Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/PHhNJe_6jJakAoQHyCP4dR0MHwQ.roa
File: PHhNJe_6jJakAoQHyCP4dR0MHwQ.roa (raw, json)
Hash identifier: GV3v7cG0RTaRLxAjVNzjDafL9dplpUJvB+FoFPt68fI=
Subject key identifier: 3C:78:4D:25:EF:FA:8C:96:A4:02:84:07:C8:23:F8:75:1D:0C:1F:04
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0195149528AA2C257C64D3AB384532C1AA19
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/PHhNJe_6jJakAoQHyCP4dR0MHwQ.roa
Signing time: Mon 17 Feb 2025 15:44:34 +0000
ROA not before: Mon 17 Feb 2025 15:44:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199152
IP address blocks: 91.203.235.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:95:28:aa:2c:25:7c:64:d3:ab:38:45:32:c1:aa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Feb 17 15:44:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c784d25effa8c96a4028407c823f8751d0c1f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:78:ad:72:12:7b:5e:6c:bc:ef:c4:92:a1:
4c:0d:d5:8a:33:58:09:6c:dc:e1:bd:61:cb:b5:15:
ff:bb:0b:e9:4a:80:68:69:c4:8a:fc:b9:65:de:81:
7e:e4:a8:70:19:ba:9b:91:f5:cf:b0:87:0f:70:d7:
25:23:91:77:c8:11:bb:78:44:ad:ba:c2:41:4f:c4:
5b:e7:d7:8e:a3:ff:d3:0a:1e:2d:d7:fb:00:5b:3a:
c8:5e:85:57:a7:2e:31:9c:3d:1e:cf:6e:9a:4d:32:
85:9d:95:45:1e:be:03:d2:f8:4b:6e:e8:48:ba:f6:
a3:ba:c9:d3:87:8e:d8:fe:fe:8a:4a:e1:6b:fb:17:
d1:50:1f:fe:29:16:34:40:f9:f4:96:96:d5:10:bd:
ea:f7:3f:d2:73:11:f3:8a:18:bf:a6:ef:4b:6e:f6:
6b:46:0c:44:22:2e:6c:59:57:93:27:d5:a5:34:5e:
a8:5b:c1:f3:2e:41:1d:b3:6e:7a:51:ef:44:ef:78:
b4:b6:b5:a4:86:7b:da:12:70:98:78:aa:13:ff:e1:
34:9d:59:47:a8:34:7b:ea:56:ad:b4:19:a3:ed:4e:
21:c0:ff:30:03:6c:59:87:44:f8:bc:f6:93:65:65:
81:24:a1:ef:44:79:35:35:02:a4:08:9e:9a:6a:bb:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:78:4D:25:EF:FA:8C:96:A4:02:84:07:C8:23:F8:75:1D:0C:1F:04
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/PHhNJe_6jJakAoQHyCP4dR0MHwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.235.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bd:51:cf:15:3a:0d:ee:99:c4:3e:1f:4f:17:7a:96:e7:e8:
e2:4b:fb:18:1d:68:94:02:ec:27:c7:82:59:64:3e:a0:fa:6c:
8e:c1:72:90:01:b0:2e:b4:9d:c8:5a:55:4d:9a:88:96:9c:24:
ed:08:1e:e8:bb:8c:8c:f5:2c:b9:94:45:4f:8a:8f:f6:34:16:
99:14:12:1f:d4:2c:1d:54:7e:6c:b4:91:1f:c6:1c:93:00:ad:
87:29:9d:1a:4f:0d:4e:bb:19:45:44:6f:0b:36:38:42:33:3a:
f0:51:4e:20:f1:bf:df:27:29:59:ff:71:ea:68:8b:34:30:2d:
55:10:04:3f:75:d0:e2:3e:4a:8d:96:d7:1b:07:07:a0:02:d7:
cc:1a:58:22:3f:90:94:56:48:3b:09:39:1a:79:b6:89:d5:9e:
2b:6c:c8:74:3d:45:98:df:b9:31:37:33:ee:1d:40:87:81:dd:
49:02:f5:32:6c:50:a8:84:e2:f2:83:a8:58:3c:f6:50:f3:66:
a9:7d:28:4f:09:da:aa:d9:f7:da:ef:f8:5a:ae:39:f4:53:9b:
08:e0:69:98:da:05:92:27:9a:fd:02:88:65:81:e3:79:13:24:
7a:b9:22:47:f4:ac:3a:80:a7:bf:c5:d1:47:c4:9b:da:9d:96:
7f:9d:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:32:46 2025 by rpki-client on console.sobornost.net