Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ekzy4TbSmKoAngHD6nt1XvIY_kg.roa
File: ekzy4TbSmKoAngHD6nt1XvIY_kg.roa (raw, json)
Hash identifier: S4bTYJiZvd+MIyq2CNE9A391k97deJn0Ljqufvr/oI0=
Subject key identifier: 7A:4C:F2:E1:36:D2:98:AA:00:9E:01:C3:EA:7B:75:5E:F2:18:FE:48
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3EA6F3DD5407C70E58E954EC31AF5
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ekzy4TbSmKoAngHD6nt1XvIY_kg.roa
Signing time: Thu 02 Jan 2025 01:49:18 +0000
ROA not before: Thu 02 Jan 2025 01:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205715
IP address blocks: 188.95.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ea:6f:3d:d5:40:7c:70:e5:8e:95:4e:c3:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a4cf2e136d298aa009e01c3ea7b755ef218fe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:04:5f:20:25:c5:d3:d1:d8:48:bd:9d:f5:
22:c6:06:1e:10:c7:96:7b:ab:a3:6b:93:ec:3e:7e:
0a:1b:3b:f9:95:09:81:9e:32:aa:26:8f:ef:c8:8e:
08:f8:4d:16:fa:ab:e2:98:f6:be:d1:cd:11:ce:f5:
3f:77:7e:32:ef:62:f1:d0:4f:c9:58:57:c6:db:57:
84:41:53:e7:42:94:53:69:2b:61:b0:cc:70:08:47:
b9:de:8e:a8:38:33:8a:e5:22:36:1b:70:08:c9:e6:
4c:cb:0c:95:fb:2a:d8:75:ab:ff:1a:e1:0b:cb:32:
0e:f3:a1:4c:a2:fc:b5:b2:f6:8c:0a:07:4a:7e:3e:
f8:fa:39:15:5f:71:cf:1b:72:42:db:a5:6f:2f:10:
85:f9:77:2d:f8:d3:5f:68:72:ae:8f:e5:8d:d8:d1:
32:11:09:03:65:6f:9d:c2:92:1d:71:05:1d:76:b8:
81:c8:a7:d0:20:a3:a4:c2:5f:cb:e9:63:d5:2f:de:
d0:d6:d9:53:5f:ea:38:c5:5d:8b:fd:a8:33:92:f5:
e6:d3:a9:b9:7e:25:a0:2c:0f:ff:18:e3:14:73:0e:
22:02:e3:40:f1:30:73:72:e6:5f:84:14:25:00:2e:
77:84:eb:08:b3:b7:6d:46:1e:08:91:b8:d6:a6:f6:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:F2:E1:36:D2:98:AA:00:9E:01:C3:EA:7B:75:5E:F2:18:FE:48
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ekzy4TbSmKoAngHD6nt1XvIY_kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.148.0/23
Signature Algorithm: sha256WithRSAEncryption
37:30:74:a9:34:67:9a:e4:c1:72:39:b2:a5:df:df:db:9d:8a:
4a:65:71:72:4a:94:b1:14:b9:cb:73:62:35:80:3c:6c:7e:3a:
18:8d:e4:cf:31:40:80:3b:61:b9:83:7c:87:f5:c9:c1:85:d7:
5c:57:a8:5e:11:2f:47:64:53:f4:6d:61:e8:a9:14:8b:a2:36:
1d:a4:d1:a2:1a:98:8e:0f:b1:4c:1d:52:dc:91:07:23:7b:03:
d4:9f:0e:ed:c2:c9:34:8f:31:a9:f6:cd:ec:76:25:ce:4b:74:
af:12:05:34:e7:7e:c7:06:df:24:86:3d:25:ce:f8:01:f7:e0:
9c:cf:1d:36:60:d8:52:9a:41:dd:dd:b1:98:3a:a2:49:18:b1:
f3:2c:7e:23:1d:c6:d9:5e:64:c3:1c:35:d3:0b:74:2f:e7:3d:
67:bd:e3:70:6c:7b:7e:65:30:46:d7:c7:2c:f0:07:69:92:84:
42:d0:fa:e4:f7:86:cd:46:da:73:01:31:0c:f8:7d:09:3e:bc:
20:d5:0f:dc:b0:4d:89:5d:6e:c0:bd:b6:60:d3:a3:6a:de:90:
cd:fa:cf:db:fb:80:8c:ab:98:5b:43:78:6d:34:26:63:6a:82:
47:4d:78:7f:e8:93:df:e7:78:9e:0f:80:07:0d:66:74:61:1f:
94:d7:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:40:21 2025 by rpki-client