Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/t-V-YRRY8cp_fI39ql4lLgfLb4k.roa
File: t-V-YRRY8cp_fI39ql4lLgfLb4k.roa (raw, json)
Hash identifier: ZSmoHBFVUUkvEp8EwCgwGR3HKFwutMlOmb9X19Ah+cA=
Subject key identifier: B7:E5:7E:61:14:58:F1:CA:7F:7C:8D:FD:AA:5E:25:2E:07:CB:6F:89
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B227E83E98D77A6F41EA6B4F16CEFE
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/t-V-YRRY8cp_fI39ql4lLgfLb4k.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8762
IP address blocks: 194.177.198.0/24 maxlen: 24
195.251.48.0/24 maxlen: 24
2001:648:2c10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:27:e8:3e:98:d7:7a:6f:41:ea:6b:4f:16:ce:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7e57e611458f1ca7f7c8dfdaa5e252e07cb6f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:ce:76:86:ae:28:6b:7a:70:1a:34:07:1d:
db:e6:06:ce:0f:ad:8b:05:46:ba:81:44:0d:8a:dd:
9f:a3:93:66:b6:41:24:98:08:38:d5:dc:e1:b1:a5:
93:69:6e:ba:e7:3b:3a:a9:65:17:ef:dc:1c:56:4e:
48:5f:8a:1a:8b:c8:97:98:74:74:cf:8d:94:33:34:
20:be:f6:66:bd:a1:f4:e5:1e:bf:79:3c:0e:44:77:
16:4c:23:9f:6e:f2:4c:d0:8b:3a:cb:e1:c7:83:cd:
0c:2c:31:67:63:e9:21:cd:ff:be:db:3c:87:f6:30:
a8:c6:5c:b7:cc:a4:4b:dc:74:c4:4e:84:00:60:95:
df:5c:10:d3:17:18:8e:da:b0:77:33:40:bc:56:cc:
60:63:99:84:fe:75:f9:dc:c9:26:bc:04:71:94:96:
79:12:f6:11:04:45:0d:b3:c5:d0:62:56:79:7c:55:
d9:8a:77:71:fb:08:9a:91:40:58:fd:26:f2:b9:d1:
94:27:57:ba:69:0c:38:38:9a:86:c7:9e:87:4d:28:
0a:80:22:b7:dc:6c:3a:53:cd:b0:9f:af:71:5c:25:
34:df:ba:05:66:9b:aa:df:52:f9:1e:ca:ed:2e:c2:
34:5e:25:2c:db:f8:2f:1a:75:a3:8f:83:2f:93:e5:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:7E:61:14:58:F1:CA:7F:7C:8D:FD:AA:5E:25:2E:07:CB:6F:89
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/t-V-YRRY8cp_fI39ql4lLgfLb4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.198.0/24
195.251.48.0/24
IPv6:
2001:648:2c10::/48
Signature Algorithm: sha256WithRSAEncryption
58:82:f0:47:d2:a2:61:14:bf:9d:04:7e:66:e2:32:f5:f7:01:
0e:1b:73:11:d7:ea:1c:93:b7:0f:41:7c:2e:e2:ae:89:6f:c2:
58:7b:a2:2b:ef:37:17:b9:f4:82:2f:da:e7:24:87:95:0a:e8:
51:89:88:6d:84:48:73:67:0d:e9:2b:d9:b9:38:7d:de:99:be:
ee:af:2c:45:2f:10:4f:6a:57:5b:35:90:7d:bc:8a:41:f0:e2:
94:8d:f8:ae:96:f0:fb:d9:6b:be:a4:c1:ce:69:78:c3:97:e9:
55:f0:7b:20:5c:a2:1f:cc:56:fb:36:43:1e:b3:27:2b:7c:3e:
6b:a9:b1:b8:fd:49:de:21:c8:77:e2:40:41:90:2d:52:19:fe:
3f:15:2e:1b:5a:17:ae:54:f3:b6:22:07:9d:6d:d2:de:89:3a:
b7:e6:c6:96:8e:24:d1:e9:2d:00:1e:1d:70:ef:c2:40:a9:09:
84:d0:26:49:59:2b:c0:bb:30:19:80:2a:52:62:39:31:ed:56:
d1:50:2c:d1:0c:bb:35:71:d8:11:64:a5:78:6f:93:75:55:b1:
a2:4a:f3:93:f9:34:c2:79:8e:7c:4c:62:d1:63:2c:5c:24:21:
57:76:9d:e5:38:26:61:86:dc:63:35:cb:8a:e5:ab:87:e9:b4:
cf:5e:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net