Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/r-mMpss0ZPS6wfcro6Yc6v3bf5I.roa
File: r-mMpss0ZPS6wfcro6Yc6v3bf5I.roa (raw, json)
Hash identifier: AfE+ZyYoM7YopSTeu6QdJkZ27/i6Ksf0AYTOdnxfZrk=
Subject key identifier: AF:E9:8C:A6:CB:34:64:F4:BA:C1:F7:2B:A3:A6:1C:EA:FD:DB:7F:92
Certificate issuer: /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial: 01941F8C7459859CCE94539A01520D4741C3
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/r-mMpss0ZPS6wfcro6Yc6v3bf5I.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8775
IP address blocks: 195.69.156.0/22 maxlen: 22
195.69.156.0/24 maxlen: 24
195.69.157.0/24 maxlen: 24
195.69.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:74:59:85:9c:ce:94:53:9a:01:52:0d:47:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afe98ca6cb3464f4bac1f72ba3a61ceafddb7f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:5f:10:ed:1f:c8:84:34:65:61:bc:f3:be:
89:99:67:97:91:2b:c7:08:38:87:37:4f:a0:67:0c:
52:37:a2:3f:4e:41:f3:26:15:70:e9:c8:20:b3:cf:
b7:47:b6:f4:d1:3a:9a:8d:1f:9e:b9:b4:63:1e:0e:
87:02:39:2b:fa:0e:f1:38:ac:2b:24:12:d8:7c:9d:
f9:47:04:71:20:f8:db:5d:27:7d:88:7e:5b:28:bd:
1e:b1:a4:59:2a:d4:2c:50:48:03:e3:93:ed:26:ba:
a5:6f:ef:3e:75:e4:ea:40:b6:0e:d3:fa:35:24:ab:
cc:7a:ea:be:9f:ab:56:3d:29:6b:69:31:d8:de:d7:
99:6c:76:2f:a7:69:98:3e:8f:51:84:a5:c6:6d:f4:
53:29:db:b3:2c:0d:7d:28:ff:4d:1b:d3:fe:f0:ea:
3d:25:eb:62:90:e8:d1:7c:4a:9c:e2:c7:04:95:78:
3f:66:b2:85:38:1f:a8:61:61:33:ae:ec:58:3d:78:
d4:4d:f4:2d:fe:fd:f2:ce:ac:2c:7b:e6:7b:dd:f5:
40:da:c2:cb:70:98:9c:3e:f5:f0:54:8b:bc:e0:3c:
f0:bc:0c:c6:a8:89:02:58:b1:5c:69:2f:9d:55:9e:
d3:a0:81:cc:ad:f9:01:bc:da:93:d9:31:3d:8f:21:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E9:8C:A6:CB:34:64:F4:BA:C1:F7:2B:A3:A6:1C:EA:FD:DB:7F:92
X509v3 Authority Key Identifier:
keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/r-mMpss0ZPS6wfcro6Yc6v3bf5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.156.0/22
Signature Algorithm: sha256WithRSAEncryption
38:bc:2a:45:16:30:e3:ba:3f:34:b3:af:9b:99:b1:91:70:08:
a0:ee:a1:9a:45:5d:6d:da:21:ab:44:b9:9b:ff:13:b5:48:3b:
0e:44:51:34:9e:7e:28:ef:c0:49:67:b2:d4:27:1d:fc:e6:0e:
14:43:47:9d:2a:90:1f:fb:4a:7d:c5:6c:4e:dc:ae:1d:b0:b9:
04:69:33:cd:92:2c:74:07:db:dd:0a:56:32:53:95:9e:e9:ee:
10:48:99:7a:45:4a:66:ac:7e:65:88:d3:c9:55:3c:99:77:28:
be:62:d1:a9:b5:11:de:05:5c:ea:ec:44:de:0e:6a:22:8e:32:
c9:44:20:a0:7f:16:29:26:45:93:c5:51:0e:bd:f1:52:32:83:
06:6e:3f:b0:2d:97:17:bf:34:b8:72:0f:bc:18:0b:7a:5a:b1:
37:19:cd:90:63:ec:16:ac:17:36:07:b3:db:f0:76:3e:25:13:
cf:a6:b8:82:a5:ff:a3:24:be:fa:8e:48:bb:05:aa:4f:5e:db:
b3:aa:ba:99:cf:1e:cf:9f:dc:ea:12:a1:76:89:8b:ae:7b:64:
99:af:3a:58:5e:51:72:6d:48:2b:67:72:58:4f:7e:ca:65:35:
1d:bd:82:49:93:8b:e2:66:eb:3f:27:0b:fb:63:4f:52:e1:88:
0e:1b:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:08 2025 by rpki-client