Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa
File: IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa (raw, json)
Hash identifier: NFuQufrafEIV/iOKny+LtVRYLA0EJDhZvV8121UO+Jg=
Subject key identifier: 20:6E:20:13:76:88:16:AF:66:9C:19:E6:3A:62:56:CC:74:86:30:8F
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 01941FFA80B5C0FEF035AB192F1BAB03C356
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198485
IP address blocks: 195.22.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:80:b5:c0:fe:f0:35:ab:19:2f:1b:ab:03:c3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=206e2013768816af669c19e63a6256cc7486308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:09:0e:16:f4:a9:f8:e0:e3:d0:10:1a:05:
3c:c3:d9:0e:27:2f:2b:b9:68:d4:98:0a:f2:34:22:
a3:5e:93:55:d9:4d:18:b5:c6:73:46:77:16:78:36:
ae:49:5a:f4:81:9c:ed:56:3c:9d:9f:d1:7a:59:5a:
d2:4b:0d:9b:1a:54:6e:d2:e1:06:26:82:54:3f:1f:
83:e1:2c:c9:b9:f2:c0:e2:18:50:98:3f:e2:4f:d5:
12:0f:26:62:1c:8f:ee:11:63:e4:b9:56:e1:6d:e7:
8d:db:6a:cb:ec:be:e6:ec:6b:a8:28:17:89:18:a7:
ed:8b:76:3b:33:9c:ba:b2:5b:59:98:a8:19:e2:58:
d8:35:cb:71:fd:9a:65:d6:95:0e:9f:42:91:59:cf:
0b:78:60:e1:54:d6:4c:2e:a5:cb:65:7f:e1:08:52:
f7:1c:f6:de:b5:72:a7:d0:5b:71:2c:fc:4f:82:c3:
b2:68:5a:3f:e9:02:e4:24:77:a3:a9:c4:ed:15:30:
2b:29:f6:33:b6:20:54:bc:1c:76:2b:39:3d:40:0a:
e0:b7:af:7e:41:66:30:ad:06:9c:9e:69:69:58:de:
2d:27:35:c2:e1:bb:a7:80:4d:c0:4f:89:30:bb:22:
db:54:f6:08:bc:d9:15:13:fe:c2:65:9e:09:1b:84:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:20:13:76:88:16:AF:66:9C:19:E6:3A:62:56:CC:74:86:30:8F
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.122.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4c:33:8e:00:b0:cf:b0:9e:47:f9:ba:bf:48:89:b9:33:5c:
af:46:83:ed:9d:8b:af:e3:52:3d:9f:68:29:fb:39:6c:e9:19:
0c:00:72:dd:36:bf:a9:cd:e3:7f:2f:21:03:76:38:d1:17:d1:
47:72:bc:e8:a9:0a:76:75:5c:f9:91:49:09:57:e5:70:1a:2b:
5e:ae:9c:88:74:c7:0f:9d:c5:be:e9:06:ab:42:86:6c:49:37:
69:cf:b4:42:94:8c:4a:2f:8c:96:5c:6d:bd:db:af:be:0e:5e:
e3:90:93:af:2e:f3:c4:c7:08:8f:2f:1f:b3:9f:16:27:b2:1c:
4d:0e:70:06:be:32:b0:f4:34:e3:77:2c:0a:25:1c:36:ed:a9:
89:cc:e4:0c:ae:24:7e:df:9f:b6:e8:28:ce:78:2f:3e:75:d6:
01:08:ff:8e:09:1a:0e:5e:1e:02:4f:4b:61:ce:25:68:45:6c:
19:cd:91:76:77:8d:59:ec:fc:7c:b5:72:b1:c7:8e:d4:b5:0b:
c9:8d:d2:b1:33:73:64:a3:f7:6f:c8:f5:29:ec:f6:80:88:4f:
22:60:f0:10:ea:eb:57:9c:ef:20:ec:07:6c:2f:88:b5:26:41:
04:97:e6:e0:5e:0f:97:08:89:fa:be:22:4a:70:03:59:f5:67:
62:ef:af:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net