Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/rEjgEhZzL4goWIA1kujfN_BwihE.roa
File: rEjgEhZzL4goWIA1kujfN_BwihE.roa (raw, json)
Hash identifier: j3AflFklIT5kR+h++zJX2Hgi1qkfo3rJgP91fSsoBso=
Subject key identifier: AC:48:E0:12:16:73:2F:88:28:58:80:35:92:E8:DF:37:F0:70:8A:11
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 019617840C493698146852AB812AC48B3C20
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/rEjgEhZzL4goWIA1kujfN_BwihE.roa
Signing time: Tue 08 Apr 2025 22:27:31 +0000
ROA not before: Tue 08 Apr 2025 22:27:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50643
IP address blocks: 195.191.200.0/24 maxlen: 24
195.191.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:84:0c:49:36:98:14:68:52:ab:81:2a:c4:8b:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Apr 8 22:27:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac48e01216732f882858803592e8df37f0708a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:2c:63:ec:fd:93:3b:4b:4e:f2:23:a9:15:
f8:af:29:62:8c:ec:e8:2d:13:c3:84:85:05:27:6d:
fd:a7:73:54:19:fd:c1:70:03:c6:10:1d:2c:1d:59:
50:ea:74:3a:21:ae:9d:df:0e:51:48:2a:9f:77:bc:
c5:fc:f4:34:cb:a6:f7:58:d4:b7:69:c8:8a:10:f3:
c2:51:f8:ec:79:2a:4e:bd:a4:84:6d:13:64:43:3e:
f4:15:7c:c3:e2:ff:90:c1:cc:b5:d0:41:b7:7b:47:
f1:ae:15:6d:8d:76:2b:45:94:3a:88:9a:5c:ea:ee:
c4:f6:6a:ca:cc:6f:1e:b8:70:0e:18:02:f6:34:44:
81:f4:ea:31:76:db:99:f6:f8:3f:29:50:31:19:82:
7b:b4:bb:97:25:e8:21:97:ac:2e:f1:ea:9a:c1:25:
81:d5:03:01:a9:15:67:81:99:54:7b:b3:5f:ae:7f:
25:e6:d1:19:c8:bb:d1:cb:8a:06:1f:ea:e0:c0:16:
ae:97:53:45:50:58:5a:1c:51:9b:e6:eb:3f:67:ee:
e6:89:2b:8f:e5:ec:49:36:05:c9:49:f3:9c:43:dc:
40:d6:c0:aa:b7:5c:21:a2:25:7f:66:2c:cd:05:a2:
ef:f4:eb:18:66:29:ce:0c:c3:3c:91:1c:d2:52:71:
83:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:E0:12:16:73:2F:88:28:58:80:35:92:E8:DF:37:F0:70:8A:11
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/rEjgEhZzL4goWIA1kujfN_BwihE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.200.0/23
Signature Algorithm: sha256WithRSAEncryption
40:f4:f1:4d:fc:21:3c:56:37:36:0e:6c:b3:64:64:e4:52:5c:
5b:c9:2b:33:44:81:43:e0:d9:69:83:6a:9e:34:79:16:ce:ac:
9c:f3:93:76:24:25:5e:3e:c8:97:a5:69:35:36:28:72:37:b4:
4e:53:f3:2b:ac:40:b1:72:3a:a4:9f:23:7c:f9:cb:0b:0f:7e:
7b:7b:53:e2:af:55:9b:38:b5:88:9a:45:53:e5:9d:e9:f9:4a:
d1:e4:97:26:4a:eb:52:32:f4:3d:ba:5d:b3:a5:9c:ee:4a:ee:
e7:ff:72:06:2f:fd:e3:a6:08:d7:d7:7c:ee:38:0a:74:d2:61:
cb:ed:16:cc:13:07:47:63:65:aa:d0:6a:4a:a0:98:ad:df:6e:
b0:58:2e:1b:f6:57:11:9b:ba:b0:7f:c5:26:a0:92:a8:e8:a1:
c4:73:a5:c8:69:23:e3:84:42:9b:12:98:15:5d:fe:8e:5e:ba:
97:40:d5:25:3e:4d:35:b8:26:99:13:ed:cb:b6:68:a0:56:0f:
59:7e:31:34:e9:b1:df:1a:88:97:e4:4d:3e:9a:d0:4e:78:39:
d2:3e:2e:79:93:eb:45:7b:0b:7c:cb:e5:50:2a:17:13:77:cc:
0f:8e:40:48:b3:ba:42:ed:fc:2b:86:ca:5f:f7:75:5e:7e:cf:
93:ac:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net