Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/k180Xykbyx7QpJ_uvSK54ckXEIg.roa
File: k180Xykbyx7QpJ_uvSK54ckXEIg.roa (raw, json)
Hash identifier: NNcXJFi8StZNy2Y1g2vdY4WMgfVJMCmCN6EvZw/ENYk=
Subject key identifier: 93:5F:34:5F:29:1B:CB:1E:D0:A4:9F:EE:BD:22:B9:E1:C9:17:10:88
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 01943AA76F6B544039B595DC683EA154C5C9
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/k180Xykbyx7QpJ_uvSK54ckXEIg.roa
Signing time: Mon 06 Jan 2025 08:07:19 +0000
ROA not before: Mon 06 Jan 2025 08:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207732
IP address blocks: 195.88.221.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:a7:6f:6b:54:40:39:b5:95:dc:68:3e:a1:54:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Jan 6 08:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=935f345f291bcb1ed0a49feebd22b9e1c9171088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:25:2f:44:fe:f7:06:82:de:c6:cb:f8:df:
9c:03:6a:c1:54:63:2e:f4:30:08:d1:12:46:19:59:
9d:2f:b1:1b:24:73:83:d1:ee:d0:ea:9b:28:51:7f:
a2:9c:77:94:16:54:a3:0e:f8:8d:29:86:02:8f:05:
3d:c8:b3:45:42:42:d8:cf:e5:73:3f:3a:2f:5e:1f:
70:6a:98:3a:6f:08:35:f8:77:cb:29:39:df:06:2f:
f8:02:32:dd:22:11:fd:d7:59:c2:e5:8b:ba:b0:d3:
92:7c:65:c4:95:f4:a5:4c:60:75:cc:d0:f9:7e:88:
cd:0c:b6:1c:1b:4c:d5:24:dd:c6:8a:2b:1d:30:a1:
66:af:f6:76:e9:d5:7e:63:26:6c:05:b3:1b:b9:49:
a5:79:1b:72:11:5c:98:05:5a:b9:47:43:9d:30:6f:
92:4c:f0:a4:6c:a1:99:90:6e:a7:81:18:d8:63:23:
28:22:c6:71:eb:99:6f:52:8d:2d:41:e3:bf:a3:80:
25:27:2d:62:25:3f:a3:e6:ac:98:ab:eb:b8:7c:6a:
67:87:a8:3a:5e:20:77:62:ca:41:7a:f6:e7:4e:fb:
da:4e:7b:66:8b:4b:2e:24:70:89:51:4f:05:65:56:
35:e6:e2:c0:91:0a:4a:f9:52:da:97:8f:41:c8:50:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:34:5F:29:1B:CB:1E:D0:A4:9F:EE:BD:22:B9:E1:C9:17:10:88
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/k180Xykbyx7QpJ_uvSK54ckXEIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.221.0/24
Signature Algorithm: sha256WithRSAEncryption
85:46:1d:92:5f:41:d7:c7:b3:7d:33:4e:08:04:2b:9b:d9:2d:
43:1f:69:7f:f5:e6:98:e1:b9:67:9c:52:39:6b:81:dc:6f:ec:
8a:61:89:66:12:fe:0d:79:e1:d9:7f:42:3b:6e:82:75:e3:a4:
14:fe:36:55:27:33:b8:63:10:61:3b:23:22:59:d5:7e:0b:46:
b9:58:cc:25:66:ab:79:2f:4b:64:a0:fd:2e:1a:2c:53:54:ff:
d0:47:a5:d3:fc:32:19:bd:15:8d:f0:8a:99:f0:d2:24:67:2a:
6c:05:9f:f8:6a:40:b8:30:93:c5:7e:f2:39:a7:75:37:fb:48:
03:5d:27:52:01:46:ba:b3:83:69:b3:36:86:2c:5a:d7:e0:70:
25:fe:15:0a:1f:c9:64:2f:24:20:c7:d6:c1:43:c3:db:87:cd:
89:99:61:99:cb:fb:99:25:60:40:5e:3c:a5:f1:d9:5b:58:2e:
8e:1e:5d:03:6b:07:cd:06:63:b2:1a:29:84:b8:18:4d:22:68:
c3:c0:90:13:84:51:27:c4:ef:db:4a:26:a9:df:ae:fa:d7:28:
9b:28:f9:8a:4e:f6:e8:d7:49:0b:07:e2:44:59:05:9d:6f:ad:
28:d3:5c:1a:bf:74:9f:37:18:7f:ed:37:0f:bf:81:ce:92:f5:
22:46:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:12 2025 by rpki-client on console.sobornost.net