Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/X-kgRphGX4ko9ensbDhyYI8xoqg.roa
File: X-kgRphGX4ko9ensbDhyYI8xoqg.roa (raw, json)
Hash identifier: BquGt868Dl7uladg4VEpUynT6YiTzcxNuzCibqawq3k=
Subject key identifier: 5F:E9:20:46:98:46:5F:89:28:F5:E9:EC:6C:38:72:60:8F:31:A2:A8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 0194F4A997B6D14FCD7D3A3685F78051B226
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/X-kgRphGX4ko9ensbDhyYI8xoqg.roa
Signing time: Tue 11 Feb 2025 10:59:02 +0000
ROA not before: Tue 11 Feb 2025 10:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 194.187.208.0/24 maxlen: 24
194.187.210.0/24 maxlen: 24
194.187.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:a9:97:b6:d1:4f:cd:7d:3a:36:85:f7:80:51:b2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Feb 11 10:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fe9204698465f8928f5e9ec6c3872608f31a2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:83:09:5d:74:1b:4a:78:ab:e1:79:df:49:
01:fc:e2:73:85:6b:67:d2:c4:b1:32:27:c7:92:ef:
e8:32:c8:63:33:84:74:d5:8d:78:bc:b5:2d:b5:5a:
a5:70:b1:88:6a:ad:a0:67:b4:7f:58:9b:e7:af:4b:
1a:76:83:fb:de:77:dd:89:28:95:ba:8e:15:71:19:
7b:55:9b:71:7d:56:3e:35:50:e6:e7:2d:df:a2:e1:
e3:6d:97:17:12:f3:99:95:6c:74:05:36:85:eb:b1:
89:af:38:bc:ff:0f:41:b9:3f:c6:cb:5e:4d:1f:54:
1e:8d:f2:1d:20:8c:76:10:d9:62:88:e9:0c:6c:a7:
e5:5e:61:08:19:23:bc:16:60:14:48:e7:e3:0b:e4:
98:27:1f:ce:75:13:e7:e1:2f:7d:53:04:99:29:b6:
d0:f2:23:15:01:b2:9f:c6:44:73:cc:8b:9e:db:20:
6e:15:fe:fc:6b:1f:26:7b:51:29:92:0a:74:12:84:
29:7c:5c:18:53:92:67:87:73:9a:92:2e:0e:90:5b:
73:fc:03:07:05:ce:ed:b2:67:fe:22:74:61:a7:7b:
a0:2a:d1:f4:07:0c:79:49:f4:61:a6:34:26:b2:c2:
8c:27:4d:f9:61:34:22:d4:53:b6:33:c5:7e:25:57:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E9:20:46:98:46:5F:89:28:F5:E9:EC:6C:38:72:60:8F:31:A2:A8
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/X-kgRphGX4ko9ensbDhyYI8xoqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.208.0/24
194.187.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:bf:ef:e1:dd:2a:f1:89:c0:7e:dd:88:2f:01:a4:0f:42:da:
88:90:4f:7b:f0:5f:7d:0e:77:a7:b9:66:cb:4c:1e:0f:e6:21:
77:74:fa:79:fa:13:67:46:29:8a:75:c3:45:38:52:be:5e:3e:
1f:49:ba:52:7c:a9:9d:05:36:a5:ba:27:59:bd:03:0f:71:98:
f9:b0:af:af:d7:1d:50:ef:c5:2e:97:cb:1d:33:b7:da:a8:54:
8f:5b:45:04:2a:b5:01:88:3c:17:0b:47:53:4a:72:5d:9a:d3:
75:40:d2:7c:41:e7:be:a3:b4:1d:ff:71:5d:48:1e:84:30:25:
45:37:55:0b:0e:3c:2b:93:2d:1d:8b:44:36:b9:1a:45:10:ca:
8c:17:18:46:cb:ad:ef:ba:09:b4:a9:01:a5:a1:47:b6:89:d1:
6d:65:4e:b1:61:33:2f:20:2c:8e:d9:27:b7:d9:99:97:74:c2:
49:09:3e:33:12:6b:5e:4e:1a:59:9f:b7:dd:3a:f2:0c:ca:88:
83:ae:7f:17:d2:a0:6e:77:03:8a:6c:7c:e2:b1:01:39:72:09:
fc:3b:be:3d:2f:be:d8:12:1d:f1:b4:4a:7d:4a:18:09:95:0f:
f1:16:53:2b:80:45:0c:71:f6:32:c4:fa:9f:1a:d5:98:1d:07:
05:16:64:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:31 2025 by rpki-client on console.sobornost.net