Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/SIpXBuF5J8M21Gywmn86E22uiyU.roa
File: SIpXBuF5J8M21Gywmn86E22uiyU.roa (raw, json)
Hash identifier: 0/HkiIDr1xidzVLyjio2x3kYkY2H4uzUst02FaBMwU4=
Subject key identifier: 48:8A:57:06:E1:79:27:C3:36:D4:6C:B0:9A:7F:3A:13:6D:AE:8B:25
Certificate issuer: /CN=f3409b83d114c809211116ca2c8db38dce1680f9
Certificate serial: 019420D5FC59F0D40A7603865AA2EDA687CF
Authority key identifier: F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/SIpXBuF5J8M21Gywmn86E22uiyU.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205590
IP address blocks: 195.110.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fc:59:f0:d4:0a:76:03:86:5a:a2:ed:a6:87:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3409b83d114c809211116ca2c8db38dce1680f9
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=488a5706e17927c336d46cb09a7f3a136dae8b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:03:61:11:e1:10:b7:03:98:e7:7b:93:4b:
01:f4:87:6b:41:a2:8d:b1:d1:e7:de:5d:07:cf:36:
2b:5e:97:9b:5a:99:d9:d9:32:c6:d2:8e:18:f9:08:
a8:92:bb:06:db:7a:21:c8:3a:76:86:8e:34:d7:2b:
ed:a9:ab:18:c4:8d:39:73:39:be:eb:bf:f3:57:8d:
ba:a7:39:f8:a2:2c:b3:fc:20:fa:b3:a6:fb:10:b0:
d6:c7:f6:83:46:95:4e:94:64:bd:9a:5e:6d:d3:c9:
9d:87:1b:d0:b5:be:a3:83:3a:90:50:2a:84:5e:25:
83:e3:db:0c:d2:f3:03:91:ba:45:0a:37:ac:97:47:
09:0f:2a:34:2c:11:f2:7f:a9:3c:98:80:ac:ac:5e:
4f:44:67:af:b7:36:78:2d:47:8b:ed:5b:b9:1c:8d:
ba:54:b9:4e:8b:58:f9:ed:3c:08:5b:71:bb:98:38:
c9:ec:9a:85:14:38:41:f4:8e:23:9c:4b:98:3c:c6:
ff:65:59:68:94:4f:9c:26:10:2f:82:66:de:e1:59:
fa:1c:54:25:df:74:ee:65:23:1f:d0:53:45:0b:c7:
33:ba:75:f9:a0:f2:3f:55:2c:da:67:ae:92:bc:94:
00:ba:b3:0a:e9:4e:f6:f2:d5:2e:5d:48:db:30:67:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:57:06:E1:79:27:C3:36:D4:6C:B0:9A:7F:3A:13:6D:AE:8B:25
X509v3 Authority Key Identifier:
keyid:F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/SIpXBuF5J8M21Gywmn86E22uiyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.30.0/23
Signature Algorithm: sha256WithRSAEncryption
17:30:13:7d:00:f4:c9:66:9f:b7:73:59:af:68:6e:3b:bf:44:
c0:f5:48:8d:8a:14:a7:45:b4:8a:f8:4a:0f:8f:09:8a:d0:9e:
6b:b3:ef:b8:78:e1:70:0e:95:ae:ea:4a:95:82:48:97:1a:8a:
7b:ca:70:be:ad:24:f3:17:2a:3a:1b:d7:21:21:20:4c:b6:70:
0d:95:47:87:30:d9:ea:e3:78:8b:f2:c6:9d:27:5e:0e:f6:73:
2a:af:0c:46:59:ac:ec:26:ab:2d:8c:ea:48:b6:24:76:c9:79:
78:55:c9:83:fd:44:52:e4:e0:d5:a6:5d:d0:df:80:ea:73:3f:
0b:eb:74:a1:be:cb:fd:3a:ee:af:cf:19:ff:eb:4f:d1:e6:01:
0e:1d:99:1e:28:51:4e:d7:23:66:1d:ae:16:a6:34:7c:70:01:
74:e7:d1:a6:4d:b7:09:f2:11:9e:a1:ac:85:e5:22:89:64:23:
6c:41:ae:ae:05:d7:a6:99:90:2b:d8:ad:59:69:ed:12:a6:4e:
76:28:39:78:7d:bd:98:f3:9e:73:92:75:19:42:11:06:70:01:
b3:15:72:6b:ad:39:a6:46:c1:5d:8e:01:de:ea:16:a7:d4:e6:
99:19:88:f0:bb:13:cf:27:7a:21:9e:7a:0b:72:aa:17:b0:ea:
01:15:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:41:02 2025 by rpki-client