Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa
File: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (raw, json)
Hash identifier: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=
Subject key identifier: 62:B8:1E:35:5D:10:DE:DE:17:C3:9B:81:BF:5F:92:E9:8A:19:BD:BD
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 019424448E510C5BC9910F915BC39926F20B
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51305
IP address blocks: 195.226.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8e:51:0c:5b:c9:91:0f:91:5b:c3:99:26:f2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62b81e355d10dede17c39b81bf5f92e98a19bdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1b:4f:37:ac:9d:f7:51:21:e0:40:d6:8e:c1:
f6:c1:38:c7:72:17:29:03:54:8c:43:e1:e9:4d:44:
e4:c5:14:c5:d3:12:14:2c:5d:fc:d4:7e:f0:bb:a0:
1c:19:2d:5b:b5:8d:c2:f1:21:1c:7e:76:10:a4:7c:
bb:df:3c:86:0a:00:51:15:8d:ea:fd:a2:d4:a1:62:
ad:cc:61:7f:7d:83:98:50:92:f7:8d:21:66:bc:b0:
0c:39:d4:d4:0e:8b:55:cd:5e:c7:87:7d:c9:75:4a:
9b:e7:73:53:ef:92:0e:47:b6:78:d3:c3:f3:78:5f:
b2:a2:7a:72:3f:d9:36:f5:cc:e8:c4:93:d3:f3:8f:
72:77:55:38:bc:0b:89:94:82:30:74:e1:ec:be:55:
b0:e6:75:41:c9:2a:86:e9:bd:4e:46:83:11:19:0a:
1c:89:dc:b1:20:05:f0:57:8e:4f:ba:c0:cd:4d:7c:
9b:d3:64:ad:57:50:c1:4d:51:c5:d4:6a:27:07:a5:
18:d4:ff:67:f5:4e:0f:9e:71:ae:44:3e:96:59:4e:
6b:60:67:2d:14:7d:48:42:1c:80:58:55:1f:a7:53:
49:e0:e7:f2:83:a2:4f:b0:84:dc:ee:27:f5:15:61:
f5:07:f9:fb:86:30:64:f4:86:be:2b:c6:b8:e1:54:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B8:1E:35:5D:10:DE:DE:17:C3:9B:81:BF:5F:92:E9:8A:19:BD:BD
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.198.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:bb:94:c5:5c:52:ce:07:c1:23:6e:51:c1:ab:7e:08:76:4e:
18:f7:da:7e:15:b5:7d:05:34:ec:b3:c0:60:45:c4:ef:e9:b4:
e4:90:17:96:32:21:54:8f:b5:b2:f8:94:b2:9e:71:7a:7e:0c:
e2:87:16:a6:bf:87:c8:b1:dc:c9:cf:c1:b2:74:b0:a9:81:3a:
50:3c:ca:c2:90:94:93:25:9d:86:73:05:cf:b5:30:40:f9:25:
fd:e3:8c:7d:64:89:c2:7d:69:24:90:ce:92:d2:b5:16:9d:66:
45:94:df:61:8c:0e:39:2c:df:54:4d:60:b1:5a:a4:0c:91:5d:
5a:ee:13:67:40:a0:65:e1:a0:74:f0:ba:7a:e9:3f:01:d1:a2:
9d:b0:96:11:89:fc:72:de:a3:4f:88:03:1a:af:20:af:8b:bc:
d7:5f:ad:6d:94:f7:17:4c:35:b4:be:60:a3:fe:44:a1:a5:01:
84:ac:1a:28:0e:f3:81:5b:7c:a1:6f:55:52:65:6f:6f:89:f4:
8c:49:f2:1d:90:72:0a:1e:dc:98:22:1f:6b:85:3c:f3:30:81:
6b:25:93:71:42:61:85:62:c3:cd:a2:95:56:ff:45:a6:00:aa:
6f:e5:b5:d5:15:3e:34:1a:be:bb:3a:b8:bd:b8:49:88:d9:14:
27:42:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net