Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JfRRH0_M6QuhfcmhHQGM34_LTvo.roa
File: JfRRH0_M6QuhfcmhHQGM34_LTvo.roa (raw, json)
Hash identifier: WHe+AgnNh+VdG5MyIWuegTGSGqZBtRrrLEtDznIQ8zQ=
Subject key identifier: 25:F4:51:1F:4F:CC:E9:0B:A1:7D:C9:A1:1D:01:8C:DF:8F:CB:4E:FA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195753851A30877BFDF219A70F2C524356E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JfRRH0_M6QuhfcmhHQGM34_LTvo.roa
Signing time: Sat 08 Mar 2025 10:06:19 +0000
ROA not before: Sat 08 Mar 2025 10:06:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 195.133.54.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:75:38:51:a3:08:77:bf:df:21:9a:70:f2:c5:24:35:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 8 10:06:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25f4511f4fcce90ba17dc9a11d018cdf8fcb4efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:17:1d:51:8f:d5:5c:e0:9b:94:0b:7d:5c:
43:db:f2:d5:22:6a:48:ac:0d:20:97:c3:dc:97:5c:
f8:7b:e4:40:bd:ca:ca:31:83:d8:68:bd:3c:6c:5c:
d0:34:fe:44:21:3f:87:3b:5f:80:85:80:52:c1:a1:
20:e9:f9:28:c2:99:9c:a2:08:e4:58:5c:47:a5:04:
69:6b:15:c2:21:94:5d:67:f6:87:7a:04:3d:16:95:
5a:e6:79:7a:d6:c1:de:8b:02:d2:ab:03:0f:bc:cc:
85:f6:d6:d6:c7:18:2f:3a:1a:b3:8a:4a:9b:10:93:
56:8f:6f:d8:d2:0a:99:a8:7a:9f:cc:e7:cb:e1:34:
8b:64:37:87:97:a0:28:21:71:1c:57:5a:cc:d9:c0:
a9:d8:97:e1:d7:d3:7f:bc:c1:2f:a9:ff:c5:a0:b3:
e8:f3:2f:8a:67:58:91:75:9c:43:c6:40:4c:91:bc:
f3:9c:a9:64:83:82:45:b1:d7:8b:e5:8d:a1:3f:3f:
d5:36:2b:10:f3:b3:5f:0c:ef:cf:00:19:4f:98:d0:
fc:bc:b1:48:33:9d:73:ee:b1:f9:7e:da:c1:7f:c5:
1d:67:83:1c:73:c2:19:b6:dd:ed:59:51:ba:19:01:
15:60:04:f1:e6:c9:fb:52:ef:52:a5:9e:e4:fa:8c:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F4:51:1F:4F:CC:E9:0B:A1:7D:C9:A1:1D:01:8C:DF:8F:CB:4E:FA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JfRRH0_M6QuhfcmhHQGM34_LTvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.54.0/24
195.133.74.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e3:05:1e:bb:c8:b1:c8:0a:5e:28:cb:cc:37:8e:30:e7:96:
b2:ff:24:93:85:dd:88:e1:f3:b0:74:48:58:95:24:00:63:74:
4a:a8:f0:cb:45:81:34:72:c6:b5:c5:41:56:a4:cb:a7:6e:83:
f9:22:ad:76:65:2e:4f:d5:18:03:03:59:40:03:9b:58:e8:9c:
5c:d6:34:c3:bb:e2:a4:fe:93:05:5f:c0:f7:64:ff:24:f3:20:
82:bf:ab:ac:b9:68:f4:56:d5:27:a2:64:a2:31:32:c3:ee:73:
9e:17:a9:31:06:dc:b3:75:76:19:3c:4b:85:4e:81:f4:4f:5d:
66:b3:d5:6e:f1:7b:b8:a5:ff:55:52:ed:36:c6:dc:3f:8a:29:
12:b8:10:68:9f:11:12:a6:b4:d5:98:07:f5:ed:fe:21:4f:9b:
6d:c4:2e:38:68:d1:06:8d:94:5a:31:75:ae:5d:38:dd:bc:0c:
79:99:b8:b4:9c:e2:49:52:cb:10:20:2e:47:3a:c0:ec:b9:17:
d3:8e:bc:cb:ee:45:fe:eb:58:81:96:0d:22:ef:8a:bf:25:30:
42:c0:d0:c1:f4:81:2d:aa:2f:1c:6b:d6:6c:aa:a5:0a:f5:a8:
5c:21:14:62:7e:f2:e2:53:2c:26:de:ec:29:75:ae:e3:4f:3a:
c4:bf:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:55:35 2025 by rpki-client