Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/mUHt0oKQoXS4NriBI7EGKLoM09o.roa
File: mUHt0oKQoXS4NriBI7EGKLoM09o.roa (raw, json)
Hash identifier: SD6es8T2Vz3P454Q+Wryhaz45Qcvfh6pBeSnz1RWRNI=
Subject key identifier: 99:41:ED:D2:82:90:A1:74:B8:36:B8:81:23:B1:06:28:BA:0C:D3:DA
Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial: 01941F8C131EC2CF05D90FCF8065F7929DB0
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/mUHt0oKQoXS4NriBI7EGKLoM09o.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204854
IP address blocks: 185.237.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:13:1e:c2:cf:05:d9:0f:cf:80:65:f7:92:9d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9941edd28290a174b836b88123b10628ba0cd3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:c1:87:5a:e2:f0:5b:cc:bd:fb:f2:7e:13:
c9:7b:25:3f:9a:b6:56:02:c6:19:bd:f9:ce:f5:ef:
a8:e4:8d:0c:ba:8d:e9:38:5b:07:70:18:fa:25:39:
36:6c:32:6b:49:71:2a:80:9f:47:cc:27:79:d1:16:
24:2a:82:5c:6d:94:4e:82:f3:0e:b7:52:13:f1:79:
63:ff:c8:61:82:98:d3:1e:d9:de:0e:fb:b8:2b:c2:
9f:bc:76:79:30:12:f6:04:7a:29:91:08:e2:61:00:
7e:5e:52:0a:05:cf:80:92:9d:3d:a9:03:89:98:68:
8d:bf:29:03:9f:29:b6:b9:f9:99:10:4d:3b:1f:9d:
9c:dc:19:5d:cd:05:58:7b:5c:88:e3:0d:4e:a6:1f:
34:a3:df:e2:67:d7:ee:7b:f5:7f:eb:30:27:77:c4:
2a:25:5b:b7:67:cd:5c:fc:2c:49:e6:02:1c:9c:9c:
15:77:21:98:07:24:0d:a4:3f:98:8c:4b:41:fc:51:
63:b7:e5:09:62:1f:c5:fb:75:3b:b7:f3:e9:7c:1a:
bd:40:c6:c6:67:11:39:81:1c:1d:88:da:9c:41:c4:
84:6a:4b:a3:c0:0c:24:a4:3e:70:f8:3e:9d:50:28:
dc:3a:75:77:e1:7f:8f:93:83:d0:6c:9b:c8:d0:a9:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:41:ED:D2:82:90:A1:74:B8:36:B8:81:23:B1:06:28:BA:0C:D3:DA
X509v3 Authority Key Identifier:
keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/mUHt0oKQoXS4NriBI7EGKLoM09o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.76.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:ec:15:e7:9b:91:f9:92:33:9b:5c:5b:96:b4:c3:3d:b4:ad:
ab:50:80:b8:dc:6e:8b:86:63:ac:6a:c8:36:dd:ee:93:60:fa:
eb:d0:bd:44:40:58:42:40:25:ed:b0:31:d3:d2:14:76:98:bd:
16:67:9f:35:7b:76:1c:5f:1e:7d:d3:90:56:47:a7:bc:f8:fb:
3a:c9:12:1a:05:d9:dd:99:9a:de:23:0d:2f:0d:ea:58:91:56:
ed:3b:31:9a:06:34:fc:b6:19:4c:83:ba:5b:e9:25:d8:48:c6:
1e:a4:a5:b8:de:5f:50:f3:70:9e:d9:bf:4b:ca:2a:96:9a:44:
03:57:e4:cc:4c:10:1a:9d:16:ce:d8:04:91:c7:5e:71:cf:13:
3d:ae:65:6e:05:3a:48:f9:d0:e8:0a:c7:42:92:9a:da:5f:11:
16:b0:78:68:71:0f:7b:fc:0a:df:eb:22:9c:22:ab:5d:28:33:
02:84:b1:d1:46:22:7b:68:95:89:98:b1:83:2e:6c:ea:dd:e4:
68:4d:0c:c1:08:a9:d8:20:47:7a:bf:df:c2:1e:e8:07:9d:73:
40:5f:84:e8:9f:ec:c7:8a:51:94:09:6f:bc:4e:08:66:3a:69:
c8:3c:b7:e1:b9:b5:e1:89:76:fb:38:59:12:39:19:f7:c0:83:
a1:cb:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net