Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YSnRmh8imGDTNq7Rbgx4mbP41SU.roa
File: YSnRmh8imGDTNq7Rbgx4mbP41SU.roa (raw, json)
Hash identifier: N8ErcClgwwfv0148M/2U8j8BXzNhfFtKAm+UVM/x4qg=
Subject key identifier: 61:29:D1:9A:1F:22:98:60:D3:36:AE:D1:6E:0C:78:99:B3:F8:D5:25
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 019518DF4E74E6F2C3314C21094787171127
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YSnRmh8imGDTNq7Rbgx4mbP41SU.roa
Signing time: Tue 18 Feb 2025 11:44:02 +0000
ROA not before: Tue 18 Feb 2025 11:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213291
IP address blocks: 195.242.0.0/23 maxlen: 24
195.242.7.0/24 maxlen: 24
195.242.8.0/21 maxlen: 24
195.242.16.0/20 maxlen: 24
2a13:5940::/32 maxlen: 32
2a13:5945:7::/48 maxlen: 48
2a13:5945:c::/48 maxlen: 48
2a13:5947::/40 maxlen: 48
2a13:5947:130::/48 maxlen: 48
2a13:5947:150::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:df:4e:74:e6:f2:c3:31:4c:21:09:47:87:17:11:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Feb 18 11:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6129d19a1f229860d336aed16e0c7899b3f8d525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:4c:d6:2e:f3:59:79:b3:8a:e6:a8:a8:1a:
66:20:1d:b0:da:e9:2b:20:29:44:75:9d:c3:fb:f7:
bc:6f:f3:79:26:58:be:a5:54:a8:55:7f:37:e6:0a:
9e:6f:f4:b2:97:b1:61:d4:15:a0:32:b6:9c:80:fe:
8e:d1:dd:24:90:77:28:5b:6b:dd:5d:59:42:4c:1a:
7a:2b:41:29:5a:99:23:34:d3:80:bc:67:8a:01:20:
55:db:53:9b:c1:1a:e1:aa:50:da:cb:ae:c2:b2:2c:
27:7e:f4:e2:99:d5:a8:52:2c:6a:c9:28:0b:d5:25:
4d:61:6d:c1:9b:32:f8:b9:c3:3c:54:22:3f:6c:68:
49:81:f1:2e:10:db:4b:7a:ed:5c:37:86:ce:47:35:
39:83:08:02:94:00:90:73:2b:c4:98:ff:99:4d:6a:
22:fc:32:8b:64:78:7d:86:54:08:1d:ec:66:7c:76:
a1:88:67:b8:21:91:a9:de:54:25:0e:07:f6:ca:1c:
af:17:e8:e7:f9:6d:23:b2:81:71:4f:f4:6a:4c:95:
c8:09:f4:18:60:88:f9:69:56:d7:f9:22:a6:5c:f2:
45:0d:ab:87:7b:e8:92:4c:8c:f5:62:82:a0:04:bb:
d1:11:f4:7d:79:1d:fb:fa:35:08:fd:0b:a6:c0:b8:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:29:D1:9A:1F:22:98:60:D3:36:AE:D1:6E:0C:78:99:B3:F8:D5:25
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YSnRmh8imGDTNq7Rbgx4mbP41SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.0.0/23
195.242.7.0-195.242.31.255
IPv6:
2a13:5940::/32
2a13:5945:7::/48
2a13:5945:c::/48
2a13:5947::/40
2a13:5947:130::/48
2a13:5947:150::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f5:e6:bf:39:29:7c:49:a8:39:2d:72:8f:b3:59:21:bb:39:
2e:47:5d:89:b2:41:8c:ec:2a:45:14:ed:cd:34:97:a7:d6:be:
b8:23:66:c7:d8:b3:c5:21:5e:95:4c:27:f5:b6:13:fd:0e:a1:
ea:fe:c6:74:75:59:b9:be:dd:8f:97:8b:35:fe:f7:2a:10:8d:
4b:b7:17:55:b4:3a:24:4c:4e:c7:0e:c4:a6:62:bc:84:d4:32:
a2:93:f9:b0:44:df:86:65:e0:61:c5:28:7f:e8:b6:4f:d7:cd:
00:c5:c7:dd:97:bb:f3:1d:e3:54:2c:01:9a:a7:3a:cb:6f:fd:
c6:60:dd:36:73:33:aa:4c:84:26:a1:4f:77:77:04:f2:85:67:
e4:98:52:09:b5:56:99:6b:c1:d2:06:ba:70:59:6d:66:75:9d:
5b:e8:93:24:a1:2b:cf:84:8e:b5:7a:ac:17:26:6b:ae:7b:a5:
0d:b9:c1:68:e7:a2:28:76:ad:ad:f8:97:51:41:2c:2a:a8:ee:
6b:a8:01:43:31:69:a9:6f:13:8e:59:55:03:3b:24:2f:db:a6:
6d:94:2a:cb:cd:07:ea:99:04:48:45:b1:6b:63:b6:42:2f:fe:
14:85:a4:ad:f1:23:6f:b3:63:e2:b6:54:3d:12:a4:00:5f:cd:
65:d4:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:47:28 2025 by rpki-client