Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0oEDwB_K1Rh5Tj0QrNjW4tXqBAU.roa
File: 0oEDwB_K1Rh5Tj0QrNjW4tXqBAU.roa (raw, json)
Hash identifier: e7oC9ZaREqsokr+GkwSfpHLVo+OUNz3HdcPalRWvAj8=
Subject key identifier: D2:81:03:C0:1F:CA:D5:18:79:4E:3D:10:AC:D8:D6:E2:D5:EA:04:05
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019428251B4C9FD717EDDCD2E69A518CB1C7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0oEDwB_K1Rh5Tj0QrNjW4tXqBAU.roa
Signing time: Thu 02 Jan 2025 17:51:47 +0000
ROA not before: Thu 02 Jan 2025 17:51:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 195.133.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:1b:4c:9f:d7:17:ed:dc:d2:e6:9a:51:8c:b1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d28103c01fcad518794e3d10acd8d6e2d5ea0405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:0c:03:85:2a:46:3a:47:b7:00:f2:fe:e1:
78:f8:1e:d9:85:f6:31:96:60:b3:66:b7:b0:fb:6e:
c0:89:23:4e:e7:eb:cd:63:ee:ff:75:56:ce:fc:4f:
1c:fe:e7:d7:58:6c:26:45:56:06:f5:a6:ea:74:6e:
33:88:14:0b:e3:27:87:ce:c3:56:8a:3a:9a:81:cc:
96:b7:99:94:47:0f:1f:e3:88:1f:ac:95:c9:ec:3b:
b0:11:18:6f:f2:02:af:d1:eb:96:be:cb:be:1f:87:
24:8f:ce:77:4b:06:db:01:ad:53:68:74:68:e9:3f:
ee:49:ce:0a:7e:ff:cc:66:4a:b5:e3:b6:7c:3a:b5:
d0:60:7b:13:fa:0f:f2:ce:e6:13:d9:10:d5:07:92:
2f:14:37:46:9e:52:0b:07:d5:08:55:b2:60:87:fc:
cf:5b:bf:f9:bc:10:61:46:a4:37:a9:98:1d:50:d2:
ba:65:80:37:df:f3:d7:36:31:89:d5:26:09:92:95:
ea:66:57:e3:9b:97:2b:d6:58:24:44:a8:9c:9f:14:
10:51:bb:5a:1c:b7:1f:36:d7:fa:f7:61:9a:f7:01:
42:d1:91:4c:f0:4f:48:23:5d:a5:7b:51:c1:13:5b:
84:90:ed:00:c9:f9:cb:f9:41:42:b9:67:d9:c2:6d:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:81:03:C0:1F:CA:D5:18:79:4E:3D:10:AC:D8:D6:E2:D5:EA:04:05
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0oEDwB_K1Rh5Tj0QrNjW4tXqBAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:eb:82:76:08:c1:40:ff:e0:1b:02:56:55:6e:98:94:41:3f:
c0:c7:88:26:87:4f:7d:22:73:81:1d:e4:11:2d:1c:92:59:5b:
0a:a6:a2:79:fd:6f:59:a6:47:1f:87:0a:dd:8c:31:c3:e1:6c:
1d:9b:4f:e0:62:0d:9b:b7:d2:4a:d4:1a:63:65:5e:8a:d8:1c:
c6:ea:0e:a3:c4:e9:a7:e3:be:71:3b:01:d9:da:e1:b0:0e:41:
f1:97:5a:60:1e:59:3b:da:fe:ca:5c:a1:d7:8f:7b:77:19:15:
e0:bd:25:22:e0:ef:8a:8a:82:26:29:a3:8c:04:19:ee:c0:3e:
bb:34:78:83:6e:a3:1c:dd:5a:a1:87:e1:1c:c2:06:f8:75:2d:
69:7c:77:e2:4e:8d:93:bd:db:04:dc:c3:ba:c3:2c:04:56:5e:
03:1e:be:09:b8:bb:09:e2:56:10:11:6f:0a:46:db:39:08:16:
a4:ab:b1:60:f0:49:4e:f6:99:d7:64:f9:71:ec:4f:05:ce:52:
87:83:4a:50:12:2c:ee:82:30:13:97:73:7f:1c:99:43:92:c4:
65:e5:d4:bf:b8:40:6a:60:4e:14:eb:cc:e5:93:1e:ee:25:cc:
55:7f:74:88:ba:d1:23:2e:76:11:1e:97:02:c6:3c:cf:db:b2:
fa:4c:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:17:07 2025 by rpki-client