Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/5O5OsM3NhBX9ufi05PLP13l29To.roa
File: 5O5OsM3NhBX9ufi05PLP13l29To.roa (raw, json)
Hash identifier: 3SSp0jqDRZlrWNGbYWPuIP2g5yvlTpjsrbIVea72fZ0=
Subject key identifier: E4:EE:4E:B0:CD:CD:84:15:FD:B9:F8:B4:E4:F2:CF:D7:79:76:F5:3A
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 019614BCF489983B6693BF642AC4749036C7
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/5O5OsM3NhBX9ufi05PLP13l29To.roa
Signing time: Tue 08 Apr 2025 09:30:49 +0000
ROA not before: Tue 08 Apr 2025 09:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133153
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:bc:f4:89:98:3b:66:93:bf:64:2a:c4:74:90:36:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Apr 8 09:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4ee4eb0cdcd8415fdb9f8b4e4f2cfd77976f53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:82:ec:b6:9e:56:61:0e:56:01:67:27:e4:
a1:a9:09:b8:9e:63:30:56:3e:13:8f:31:76:52:df:
4b:1d:c0:ec:13:4d:6d:7b:77:97:95:4e:85:6f:ef:
39:d4:3d:d0:d8:0a:4f:33:53:88:9e:82:d8:a8:c8:
f2:47:d1:fc:a7:7f:88:e4:a3:43:c0:ec:24:ee:a4:
42:9c:c2:80:5c:de:4d:e3:08:0d:76:74:0b:c7:6c:
60:54:44:61:cc:27:d0:9d:51:c5:aa:cc:77:11:63:
cc:c5:1f:96:de:be:d2:c1:73:d6:0e:fb:2c:70:4a:
24:07:69:71:6e:ec:16:99:f4:3f:12:21:a4:35:88:
78:3a:ec:2d:44:6c:c9:c0:1b:af:84:f7:d9:9e:4f:
a2:5c:45:64:46:2a:a4:68:ca:bb:2c:13:bf:4d:91:
57:72:76:e0:fe:16:cb:a3:52:84:f6:fa:29:1a:cc:
0c:3e:d5:a1:fa:3d:d6:dd:ec:10:57:3b:97:f6:42:
1e:99:5a:ce:4b:d8:c4:50:60:63:f9:8c:e8:d9:38:
a6:2d:36:79:61:13:ee:76:53:2f:47:be:93:6c:28:
23:99:04:ee:7a:d6:ed:4f:af:60:48:3d:a3:f8:43:
8e:94:0b:b8:cb:3f:03:30:89:c1:12:8b:6e:58:8a:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:4E:B0:CD:CD:84:15:FD:B9:F8:B4:E4:F2:CF:D7:79:76:F5:3A
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/5O5OsM3NhBX9ufi05PLP13l29To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4d:42:2d:7b:f5:eb:e4:78:06:c2:bb:d3:4d:65:1c:3a:dc:
5f:1c:a1:0b:79:5e:54:0a:81:9b:43:c2:31:66:0a:26:40:0d:
8d:97:90:23:08:d9:0c:ea:38:90:66:c7:cd:6d:1b:8b:2a:c8:
b5:d0:f8:54:91:c7:0f:38:b2:9d:ef:36:ef:8b:c1:29:dd:dd:
8a:5b:e6:fc:23:ea:d2:25:cb:f2:21:30:5b:d9:c1:55:89:f7:
8e:1f:ca:85:9b:de:a7:44:82:22:f8:33:4d:7c:1f:19:c0:07:
85:77:7f:da:2c:fe:44:30:6f:d6:7b:a3:f7:4c:25:6a:06:38:
06:8b:15:13:3a:4e:cb:a7:f7:d7:66:b4:9e:cd:be:ef:3f:e9:
73:c2:e8:cc:3c:96:05:e7:be:83:41:e7:93:a9:28:8e:2a:b1:
5d:1c:d0:7d:de:bc:7f:a5:fb:32:6d:b0:57:5a:60:8b:4f:bf:
d5:b4:74:1d:b9:a4:db:51:af:1a:5f:c0:cb:49:3c:a0:b1:8e:
e0:6b:76:6e:b0:23:ef:7f:c8:b7:dc:ac:66:9f:06:46:d4:15:
49:e5:1e:09:c6:9d:b3:8e:1c:0f:fb:a8:1c:6e:b2:fc:66:c6:
47:fd:6b:c0:3a:98:53:ff:f4:24:c6:d2:5d:9f:cb:99:37:50:
5d:47:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net