Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/IRgLAnTQtNSoAjzAdTJssFWXSw8.roa
File: IRgLAnTQtNSoAjzAdTJssFWXSw8.roa (raw, json)
Hash identifier: OLDZQBhRqUKwifuLNk5oWPjP3iOP3ZFBViXpFb8/RAs=
Subject key identifier: 21:18:0B:02:74:D0:B4:D4:A8:02:3C:C0:75:32:6C:B0:55:97:4B:0F
Certificate issuer: /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial: 01941F8C74DB6CC223675AD3C2374AAEBBD5
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/IRgLAnTQtNSoAjzAdTJssFWXSw8.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31656
IP address blocks: 195.69.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:74:db:6c:c2:23:67:5a:d3:c2:37:4a:ae:bb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21180b0274d0b4d4a8023cc075326cb055974b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:42:87:f9:64:83:34:07:21:73:ef:d0:15:
89:21:c6:05:47:22:2e:6a:ca:4a:c3:d6:94:21:21:
12:7f:d8:06:01:15:70:98:3f:71:3c:7a:dd:4b:6e:
1e:4c:19:e5:97:2e:49:f6:bd:6a:f3:cf:72:08:8d:
78:65:1e:e2:74:cd:ae:6b:69:6a:aa:49:db:1c:44:
d6:05:90:33:d6:78:48:a7:61:76:17:bb:14:3a:80:
d6:9c:61:a1:5a:76:70:03:15:a1:80:3d:12:8d:8d:
17:da:3d:a3:16:0b:f9:88:3d:4b:7b:37:4e:35:67:
51:31:cd:33:c9:12:6b:82:42:31:db:36:31:ef:1b:
89:5d:82:4d:74:e7:1b:55:ad:7b:11:5d:54:49:83:
a3:05:fd:bb:af:38:94:22:0b:e2:ea:5d:4a:1f:74:
f6:b4:48:b2:03:10:56:fa:b7:86:37:83:5d:bd:bb:
70:cc:ca:45:f2:7f:4f:fa:07:6b:3e:ca:bc:3c:30:
0d:6a:d9:4f:36:24:62:47:ac:db:9f:15:0c:e4:19:
51:e4:2f:f1:b5:86:86:62:93:ee:5f:31:87:3d:92:
ed:25:da:4c:3b:b0:1c:b1:ae:77:8f:00:f3:1c:49:
60:5b:cd:8b:ec:1b:f3:80:7d:b0:e8:2e:58:59:57:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:0B:02:74:D0:B4:D4:A8:02:3C:C0:75:32:6C:B0:55:97:4B:0F
X509v3 Authority Key Identifier:
keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/IRgLAnTQtNSoAjzAdTJssFWXSw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.158.0/24
Signature Algorithm: sha256WithRSAEncryption
91:28:1c:05:35:b2:76:13:97:ef:7a:8a:99:42:85:3c:d2:8f:
4e:6e:a6:5d:a1:87:9c:cf:36:91:55:6d:67:18:99:45:b3:c5:
22:87:1e:33:99:3b:a0:5c:e7:1f:57:c4:75:bf:d9:ab:30:cb:
f7:4a:f6:bd:c3:7b:c5:74:f4:4a:58:69:62:df:8c:0a:c6:04:
fe:72:23:b9:6d:f2:3d:ba:2d:b3:e4:48:2b:a7:d7:ca:bd:9e:
b6:f3:5a:6b:70:69:a0:e9:01:c7:79:06:fc:28:e1:65:c0:ad:
59:d1:8d:38:94:dd:a7:30:27:16:46:9a:b3:09:29:62:73:a4:
19:13:66:b2:54:75:8b:08:30:cf:48:a6:df:ae:b1:45:d9:cc:
9a:fa:76:e4:dd:2f:c8:5b:c5:7d:76:b2:01:37:df:79:58:35:
e3:22:38:b0:a8:5e:11:04:e8:da:f1:d9:05:5d:4a:04:ab:78:
33:87:cc:3f:bb:b7:5e:18:8c:3b:b3:46:7d:02:7e:81:ea:58:
f5:25:af:37:22:b4:33:e2:ca:5c:13:79:56:37:ca:37:4a:5f:
73:20:f7:1a:ff:e9:cc:11:c3:49:bb:1e:e8:b2:90:fc:77:c9:
80:c5:77:ff:28:71:3f:6a:ab:fc:43:1f:db:1b:88:c8:62:15:
d9:49:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net