Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-sNfu-G0jV767HtWi7qXtJhRTsg.roa
File: 1-sNfu-G0jV767HtWi7qXtJhRTsg.roa (raw, json)
Hash identifier: oW53W8GrvT3SrJ7XbTM5IdcKliRTOubmL6zIW4/ppWA=
Subject key identifier: FA:C3:5F:BB:E1:B4:8D:5E:FA:EC:7B:56:8B:BA:97:B4:98:51:4E:C8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01957063BD9BDDF02BF6E22832BF727F561E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-sNfu-G0jV767HtWi7qXtJhRTsg.roa
Signing time: Fri 07 Mar 2025 11:35:39 +0000
ROA not before: Fri 07 Mar 2025 11:35:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 195.133.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:63:bd:9b:dd:f0:2b:f6:e2:28:32:bf:72:7f:56:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 7 11:35:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fac35fbbe1b48d5efaec7b568bba97b498514ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:85:f0:60:3e:c1:00:24:da:59:d0:67:b5:
9a:0e:2f:fd:07:80:3c:6f:81:9c:ab:0d:43:f5:87:
b7:c7:de:69:db:81:3f:4e:ad:3e:60:f4:d1:f0:3f:
c7:f7:6f:26:f8:6e:7b:5d:f7:ed:1e:53:4e:65:57:
99:7c:92:e1:bc:9d:2a:f5:25:f1:9d:a1:7f:4f:6b:
b6:97:64:97:38:66:d7:50:3d:b8:90:25:af:fd:75:
f2:19:50:96:c0:c8:79:3e:0d:b7:f0:68:26:3c:11:
6c:b3:8a:50:4c:69:6e:8a:ff:4f:03:00:69:cc:cd:
e5:54:0c:aa:22:65:3f:dc:58:e2:86:a0:28:45:c4:
d2:b6:bc:60:27:7d:3a:98:54:51:1f:d4:01:d0:48:
5b:b6:83:fd:e3:d0:68:51:31:d6:9f:dd:c4:3c:c1:
55:96:34:44:6c:e7:1c:81:ec:1d:96:f2:8e:92:44:
5a:2e:56:8b:92:77:bb:54:8f:fc:00:8c:b0:cf:a7:
a7:b4:b4:fc:4b:17:ab:61:0b:af:11:ad:05:0a:ed:
9c:71:62:91:01:19:cd:e7:a0:f1:1c:38:f3:b2:77:
78:26:68:26:96:e0:c8:d7:7c:4f:e8:e6:f7:63:b5:
0a:e1:d9:d5:f1:e0:85:18:1c:70:78:18:06:de:2b:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:5F:BB:E1:B4:8D:5E:FA:EC:7B:56:8B:BA:97:B4:98:51:4E:C8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-sNfu-G0jV767HtWi7qXtJhRTsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.17.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:07:74:4b:8a:0a:33:e2:8d:d0:78:24:c4:12:16:39:a4:15:
26:5a:c0:6c:d5:39:9b:e1:4c:2e:13:b2:ca:6e:f8:15:65:ef:
1c:10:8e:9e:5c:12:5e:db:ca:ad:37:0d:5b:fb:53:3a:ae:96:
6e:db:77:c9:3a:02:fe:dc:9e:b8:5e:81:2b:b7:a5:39:10:be:
93:ea:9f:ce:8d:83:aa:84:7e:1b:bb:d3:09:f8:e0:39:49:cb:
83:89:28:cc:e2:ba:1b:d1:60:27:da:58:96:98:87:8e:09:8c:
f0:dd:a6:a0:79:e9:4c:ab:fb:4f:1e:77:2d:27:52:26:86:98:
c9:bd:83:0d:77:25:ed:86:0d:2d:62:da:24:2b:f3:1e:6e:70:
3d:27:b6:23:10:93:d0:57:d3:0c:c8:a5:08:87:18:b2:87:c4:
42:b6:7f:f8:01:f3:c9:7d:6a:03:0f:e6:da:7d:60:78:52:3c:
62:00:e5:86:2b:be:31:fc:b5:aa:ea:7b:5f:73:82:61:d4:3b:
3e:05:36:93:c4:39:9f:dc:27:ca:8e:f7:1c:37:a3:34:04:32:
67:4e:cc:4b:87:81:60:fb:27:1a:7d:c4:37:08:16:7c:53:1f:
c5:ce:b2:e5:34:c5:df:43:ea:c1:24:3e:17:9a:0a:59:0c:fc:
54:55:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:35 2025 by rpki-client