Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/neNovPYO-axYs7BVt_2UaW47DHE.roa
File: neNovPYO-axYs7BVt_2UaW47DHE.roa (raw, json)
Hash identifier: VFy1CggRIr9nSFzCxAMfyeQiCZ7oJT6RZEpYe7bsLMw=
Subject key identifier: 9D:E3:68:BC:F6:0E:F9:AC:58:B3:B0:55:B7:FD:94:69:6E:3B:0C:71
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019423D71298106101634AECCE75095701AC
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/neNovPYO-axYs7BVt_2UaW47DHE.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212846
IP address blocks: 94.124.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:12:98:10:61:01:63:4a:ec:ce:75:09:57:01:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9de368bcf60ef9ac58b3b055b7fd94696e3b0c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:04:e3:0d:c2:ae:b2:d3:19:1f:ee:da:58:
e5:28:13:a0:5f:1e:19:41:7a:2c:be:06:25:f5:22:
33:0b:26:cb:9b:14:c7:d6:22:0e:c2:ae:d2:5c:58:
9c:38:2b:1e:8f:c7:fc:ee:2b:2b:b7:26:b9:ab:80:
34:dc:21:a1:4a:1f:04:d7:6b:6a:db:d0:02:c9:32:
8d:d1:72:e6:8d:f2:18:0c:c5:8a:80:fc:41:98:9e:
1e:82:31:0a:a3:8d:95:13:b0:9c:52:d5:98:98:2b:
48:21:26:ef:a4:1f:ed:1d:3d:f6:71:c7:ad:14:f7:
3e:c9:cf:51:e5:33:2e:21:2d:6d:65:b9:50:47:e0:
6c:4e:ab:c4:85:d7:49:3d:fb:28:81:b2:be:b5:a2:
db:ed:22:35:38:cc:bf:34:f4:55:81:cd:51:d8:b2:
8a:87:e8:09:48:d0:e7:a3:f9:9e:1e:a0:54:fc:70:
d4:29:d1:59:d6:23:8c:c6:d6:8a:d9:3d:62:7c:00:
d8:31:f5:7d:fe:a9:9d:db:5a:df:2d:6b:ad:3e:47:
ab:7c:26:63:04:93:b7:61:e2:2e:52:4e:d8:5a:37:
09:7d:ed:12:ee:c6:d2:d3:c6:ed:87:b9:f7:48:f2:
17:20:76:6d:5f:ea:52:26:20:6a:c1:07:37:e6:83:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:68:BC:F6:0E:F9:AC:58:B3:B0:55:B7:FD:94:69:6E:3B:0C:71
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/neNovPYO-axYs7BVt_2UaW47DHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.164.0/24
Signature Algorithm: sha256WithRSAEncryption
83:93:c5:43:61:10:f5:37:f2:bc:93:1a:66:cd:39:37:87:dd:
04:b5:33:8d:eb:cc:02:9b:c5:18:4c:66:f0:6d:69:0b:93:97:
78:b4:e5:fc:10:bd:3b:35:62:18:2a:99:6c:13:45:13:51:1d:
e8:16:d7:b4:e7:d4:b3:cb:9d:c0:6d:b0:3d:8e:a6:5d:d4:a8:
94:b0:18:18:5e:87:cf:65:3e:49:22:4c:cc:05:ef:22:f7:61:
84:26:b6:82:4b:b4:f4:57:8c:68:92:81:f7:29:65:32:ea:67:
c9:77:18:55:6a:81:77:00:dd:47:72:7e:8c:85:11:66:2c:9d:
ae:0b:25:49:a1:86:4d:6a:a8:5d:c3:9e:e4:6b:f3:38:bf:ab:
b4:b2:2b:ca:05:57:74:95:9a:ea:d2:fd:97:53:e5:8b:b4:f4:
0c:a5:9f:86:93:24:51:f1:8a:cf:fc:3f:51:c9:d9:4d:ac:0e:
72:66:90:22:f3:11:1a:7c:a4:df:45:c5:70:b6:31:c1:95:5a:
66:11:55:c2:c5:35:3c:77:ac:c2:97:cc:ca:bd:2f:d8:9d:d4:
2e:ef:ff:bc:56:91:88:1d:47:c7:45:d3:c4:d4:61:5d:95:eb:
d7:b0:17:bb:7c:91:f7:42:a4:b6:5b:bd:a4:c8:ea:e4:82:64:
d4:32:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net