Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/S9AbMMmI-W6758Mc0rdp8R8RYUo.roa
File: S9AbMMmI-W6758Mc0rdp8R8RYUo.roa (raw, json)
Hash identifier: wuoMswTF+3SJ2GBcah+3WBFiiijXs46nFWjmMXpYJO4=
Subject key identifier: 4B:D0:1B:30:C9:88:F9:6E:BB:E7:C3:1C:D2:B7:69:F1:1F:11:61:4A
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746F041B99CF29B98C484DF2D5533A8
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/S9AbMMmI-W6758Mc0rdp8R8RYUo.roa
Signing time: Thu 02 Jan 2025 13:49:07 +0000
ROA not before: Thu 02 Jan 2025 13:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42962
IP address blocks: 195.180.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:f0:41:b9:9c:f2:9b:98:c4:84:df:2d:55:33:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bd01b30c988f96ebbe7c31cd2b769f11f11614a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:4e:d7:d5:0e:95:df:b1:cb:6b:24:78:23:
b7:f2:20:6c:1d:5e:29:c0:c4:f3:af:d3:d9:dc:2b:
84:61:92:8c:cb:b3:cb:7f:f3:9b:59:74:5e:17:61:
9e:fe:e1:4a:f7:df:28:6a:19:06:95:43:c8:e2:7c:
b5:61:1f:47:17:96:fe:3e:01:5a:49:eb:78:36:92:
3e:4b:dc:a9:58:8c:62:b4:46:46:12:0e:bd:bc:8a:
85:12:c0:81:fd:59:43:d9:f0:2e:28:82:47:3b:db:
e8:b7:71:d8:be:7b:ff:ae:ba:5b:39:46:80:a9:a7:
05:21:c9:69:36:21:4e:42:a9:ac:b7:c8:fc:19:c1:
8b:bf:fb:59:4a:96:61:9e:a3:34:21:1e:35:ab:f6:
5e:df:88:63:f1:a7:4e:2b:f5:38:4d:c4:2b:08:65:
01:0b:00:d4:3c:96:12:60:d1:68:1e:63:77:e1:d2:
6b:8b:e6:5d:fa:e5:ad:6a:9c:82:c5:fc:33:f3:dd:
33:87:1b:56:4a:4a:9c:e9:f2:74:3d:f6:40:7d:a1:
56:01:24:03:79:e9:b7:9a:e8:7e:10:75:1b:23:86:
80:42:a2:5e:79:96:ce:4a:d8:12:3b:9a:94:05:7e:
a2:fa:b3:75:93:4b:c8:f4:b2:c7:32:c8:5c:90:89:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D0:1B:30:C9:88:F9:6E:BB:E7:C3:1C:D2:B7:69:F1:1F:11:61:4A
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/S9AbMMmI-W6758Mc0rdp8R8RYUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:61:52:d9:28:b5:8e:09:a6:32:27:e4:71:72:08:a1:c2:d5:
df:e0:b6:e6:16:3c:13:78:9f:25:dd:f8:74:9b:35:51:f2:07:
75:e1:d3:9a:9c:47:6c:46:de:39:70:38:90:91:3e:bb:61:a8:
1a:9c:b1:d1:15:fd:cd:0c:c3:09:e7:f7:73:1e:71:3c:be:19:
5a:b6:ea:14:cd:f1:15:92:15:be:08:72:69:91:77:b1:9b:1f:
a0:c6:76:00:bf:af:57:a2:7a:ba:6c:69:70:9a:3a:03:ab:79:
82:f9:ae:c8:c8:63:84:f3:01:c0:bf:94:2b:11:ce:b9:79:74:
aa:45:7e:83:f5:1a:bd:80:6f:d0:7a:d3:8b:46:94:f5:0b:6c:
fb:67:b9:8a:9e:25:5d:f7:c0:1b:c1:e4:02:f4:03:6e:cb:d2:
01:96:60:52:13:29:c9:25:77:0d:13:95:b0:07:ed:98:06:aa:
68:04:41:44:87:ae:5e:0a:f4:66:fe:7f:25:89:57:e0:b6:b0:
48:20:b8:65:57:5b:76:c6:d1:c3:d4:fa:1d:ce:a9:2f:90:6f:
ce:34:4e:28:09:37:60:8b:b7:b9:fa:b1:61:54:a6:a6:f4:8b:
e4:99:d0:19:88:da:da:f4:66:09:f1:6e:a5:90:14:83:53:c0:
b3:d9:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:44 2025 by rpki-client