:c9:ec:24:48:aa:c8:a2:a1:ca:f6:94:08:
7e:81:ce:40:58:61:d2:46:ce:70:57:bd:8f:b8:91:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:7F:FA:80:AA:8D:AF:4D:52:0E:22:0E:59:A0:7E:3B:90:59:B1
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/NEV_-oCqja9NUg4iDlmgfjuQWbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d1:66:60:fe:45:e1:be:3e:25:60:b7:50:6e:aa:40:fd:ca:
42:e3:6f:41:da:3b:9b:48:9f:d9:d3:d2:0d:7a:fe:f9:c7:72:
a2:86:08:89:d5:5d:66:1d:91:7b:36:56:39:31:26:96:53:63:
4f:3f:81:a4:4c:53:79:6f:87:3e:19:b2:9d:0e:4a:d5:67:4e:
e0:be:54:85:d6:9a:46:e3:9c:a4:eb:06:6c:48:2d:31:ee:9d:
22:dd:ff:c0:69:13:54:db:66:3b:0c:58:5e:87:40:69:24:c1:
f8:b0:5b:d1:02:e3:26:35:15:6d:46:fd:be:b1:c4:24:fc:8f:
0b:43:62:30:d3:7c:dc:3a:0c:44:b3:c8:d8:3d:52:ca:52:71:
21:8f:12:9b:d6:24:d0:95:2b:5f:31:52:ff:25:4b:2d:dc:26:
78:ca:88:e1:b6:8c:d0:ae:53:1e:88:22:dc:e1:3e:82:12:ea:
f6:db:f7:03:c3:fc:db:15:21:d8:2d:00:36:83:60:7c:58:99:
59:5e:9a:9f:10:1c:23:cf:de:6f:a6:8b:70:3b:8a:eb:d8:27:
e8:8e:dd:bc:79:19:25:92:bb:ae:07:fc:49:64:64:50:22:a0:
79:ae:5d:23:a9:0e:cc:8e:36:07:bd:ab:e3:05:03:aa:9b:5b:
50:e0:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net