Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/sJD4QxX177UEmI36HO3Czbd6lZo.roa
File: sJD4QxX177UEmI36HO3Czbd6lZo.roa (raw, json)
Hash identifier: eB1LP6A5y8Zxb2lEo5Jx2JKKRWjFRnxR3igeTvfMlBE=
Subject key identifier: B0:90:F8:43:15:F5:EF:B5:04:98:8D:FA:1C:ED:C2:CD:B7:7A:95:9A
Certificate issuer: /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial: 01942444B590E24BBB33042E875D628E219F
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/sJD4QxX177UEmI36HO3Czbd6lZo.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3209
IP address blocks: 194.180.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b5:90:e2:4b:bb:33:04:2e:87:5d:62:8e:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b090f84315f5efb504988dfa1cedc2cdb77a959a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:dd:a6:7b:cb:6b:3c:70:b0:4a:93:73:c9:
8e:42:b7:70:97:9e:5a:f3:c7:b9:89:df:0d:b4:aa:
03:5f:e8:1f:df:85:5d:13:96:5b:33:69:dc:a5:ad:
bb:13:8f:ab:c8:2a:7d:f0:e1:df:02:a2:f9:0a:43:
6d:73:28:da:a6:48:df:ea:64:ef:0f:21:02:b8:24:
ec:d4:3f:44:a5:29:59:2f:46:f4:0c:58:2d:d1:1d:
ed:ed:95:3a:6e:cb:c2:35:f8:2b:3a:ce:6f:58:2a:
b9:f4:45:fb:a2:5e:9a:e2:84:71:e5:f2:6e:c7:48:
b1:0b:23:09:b0:cf:0c:da:68:62:83:d4:8e:ae:bc:
98:23:b9:4e:1e:53:5d:3d:11:ec:38:73:66:dd:45:
69:c9:f0:c2:b5:7c:ac:ec:17:ba:d5:3f:22:ec:ad:
ff:be:61:f7:dc:51:4a:ce:20:54:dd:1e:24:e6:27:
f7:47:22:4a:35:4a:b6:6f:6d:63:d0:17:43:23:f6:
7d:42:af:fc:9d:26:49:d1:ab:65:51:4a:d9:db:4e:
c6:1b:7d:8e:ae:bf:98:a6:9c:4e:2e:75:f2:ab:12:
fe:2a:24:77:0c:2a:d9:33:af:22:24:a3:5a:f3:6d:
bf:5a:7c:2f:0e:b2:a8:84:33:40:db:19:79:6c:bf:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:90:F8:43:15:F5:EF:B5:04:98:8D:FA:1C:ED:C2:CD:B7:7A:95:9A
X509v3 Authority Key Identifier:
keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/sJD4QxX177UEmI36HO3Czbd6lZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.130.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:00:26:bd:26:98:ef:84:d7:36:fc:b4:ee:dd:63:2a:49:58:
31:35:79:1f:04:3c:1b:7b:a9:80:72:2a:79:f1:8e:89:64:de:
33:68:d0:fa:4b:fd:2b:e5:c1:4d:be:11:d5:2d:c0:ec:02:c4:
47:7a:e9:6e:94:60:de:12:e6:c8:7c:e8:86:f2:c9:3e:45:00:
8f:e6:b4:96:d5:47:1a:b1:06:c4:64:80:76:de:e3:b5:97:a0:
d2:b1:28:24:be:f4:3d:ab:b7:03:a7:97:03:3d:32:6d:27:8e:
06:ab:ea:0c:0f:56:17:d1:a8:4b:1a:c3:bc:36:f0:b7:1a:41:
c2:37:36:c0:63:c3:94:07:f9:65:8a:95:3d:f0:ce:1e:83:5f:
e4:64:37:9a:da:1f:c1:76:98:34:0c:2b:ba:6f:7b:d3:ad:52:
f9:cc:27:56:e8:26:55:29:18:37:fd:e0:53:58:49:2d:60:3e:
a3:4f:bc:17:ac:bb:93:0f:67:75:ed:81:1a:8c:c1:8d:3c:01:
34:77:66:4f:72:90:0e:ef:a3:ba:6f:73:0a:29:f5:5c:75:25:
bc:d7:7a:a4:25:c8:02:df:71:3a:b5:ff:6b:76:86:db:75:66:
62:a6:af:9f:ba:0b:09:76:73:71:8b:ec:8e:cf:5f:e1:df:b3:
61:30:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:10 2025 by rpki-client on console.sobornost.net