Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vyr7Cx3oEV1--OdUiwVfwQkVzbY.roa
File: vyr7Cx3oEV1--OdUiwVfwQkVzbY.roa (raw, json)
Hash identifier: /zk2M5457qSnMIsYb1+9/4gdULHnvY/Io8F52rBpwJ8=
Subject key identifier: BF:2A:FB:0B:1D:E8:11:5D:7E:F8:E7:54:8B:05:5F:C1:09:15:CD:B6
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019468F850A4B55704D77B1B4A332F5E45EB
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vyr7Cx3oEV1--OdUiwVfwQkVzbY.roa
Signing time: Wed 15 Jan 2025 07:58:11 +0000
ROA not before: Wed 15 Jan 2025 07:58:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 195.114.205.0/24 maxlen: 24
213.220.20.0/24 maxlen: 24
213.220.58.0/24 maxlen: 24
213.220.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:f8:50:a4:b5:57:04:d7:7b:1b:4a:33:2f:5e:45:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 15 07:58:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf2afb0b1de8115d7ef8e7548b055fc10915cdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:4f:89:45:4b:3b:ce:8b:0c:04:7b:71:2a:
6b:7d:29:72:61:02:06:f8:3e:06:68:4d:66:10:64:
d4:ac:9c:66:bf:4e:10:ba:e5:38:87:d8:a9:d8:4d:
e8:2b:7a:71:a7:83:03:2b:7b:fa:43:7a:d5:93:62:
c9:b2:cb:be:fb:f7:87:2d:1d:32:23:51:16:91:aa:
b2:47:f1:ee:d2:e2:8f:df:5b:57:5a:b1:ac:17:df:
7f:53:8a:aa:3c:94:63:44:c5:59:06:dc:34:57:d5:
d6:e3:c0:83:de:64:9a:c2:a5:51:de:11:52:c8:73:
4f:b4:38:3f:e7:97:9a:35:ba:5a:4b:83:57:c8:08:
f3:3b:0f:e3:58:97:85:09:30:22:8d:08:62:01:a6:
ea:20:0c:68:f1:cd:2a:98:c8:da:a2:9d:b9:c0:44:
a1:ff:33:72:d3:8f:b3:e2:91:a0:4a:3d:69:dd:19:
20:82:cb:06:1d:ad:c4:1d:54:98:53:c8:61:b2:7e:
a9:52:b9:08:59:e5:f6:0a:e9:35:af:6b:02:58:fe:
0a:ac:ef:67:ab:49:ce:4b:ab:50:52:c0:b7:7c:65:
73:b8:fa:25:09:15:08:a1:11:a4:c8:b0:b5:01:04:
20:b2:fb:63:b5:f7:7b:54:c3:63:5b:52:53:70:d6:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2A:FB:0B:1D:E8:11:5D:7E:F8:E7:54:8B:05:5F:C1:09:15:CD:B6
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vyr7Cx3oEV1--OdUiwVfwQkVzbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.205.0/24
213.220.20.0/24
213.220.58.0/24
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4f:fa:68:76:5f:73:46:f6:00:a8:6e:e2:5c:08:63:3b:cd:
d2:17:ea:e6:43:e4:11:7e:ff:98:cb:7d:15:57:de:15:8d:d9:
92:a7:e6:ba:f8:8b:13:e3:57:bc:ca:b2:e0:9e:6f:55:f7:72:
6f:dd:89:fb:7e:c1:ee:2d:7a:5e:8f:d9:74:06:8d:6b:8e:c2:
39:d8:3f:ae:c1:7a:fc:1b:39:6a:8b:aa:a9:56:b4:e6:9c:3f:
4c:44:54:50:54:5c:83:dc:6a:a7:b1:92:05:d2:18:ba:01:09:
07:39:fa:c1:c7:6b:98:ab:5d:5d:71:ce:71:eb:c1:ae:16:c7:
63:d9:e3:80:7c:61:11:db:d0:53:03:95:0b:7a:6c:69:5a:b8:
0d:c9:ad:d1:49:09:cd:a8:a3:63:cd:ba:72:c9:5b:88:03:5b:
2e:0a:93:97:13:0e:1f:53:1b:b9:94:91:2d:2e:c1:16:7f:d4:
a7:04:11:b4:8e:d5:e0:1a:3d:0c:99:38:11:9c:fe:d4:70:3e:
e3:58:97:30:40:cd:57:5a:d7:eb:1c:8d:63:0b:3d:87:e6:6e:
dc:8a:3a:cd:71:fc:2f:f2:f8:65:77:47:4a:56:bc:6e:5e:80:
1c:0b:f8:05:21:02:7f:16:39:0d:f4:af:dc:e0:98:61:8b:cd:
4d:97:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:02 2025 by rpki-client on console.sobornost.net