Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa
File: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (raw, json)
Hash identifier: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=
Subject key identifier: 02:11:9A:70:06:51:3B:C1:B1:DE:13:41:82:20:E3:97:8A:19:82:A2
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019422FAF21FE604C17E0FF13F2FE0BCC7ED
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 195.170.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f2:1f:e6:04:c1:7e:0f:f1:3f:2f:e0:bc:c7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02119a7006513bc1b1de13418220e3978a1982a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:24:47:57:dd:e0:ec:10:03:a0:cb:e6:de:
3c:b1:14:ca:c1:8b:20:60:cb:71:1b:9b:61:59:c8:
42:c1:14:94:1e:cc:83:5f:4c:f1:c2:2f:28:b6:c7:
38:88:ba:74:a8:f4:5b:4f:af:d1:76:c8:0a:f6:5b:
e7:6b:86:e6:f8:61:5c:16:ac:ab:fe:24:4f:b0:e1:
e4:50:fe:f2:16:9f:b7:87:67:78:ac:3c:e5:11:0e:
09:8e:25:00:06:43:75:7d:4a:dc:ad:69:61:ec:16:
21:64:e0:d6:60:a3:c6:2f:70:b1:0c:bb:b9:8b:04:
73:e5:f2:96:48:38:c2:0d:b0:ae:98:73:a7:6d:fe:
cd:7a:b6:bb:79:bd:d1:f3:92:a7:39:e3:84:40:ad:
88:0a:c2:be:a2:47:80:46:ea:10:b8:84:dc:ba:a1:
46:4c:3f:21:0b:4d:68:de:44:58:af:96:dc:30:2b:
5e:37:21:f3:76:c1:40:88:86:39:48:49:9e:ab:01:
21:1f:1c:44:79:c5:d7:a4:64:d0:82:9f:9d:c8:f7:
e1:fb:53:0f:7f:94:8d:12:5a:97:45:3a:41:df:97:
28:c1:5e:84:62:b1:ce:64:b5:1c:97:c3:2f:4e:dc:
d6:0c:f2:ac:95:70:ee:50:a2:3b:3d:c6:9b:5c:1a:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:9A:70:06:51:3B:C1:B1:DE:13:41:82:20:E3:97:8A:19:82:A2
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:91:f9:a6:22:bd:f4:01:88:6a:38:07:0a:2e:71:b1:77:7e:
fa:06:ed:06:ec:2d:13:25:dc:93:26:d8:ac:1d:be:93:00:6c:
90:f6:fb:50:f0:c9:29:b6:e8:f2:f8:1f:72:69:0f:94:1d:be:
b9:fa:e3:c8:cb:1b:66:f4:c2:46:8c:5d:14:53:88:1f:10:38:
54:7c:5a:c6:d4:30:0f:89:79:fa:f7:cb:b9:aa:f8:ff:10:9e:
f4:44:f1:9f:34:80:fe:96:cb:5c:54:a0:72:30:c2:14:05:52:
20:33:09:b3:9a:a7:4b:c5:77:28:f5:17:b0:95:60:3a:51:10:
7b:2c:e9:e0:69:0a:5a:27:74:19:59:64:eb:1a:5e:9e:0f:e0:
b1:e4:d0:96:0d:5a:a2:72:77:1b:55:d4:00:24:b8:6f:8d:83:
fd:ed:b0:03:45:34:54:02:78:37:b2:35:17:8f:9b:49:d3:7e:
cc:af:3e:de:4d:0d:b1:5b:9a:92:38:54:4a:56:18:53:4c:a8:
4e:fa:b5:43:25:58:07:92:fe:9d:91:8b:b7:04:74:56:dd:0f:
99:60:5a:08:b8:7a:15:71:e8:ce:cc:26:7e:73:0b:f0:4e:86:
cf:eb:56:27:cc:49:ee:af:3d:47:c5:33:78:0c:bd:e6:e6:b5:
09:68:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:50:10 2025 by rpki-client