Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/pYcNr9sVfFTE36N21zQEaYvpSC8.roa
File: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (raw, json)
Hash identifier: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=
Subject key identifier: A5:87:0D:AF:DB:15:7C:54:C4:DF:A3:76:D7:34:04:69:8B:E9:48:2F
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019426D9EA24B8C38B775C99D8EC70A0A600
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/pYcNr9sVfFTE36N21zQEaYvpSC8.roa
Signing time: Thu 02 Jan 2025 11:50:02 +0000
ROA not before: Thu 02 Jan 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29522
IP address blocks: 194.48.216.0/24 maxlen: 24
195.182.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ea:24:b8:c3:8b:77:5c:99:d8:ec:70:a0:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5870dafdb157c54c4dfa376d73404698be9482f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:28:02:54:91:5e:2f:48:c5:ed:56:ba:a5:
ef:e6:d2:29:3b:b4:08:dc:a3:65:49:75:b9:ee:11:
86:46:a1:3b:4b:3a:a4:cd:8e:55:93:18:46:2b:a1:
5d:da:fd:b1:c8:63:9c:c2:57:29:60:d8:d3:cd:d9:
8c:92:ce:82:bd:19:35:64:db:42:17:4c:d5:76:56:
cf:fe:cf:1f:53:a7:ba:f8:3f:63:34:6c:45:52:60:
e2:ff:21:c0:1b:09:3f:87:87:6b:50:61:ef:51:03:
d6:1a:15:9e:ce:c0:1d:79:73:d1:4e:02:a1:71:85:
69:49:ec:8c:4e:99:05:3a:38:7b:55:5d:f2:f2:e9:
65:46:57:31:28:24:01:07:16:c8:95:91:21:6d:c4:
7b:d7:b8:5a:80:f7:74:c2:71:bb:da:39:cc:a6:34:
87:57:74:f6:a8:3e:1e:70:4c:68:b7:31:b1:36:08:
1b:c0:b9:dc:a5:6f:e7:50:99:97:89:c3:b9:0a:29:
5d:64:4e:f7:a9:34:3d:be:a4:40:c0:7e:f7:1d:b6:
35:bc:87:59:fd:60:9e:60:cc:c2:97:49:6e:f0:9a:
fc:12:4e:8c:74:3d:40:f4:b9:cf:86:65:59:a7:99:
24:a8:0e:a3:43:e5:bd:23:a0:f9:84:e7:15:63:c3:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:87:0D:AF:DB:15:7C:54:C4:DF:A3:76:D7:34:04:69:8B:E9:48:2F
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/pYcNr9sVfFTE36N21zQEaYvpSC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.216.0/24
195.182.14.0/24
Signature Algorithm: sha256WithRSAEncryption
61:33:23:c3:c2:99:36:e3:f0:4b:ec:44:43:4d:4c:6a:c3:fa:
03:74:46:58:8f:fd:cb:d7:71:16:28:d7:36:c5:ce:7c:bd:f8:
a6:63:f3:7e:24:c5:d6:55:f3:aa:38:ac:49:b0:8f:6b:7c:5c:
fc:8b:f5:3a:19:e7:c3:c0:2d:c9:c9:7a:72:ad:2a:c8:65:a3:
0f:9f:35:e9:39:45:9e:85:20:6f:8c:ff:bd:37:4d:40:94:94:
21:2b:c7:19:09:64:12:11:1a:8a:7d:67:9f:76:e7:ca:e4:40:
61:68:72:88:7e:eb:b4:07:49:1d:37:58:05:93:62:e2:98:ef:
49:c9:7a:f4:cc:8a:7a:7e:94:96:34:38:91:0f:e5:e0:a2:51:
ce:4d:d3:99:3d:e1:3b:37:0a:b4:86:77:ff:7c:2e:42:71:d7:
65:0f:0e:a6:0a:4a:78:09:8b:ff:5a:7b:c5:da:54:e7:ae:f6:
00:15:b6:4d:d4:24:8c:09:05:c2:a1:2a:c8:99:52:fc:90:3a:
41:a6:71:f4:8d:13:98:31:96:16:3f:97:32:d6:e9:d9:e2:6a:
41:ee:af:bb:24:21:68:4c:85:2a:66:6e:fc:8f:a3:ec:c0:64:
0d:05:9a:17:46:18:6b:17:ee:a1:7b:52:df:0f:bd:9d:1b:3c:
94:1f:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net