Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/V9KGH2sZWlf-ei4K08Wqryb6FX4.roa
File: V9KGH2sZWlf-ei4K08Wqryb6FX4.roa (raw, json)
Hash identifier: PfnXDS/nVTJLveEzknIpZmuanztbUs3zZ62ysjKNdqk=
Subject key identifier: 57:D2:86:1F:6B:19:5A:57:FE:7A:2E:0A:D3:C5:AA:AF:26:FA:15:7E
Certificate issuer: /CN=01d288e54730b1093af4999380342f85d8198d0a
Certificate serial: 01942143B58606A0BE410841A650758634BF
Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/V9KGH2sZWlf-ei4K08Wqryb6FX4.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198497
IP address blocks: 188.241.122.0/24 maxlen: 24
188.241.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b5:86:06:a0:be:41:08:41:a6:50:75:86:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57d2861f6b195a57fe7a2e0ad3c5aaaf26fa157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:52:fa:c0:63:b2:98:bc:ea:e7:86:62:a3:
b9:33:6c:b0:d9:b0:46:64:01:43:86:2b:75:78:ea:
77:b6:71:2c:b5:18:33:cb:e9:99:4a:4b:4f:a1:97:
23:d6:83:df:c8:7a:e5:3f:4f:b9:a9:c8:83:2b:2e:
fc:b0:31:c1:a4:ec:2e:d2:84:76:d7:90:0b:c7:59:
8b:d7:2c:04:0f:f2:c1:70:ab:0f:ef:f3:b4:1a:81:
4b:d9:e3:09:30:20:4f:32:ff:43:e3:ce:28:d1:67:
53:ed:4b:bf:78:30:1f:b8:44:0c:8c:f3:1f:df:a4:
6a:62:4e:40:6a:4d:b0:6c:d1:fa:c0:a0:90:4b:f7:
93:5f:b5:24:21:b2:94:c6:e9:ce:7f:1d:91:31:72:
07:a1:34:31:83:eb:20:dd:ce:fe:bc:76:e6:4b:69:
22:25:7b:3b:39:c2:63:77:e4:40:d3:1b:8d:22:19:
48:da:df:29:aa:b2:56:1e:fa:5a:a9:51:ac:80:f8:
f1:43:d8:3d:bb:35:65:d5:48:35:b9:96:22:74:0b:
c8:71:bd:ff:69:3c:17:a3:9b:73:df:fd:73:5e:dd:
9c:62:8e:9a:8e:71:16:a4:03:77:fb:f7:b7:cd:74:
c5:3e:01:5c:f3:fe:02:fd:fa:7d:bf:95:12:d3:3f:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D2:86:1F:6B:19:5A:57:FE:7A:2E:0A:D3:C5:AA:AF:26:FA:15:7E
X509v3 Authority Key Identifier:
keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/V9KGH2sZWlf-ei4K08Wqryb6FX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.122.0/23
Signature Algorithm: sha256WithRSAEncryption
22:7e:c8:d8:19:1f:34:3c:08:4e:a2:1c:8f:cd:17:84:cf:34:
9a:98:56:18:5c:4a:6e:61:29:0a:0a:9f:48:d3:da:72:dc:b1:
a6:83:bf:18:6f:77:08:b5:8f:c8:62:57:be:dd:a6:2e:72:d3:
68:9f:a0:41:8f:8a:1c:b8:e0:66:62:27:5b:a4:52:47:ed:30:
10:57:b0:d9:26:3d:04:f8:1b:44:42:e0:4e:cd:4a:2d:ec:8d:
58:14:bd:7a:a7:af:68:6b:22:25:c7:a6:c0:dd:72:e0:08:ee:
a3:75:86:87:2a:5d:62:65:76:31:55:9f:1b:a8:c0:63:35:a4:
16:bc:d5:ec:55:77:66:3c:d8:0d:ca:bf:a2:a0:dc:16:54:da:
54:3d:f9:0f:9e:21:ef:16:57:b4:84:48:1f:58:cc:5a:09:a9:
61:0c:c3:cc:78:2d:81:44:90:39:39:6f:4b:c3:01:9c:2b:fb:
fe:3c:43:e0:a7:b9:03:66:cd:e2:3a:0d:12:ff:fd:d0:d6:e0:
51:f9:6f:fd:e8:7e:92:4d:4e:13:b7:2c:76:04:9f:a3:71:00:
24:83:31:c6:57:a7:1d:e3:d3:48:97:98:19:e9:87:62:58:de:
22:94:a4:05:04:bd:f4:3f:4c:fe:64:cb:7d:0a:33:ff:18:a0:
9a:b8:2e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:49 2025 by rpki-client on console.sobornost.net