Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/dSMxrGujVz_UnPvDy2DrbcFQ2Iw.roa
File: dSMxrGujVz_UnPvDy2DrbcFQ2Iw.roa (raw, json)
Hash identifier: Ji0fBhD2gqGu5FmHg7adB34zmDu43UCMBxzM8MIIlYg=
Subject key identifier: 75:23:31:AC:6B:A3:57:3F:D4:9C:FB:C3:CB:60:EB:6D:C1:50:D8:8C
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D70114AC0145BE3CD6801FA18841FF
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/dSMxrGujVz_UnPvDy2DrbcFQ2Iw.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60248
IP address blocks: 195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:01:14:ac:01:45:be:3c:d6:80:1f:a1:88:41:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=752331ac6ba3573fd49cfbc3cb60eb6dc150d88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:a7:92:b2:2a:6b:f8:cf:b5:1b:8f:a3:0c:
10:a5:bd:4b:de:6d:25:f9:48:fa:a8:1f:14:f3:d7:
a7:13:d4:b3:b9:fa:e7:0d:b3:62:7b:3f:98:14:4c:
85:97:1f:f3:5a:f0:7e:22:ae:97:a2:1c:b4:f2:c7:
84:6f:a2:61:8b:34:65:41:a5:ca:5b:df:6a:f1:35:
28:7b:6d:55:54:b3:23:1a:8b:18:61:1a:ab:29:9e:
04:2d:bf:ce:dc:f6:c5:e3:cb:89:f4:65:2e:d7:79:
b3:03:fe:f5:6e:3e:66:bd:7b:5e:ba:e5:f0:81:ec:
d0:59:3e:28:e1:ab:27:43:13:66:ec:6c:53:70:6b:
d0:65:12:3e:bf:4d:84:fa:54:a5:1d:89:38:19:3a:
7e:ac:1e:29:8a:f2:aa:53:1e:db:6b:6e:95:d0:ff:
1c:14:59:a8:3f:e3:cc:1c:6f:69:cf:87:c2:f7:4f:
7f:14:c3:c7:f7:7e:ee:a3:0b:55:a7:17:bc:8c:e0:
35:e2:50:6a:97:58:35:23:c8:0d:2b:a8:4e:30:6f:
41:68:e3:90:38:c8:28:26:19:44:80:c3:d7:c5:7a:
33:b9:44:08:82:be:ba:3f:79:6d:13:8c:98:51:76:
34:12:90:3f:1e:64:a0:b3:98:4c:a1:d3:34:21:62:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:23:31:AC:6B:A3:57:3F:D4:9C:FB:C3:CB:60:EB:6D:C1:50:D8:8C
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/dSMxrGujVz_UnPvDy2DrbcFQ2Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.38.0/23
Signature Algorithm: sha256WithRSAEncryption
90:a0:44:85:e4:63:62:b6:2c:ca:13:67:9e:60:bb:0e:6e:f4:
f3:aa:37:bf:cc:9b:cb:da:14:70:16:5b:d0:96:b3:f6:c9:78:
9f:49:d9:f2:fa:d3:75:e8:08:ad:56:72:c5:9f:a0:72:85:9e:
0c:23:c6:c8:1b:4d:66:43:61:a1:66:a8:aa:28:76:93:9a:4c:
d4:2c:81:3c:f3:dd:99:0d:5b:fe:c6:1a:03:a7:43:a3:a6:60:
3a:b8:03:20:1c:0b:a0:0f:37:9b:6d:65:da:76:59:03:83:8f:
37:e5:75:55:ef:5d:4d:86:28:18:f8:d3:25:86:1e:eb:b5:ca:
fe:55:72:4d:cf:79:10:29:2a:fe:97:60:69:5b:e6:38:11:3c:
2f:49:6c:2b:95:ca:69:e3:1a:c8:3d:01:bc:43:8e:41:cd:52:
00:6b:5d:44:0c:06:eb:bd:9b:46:af:8a:eb:79:5f:a5:97:63:
7d:3e:93:d7:6b:68:89:3d:c5:49:d6:f4:a1:a2:97:d3:97:87:
43:f7:7e:b1:27:88:fd:db:d8:40:9a:0c:44:b6:5d:e6:cf:15:
60:50:87:7a:81:bd:01:2e:cf:e5:5a:51:e8:4b:80:89:7f:fb:
74:7a:21:81:fe:9e:d9:fa:c6:16:3b:5d:e9:5c:b2:61:24:34:
59:c0:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net